Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: xRRlpU9aOSD5kmIg5ru9+4H7nc6uOPgZ7W9vxol56ks=
Subject key identifier: EB:FA:F8:6A:57:0E:1D:C5:35:29:E5:3E:1B:04:A7:3D:48:F4:8F:7A
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 019A01B57052141BC5D0DE786E7EA4C6AEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: 0220
Signing time: Mon 20 Oct 2025 13:00:59 +0000
Manifest this update: Mon 20 Oct 2025 13:00:59 +0000
Manifest next update: Tue 21 Oct 2025 13:00:59 +0000
Files and hashes: 1: XTu5vjEexW769xTu81kG0hu1WhA.roa (hash: Ne41d2x1Hfl8GjUz/n/mltRHcHp7ZxByOWAV8Ao4X7o=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: WPTSCf4yvxZ4p3I0VzjCrn2AywjxQ2MDmPWjHjpF0kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:70:52:14:1b:c5:d0:de:78:6e:7e:a4:c6:ae:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Oct 20 13:00:59 2025 GMT
Not After : Oct 21 13:00:59 2025 GMT
Subject: CN=ebfaf86a570e1dc53529e53e1b04a73d48f48f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:88:98:ce:a7:e3:64:a6:a8:3e:77:d0:a4:bc:
46:74:3b:d3:54:a5:d1:66:de:cf:e7:a6:a3:17:e5:
cc:36:ed:75:a6:a7:7b:85:ff:e0:92:28:5a:9f:58:
92:56:95:00:a9:4e:b3:0a:83:66:90:cb:5b:84:16:
4f:97:d7:33:90:ba:2d:f9:82:94:85:2a:5f:4b:14:
dc:b2:b6:36:b8:ea:b0:57:7e:6f:79:29:2f:f7:3c:
00:ce:89:ed:5d:67:64:3b:01:6a:c3:15:2b:37:e0:
ef:9f:cd:2c:9b:46:58:be:63:c1:12:c0:16:11:36:
0b:4d:41:c2:0b:d6:59:03:85:fd:a2:70:e6:1b:02:
29:a1:74:4f:6b:9a:f0:37:ad:d3:23:f0:af:d8:95:
cd:b8:de:f0:e5:69:a9:10:ee:29:62:06:4e:58:93:
48:a7:6b:b8:06:a1:16:dc:6f:3c:2e:56:6f:05:86:
5b:f9:7a:79:9d:d3:66:5d:dc:3c:5c:04:23:6a:dc:
a5:d6:75:d2:0e:e0:47:3b:e0:26:34:fc:f0:2c:6e:
06:31:5f:4b:b7:7e:f3:e1:3c:01:7e:26:a6:94:8a:
03:f3:b9:aa:88:aa:c5:bd:7c:67:81:ef:5b:43:45:
0f:f0:02:5a:d3:01:39:04:78:aa:48:bc:34:58:3a:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:FA:F8:6A:57:0E:1D:C5:35:29:E5:3E:1B:04:A7:3D:48:F4:8F:7A
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:61:ae:a9:c4:e1:be:64:c3:7c:5e:64:00:50:e0:d4:3b:e4:
c5:32:1f:c3:9b:84:9e:cf:52:3f:4c:87:fe:00:b3:0d:c2:50:
b7:65:90:b8:7d:ab:c5:0d:ee:af:c0:25:28:6b:28:bb:f5:87:
a7:9c:f5:6a:09:a0:8d:2c:fa:95:cd:e7:d1:70:c7:c9:5c:21:
79:c3:cb:ef:66:3b:b1:c4:16:ff:91:3d:d8:e8:bc:51:40:d4:
59:d9:3a:03:69:76:c7:f1:d4:8c:32:35:85:41:b7:ce:a0:0d:
fd:f1:fe:94:b1:4e:43:9c:b4:22:02:b3:12:dc:4a:50:f8:41:
20:e4:35:5d:80:8f:79:b5:16:a9:80:cd:d9:fe:5b:ee:2d:d8:
52:19:ad:6c:01:05:d6:2c:9c:49:ff:67:fc:c4:22:a7:73:c9:
45:40:9e:a2:dc:c3:f1:40:21:fa:94:b1:d9:9e:22:76:3a:e3:
10:5f:40:62:aa:55:52:9f:b1:8a:a1:fc:0c:80:26:08:cf:8c:
bf:ba:57:92:7f:47:eb:aa:91:f6:62:f6:6e:64:f7:b2:07:00:
22:2e:60:a2:59:38:5c:c4:13:15:68:e5:af:c4:0c:e3:d1:39:
87:0e:1f:0f:4c:11:23:0e:23:00:a1:9c:33:d6:3f:79:bb:c1:
a1:7d:fb:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtXBSFBvF0N54bn6kxq74MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhY2IyODk5NTlhMmVjNGY4YTI4NDE5MTU0NDJjY2JkMzQ0
MjQ5MzgwHhcNMjUxMDIwMTMwMDU5WhcNMjUxMDIxMTMwMDU5WjAzMTEwLwYDVQQD
EyhlYmZhZjg2YTU3MGUxZGM1MzUyOWU1M2UxYjA0YTczZDQ4ZjQ4ZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YiYzqfjZKaoPnfQpLxGdDvTVKXR
Zt7P56ajF+XMNu11pqd7hf/gkihan1iSVpUAqU6zCoNmkMtbhBZPl9czkLot+YKU
hSpfSxTcsrY2uOqwV35veSkv9zwAzontXWdkOwFqwxUrN+Dvn80sm0ZYvmPBEsAW
ETYLTUHCC9ZZA4X9onDmGwIpoXRPa5rwN63TI/Cv2JXNuN7w5WmpEO4pYgZOWJNI
p2u4BqEW3G88LlZvBYZb+Xp5ndNmXdw8XAQjatyl1nXSDuBHO+AmNPzwLG4GMV9L
t37z4TwBfiamlIoD87mqiKrFvXxnge9bQ0UP8AJa0wE5BHiqSLw0WDpkAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOv6+GpXDh3FNSnlPhsEpz1I9I96MB8GA1UdIwQY
MBaAFJrLKJlZouxPiihBkVRCzL00Qkk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUt
ODY0ZmUzYmJkZWZkLzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hYjBkZjEtZGY0Yy00ODcyLTk4YzUtODY0ZmUzYmJkZWZk
LzEvbXNzb21WbWk3RS1LS0VHUlZFTE12VFJDU1RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGGuqcTh
vmTDfF5kAFDg1DvkxTIfw5uEns9SP0yH/gCzDcJQt2WQuH2rxQ3ur8AlKGsou/WH
p5z1agmgjSz6lc3n0XDHyVwhecPL72Y7scQW/5E92Oi8UUDUWdk6A2l2x/HUjDI1
hUG3zqAN/fH+lLFOQ5y0IgKzEtxKUPhBIOQ1XYCPebUWqYDN2f5b7i3YUhmtbAEF
1iycSf9n/MQip3PJRUCeotzD8UAh+pSx2Z4idjrjEF9AYqpVUp+xiqH8DIAmCM+M
v7pXkn9H66qR9mL2bmT3sgcAIi5golk4XMQTFWjlr8QM49E5hw4fD0wRIw4jAKGc
M9Y/ebvBoX37mA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:23:45 2025 by rpki-client