
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
File: mssomVmi7E-KKEGRVELMvTRCSTg.mft (raw, json)
Hash identifier: ueLTXeMNID6uXvPKQnUvK6xaFEF3KVk5GDKpNtv/3g0=
Subject key identifier: 75:29:78:5D:A9:70:AB:8B:51:09:48:2C:15:35:2B:9C:6F:E9:07:17
Authority key identifier: 9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
Certificate issuer: /CN=9acb289959a2ec4f8a2841915442ccbd34424938
Certificate serial: 0197B6A22666C5E03FB0CC923DBE53C5266A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
Manifest number: F0
Signing time: Sat 28 Jun 2025 13:02:49 +0000
Manifest this update: Sat 28 Jun 2025 13:02:49 +0000
Manifest next update: Sun 29 Jun 2025 13:02:49 +0000
Files and hashes: 1: XTu5vjEexW769xTu81kG0hu1WhA.roa (hash: Ne41d2x1Hfl8GjUz/n/mltRHcHp7ZxByOWAV8Ao4X7o=)
2: mssomVmi7E-KKEGRVELMvTRCSTg.crl (hash: HqDW6VKKIA3jOGNm1N1SZ0wSYt08ojGff58JKDpJWnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:26:66:c5:e0:3f:b0:cc:92:3d:be:53:c5:26:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9acb289959a2ec4f8a2841915442ccbd34424938
Validity
Not Before: Jun 28 13:02:49 2025 GMT
Not After : Jun 29 13:02:49 2025 GMT
Subject: CN=7529785da970ab8b5109482c15352b9c6fe90717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:af:cc:d2:db:42:f0:fc:a8:c1:af:79:44:
a6:69:4c:38:29:00:ef:c9:c3:da:88:9a:38:07:2a:
6c:95:9e:dc:f0:d9:1a:af:c9:f1:d5:18:98:ad:5d:
28:a6:0d:eb:85:0e:b5:e5:67:b5:df:6a:39:42:1f:
6c:cd:22:d8:04:b1:a0:5c:f5:15:84:6b:ad:a0:a1:
80:05:0f:fc:1a:0d:a6:f8:2c:62:00:87:70:96:bf:
35:b7:9b:5d:25:69:c0:86:26:eb:ba:59:7c:9f:d8:
19:17:3d:75:71:d1:81:1f:2b:c3:bf:22:82:62:d1:
a2:1b:2e:d2:5f:3e:f9:02:74:12:86:08:7b:87:62:
14:32:70:9c:36:42:e6:d2:62:e3:13:e0:58:0e:2c:
17:0e:08:1f:49:fb:6f:0e:f5:c2:c0:1a:e3:ad:58:
ad:fe:75:33:3b:e4:3f:94:da:00:8c:49:a9:56:e4:
c7:7a:3d:eb:95:86:fb:3d:c2:4d:c7:46:24:93:ce:
ea:36:47:51:be:47:4d:5d:29:e7:0e:bb:18:ad:00:
25:3a:79:5b:fc:65:ab:22:f0:ac:21:15:b6:4a:88:
3b:51:4b:1e:bb:c5:0b:ff:d3:ee:f5:7a:ad:42:61:
0f:6b:36:56:aa:fd:bf:a9:dc:8e:24:82:e3:66:1e:
d8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:29:78:5D:A9:70:AB:8B:51:09:48:2C:15:35:2B:9C:6F:E9:07:17
X509v3 Authority Key Identifier:
keyid:9A:CB:28:99:59:A2:EC:4F:8A:28:41:91:54:42:CC:BD:34:42:49:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mssomVmi7E-KKEGRVELMvTRCSTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ab0df1-df4c-4872-98c5-864fe3bbdefd/1/mssomVmi7E-KKEGRVELMvTRCSTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6a:fa:33:94:cd:21:c7:71:2d:10:36:dc:c5:a0:7f:ac:95:
fe:1e:79:f9:e2:08:65:56:d3:bd:f5:f6:cd:ec:49:34:80:f5:
22:63:fe:82:ae:e4:a3:3e:df:ea:4d:8f:23:2a:0c:be:15:b8:
f2:42:eb:ed:e4:c5:32:30:42:2b:c3:d5:7b:34:04:43:e2:06:
24:f0:e2:ed:2a:f1:86:04:7f:88:41:84:81:f7:f9:56:bc:bf:
d4:9d:b2:50:73:f4:11:75:1c:79:68:ae:25:99:d7:c6:70:02:
01:dc:88:5b:6e:ac:5f:1b:d3:20:7a:0b:0f:ed:aa:5b:54:07:
fa:41:e9:28:cd:8c:81:19:08:43:2b:6f:11:56:cf:61:f6:9d:
9c:6a:82:8b:02:aa:e6:b9:76:d4:2b:19:e5:53:72:17:ad:ca:
e1:08:05:4d:0b:79:ad:68:09:54:97:87:8b:76:99:8b:60:43:
1e:69:78:fd:b8:81:e7:da:78:25:8b:26:50:de:3b:c0:87:0a:
33:44:71:a6:82:de:03:72:20:e0:82:78:49:0d:3d:5d:e0:17:
eb:ca:bb:60:c8:41:8c:7d:c6:c9:40:97:44:9c:63:f1:be:bb:
96:85:87:d3:26:a2:dc:33:2f:87:cb:12:a7:a8:1a:3b:60:47:
55:be:cf:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:39 2025 by rpki-client