Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
File: mSuGCVzlWNLpYYcopEIoonvpCY8.mft (raw, json)
Hash identifier: gd8L3OFM8yqUVoWXXvQkj1c9Zztrhbb88haP9Y6F9AA=
Subject key identifier: 91:88:E3:5B:87:F0:1E:26:EA:A9:87:ED:75:DF:44:CA:55:49:EB:EA
Authority key identifier: 99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
Certificate issuer: /CN=992b86095ce558d2e9618728a44228a27be9098f
Certificate serial: 0198D705D213D0E8E0B390CB8D2689613038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
Manifest number: 1672
Signing time: Sat 23 Aug 2025 13:02:19 +0000
Manifest this update: Sat 23 Aug 2025 13:02:19 +0000
Manifest next update: Sun 24 Aug 2025 13:02:19 +0000
Files and hashes: 1: BlYJMM4ls15zJ30iXM_Rv84I-d4.roa (hash: MRyw1DsxxSYF8y5F3ROkLuVWefJpMb00uWwfBxmnsGk=)
2: e2BcAV15shqdiU98OktC9_gXkUU.roa (hash: rZS4+9XjUiv9YzxM45CHUYZIhLrSaA9eZkuie33ePcg=)
3: mSuGCVzlWNLpYYcopEIoonvpCY8.crl (hash: Uyd4rY8wJnyo9VxjweXo7ARfmg1uSTaKc2CAAVoOLow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:d2:13:d0:e8:e0:b3:90:cb:8d:26:89:61:30:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992b86095ce558d2e9618728a44228a27be9098f
Validity
Not Before: Aug 23 13:02:19 2025 GMT
Not After : Aug 24 13:02:19 2025 GMT
Subject: CN=9188e35b87f01e26eaa987ed75df44ca5549ebea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:01:df:10:ff:36:d6:80:97:f2:96:10:b4:a9:
f9:6c:98:c1:99:9a:7f:8a:e4:55:9f:d3:13:77:38:
95:df:67:84:84:29:93:af:bd:9a:15:b4:04:f3:15:
9c:ba:cb:cb:e6:e3:57:a4:66:22:24:a4:b2:a7:16:
f8:cf:ff:2d:49:2d:c8:35:d5:57:27:f2:79:df:6b:
f9:f0:dc:1e:54:d3:30:2a:69:d6:be:70:07:1c:9b:
86:bc:1e:de:4b:14:59:2d:30:4c:79:78:b1:a8:4e:
13:ab:1c:9c:73:cd:77:86:c1:bd:16:9b:fe:1e:b7:
20:00:73:de:0d:07:55:36:dc:fa:9c:48:c8:a7:d1:
d8:b5:d0:47:a8:a5:51:07:3d:8c:3f:9b:80:6c:1d:
f1:86:45:c4:44:be:ad:83:a7:fd:70:0c:20:b5:a0:
a0:c0:60:7a:cc:92:55:c5:4a:9c:bf:4f:ad:ba:9e:
2d:ec:aa:5d:b3:00:70:16:f9:6b:4f:ae:df:fa:fe:
ed:0e:a2:d2:09:7a:f3:77:df:41:1c:7d:5f:ea:d0:
32:98:59:92:66:4c:b6:ae:3b:24:9b:2d:10:06:69:
23:2e:3e:fb:95:cd:60:d0:98:c0:d2:76:f4:a4:58:
eb:22:fd:15:a0:79:0c:dc:18:34:91:73:0e:53:75:
82:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:88:E3:5B:87:F0:1E:26:EA:A9:87:ED:75:DF:44:CA:55:49:EB:EA
X509v3 Authority Key Identifier:
keyid:99:2B:86:09:5C:E5:58:D2:E9:61:87:28:A4:42:28:A2:7B:E9:09:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSuGCVzlWNLpYYcopEIoonvpCY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8ea9b9-3b6e-4fdf-b5d1-f04fdcc09e51/1/mSuGCVzlWNLpYYcopEIoonvpCY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5f:7c:33:4f:09:a4:1b:db:9d:a6:1d:39:0f:35:66:57:af:
4d:16:07:0c:81:58:d7:74:38:d9:fe:aa:ab:c3:b5:5e:ee:b7:
e8:2a:30:78:30:ab:57:b5:0d:05:82:b1:ae:5c:19:95:14:ae:
36:17:c4:9f:5d:03:62:97:ed:8d:fb:7f:33:9e:ca:e9:ff:9e:
1e:27:fa:b3:0b:eb:05:b6:ac:e0:36:06:a3:59:cd:cc:ff:04:
72:cd:fd:45:ce:2e:b4:0c:e4:76:e4:6e:7d:80:21:be:9c:33:
55:e6:98:ab:1d:72:d7:16:4c:83:c6:64:da:de:a7:49:a0:f0:
08:7a:59:82:9e:39:f5:8f:e4:6b:c7:74:bb:3f:c4:2a:c2:22:
cf:fe:c3:bf:1c:b4:0a:02:cd:35:b7:aa:c9:f2:03:a5:77:e0:
d3:24:90:31:4f:04:c5:7f:40:73:e9:65:28:5b:67:a8:4c:89:
64:fc:de:d1:16:70:f8:1c:18:e4:6d:6b:0c:cb:af:79:1b:57:
e2:d6:76:7a:97:0d:ec:92:57:db:13:54:0a:0b:e5:34:34:de:
e8:97:7d:53:71:95:6f:6e:72:18:6c:1a:8f:35:33:99:02:cf:
e8:65:12:ed:3a:a6:52:70:eb:bd:3f:d6:82:45:4f:4a:03:ac:
cd:e0:69:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:06:50 2025 by rpki-client