
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
File: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft (raw, json)
Hash identifier: +siHeqhPGPj3cQxShDvExAFnqT1GfOCqQk5qEMrF+5k=
Subject key identifier: 24:F0:1A:6B:CC:84:5F:B7:DD:A5:C0:62:26:88:98:20:D7:3C:1F:F3
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Certificate issuer: /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial: 0199FB7CEEC15657F527E686A9CF517E04FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
Manifest number: 06D8
Signing time: Sun 19 Oct 2025 08:01:32 +0000
Manifest this update: Sun 19 Oct 2025 08:01:32 +0000
Manifest next update: Mon 20 Oct 2025 08:01:32 +0000
Files and hashes: 1: Hg9K5nZYj4y2LREbfAkkrFG5Zls.roa (hash: F2au21rdmN5JT8fnaZxO8lAlqsDmX3/SHMl+Sh2h2I8=)
2: PYZw-6nO0E-fCuRk7f6-YtCO0xE.roa (hash: HII+EpmrCTFcWzx501ezrd96ebkYigxDHvPMzn/KKcI=)
3: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl (hash: dEQsAznZaBpHA4lPnxSVGG70KMH7YR6XRAtJWo/Xl+c=)
4: x7qF1swc6KDeUuxg1VrqWurToxo.roa (hash: YrT3FZ1bNCws8FjDrY5Tigrw49fzDr1WY2YjpG9Nkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ee:c1:56:57:f5:27:e6:86:a9:cf:51:7e:04:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Validity
Not Before: Oct 19 08:01:32 2025 GMT
Not After : Oct 20 08:01:32 2025 GMT
Subject: CN=24f01a6bcc845fb7dda5c06226889820d73c1ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:07:81:ba:6b:ef:ba:72:e5:9a:38:1e:60:
20:38:e7:dc:16:e7:44:29:b4:dc:91:eb:2c:f4:9a:
a2:89:ca:e5:59:0f:cb:cf:b3:0e:33:12:6d:28:9d:
59:4c:62:ea:57:3d:9d:2f:25:32:ea:ae:d4:40:ed:
d6:f5:76:f7:6b:2f:3f:a7:37:61:d4:04:67:22:5b:
dd:1f:19:78:cb:95:7d:0d:f7:7e:75:4b:4d:7a:4f:
f1:3c:7b:d5:9b:db:c2:4a:e8:fb:46:d6:3c:44:1e:
2a:65:b2:fe:58:7d:5d:d2:73:c7:38:7e:d8:e1:90:
a5:6c:c2:98:ab:cf:bb:37:68:48:62:ef:64:22:f1:
0d:29:90:99:3b:d5:a7:7b:48:a6:9e:b6:2b:31:5b:
87:e6:cb:80:b0:85:67:d4:ca:ec:89:8e:73:d5:8f:
f7:43:84:03:fa:2b:33:aa:19:69:75:c3:57:c7:de:
76:c5:dc:0a:ca:12:94:41:d4:84:f9:61:45:19:36:
bd:de:f2:e8:24:5d:9f:51:33:e3:96:ab:8d:ae:9a:
ac:02:92:24:db:ad:13:90:04:78:aa:72:59:d7:2e:
8d:98:91:88:47:85:3e:3a:b6:78:d4:9b:77:73:b3:
17:23:b8:a8:db:7c:fe:97:89:85:1f:5a:b4:f2:e9:
89:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F0:1A:6B:CC:84:5F:B7:DD:A5:C0:62:26:88:98:20:D7:3C:1F:F3
X509v3 Authority Key Identifier:
keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:51:25:e9:9c:29:5b:33:53:e0:16:18:be:1e:a7:cd:6d:97:
1c:53:87:23:2a:b1:57:54:bf:0f:eb:87:a6:ea:8d:fc:4c:48:
9f:d8:16:7d:76:3c:c5:3f:e4:f4:2c:bc:5f:bb:76:0c:8e:cb:
bb:47:eb:52:b1:53:81:5f:2e:c9:0c:f9:be:f8:ca:06:07:38:
ff:ee:31:4c:7a:df:1a:9f:d0:6f:72:ff:70:3a:a8:0a:35:f2:
20:c2:8d:5d:07:8e:ce:83:10:a5:e0:f4:f8:84:47:22:60:f2:
11:39:20:ed:28:87:19:db:df:a3:a7:a4:cc:e9:2a:d9:90:6f:
f1:a0:8d:a9:d6:c4:c2:2c:39:cd:3e:25:f4:9c:79:75:7e:b1:
31:02:d6:6b:3b:1d:37:d7:72:88:31:84:4a:76:e7:aa:ea:f0:
1d:83:19:76:26:d3:ab:01:7d:d4:46:de:3d:9f:24:28:5a:07:
08:d8:0e:98:4b:0b:02:3c:50:82:84:4a:aa:9c:56:81:0a:ff:
61:c8:57:1c:11:c7:33:8e:39:8a:29:69:7d:6f:26:ec:00:2e:
e2:e3:46:f9:ca:e7:c7:39:ff:7d:b6:9e:8d:f2:86:48:ca:aa:
3b:4c:8a:b8:6e:5e:53:04:16:b4:64:52:73:37:06:6e:3a:12:
32:02:60:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fO7BVlf1J+aGqc9RfgT6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjM4MTJhMTU5N2U5NjA1ZTJhOWJmNDlhY2Y4ZDYzODk4
MWE1ZjQwHhcNMjUxMDE5MDgwMTMyWhcNMjUxMDIwMDgwMTMyWjAzMTEwLwYDVQQD
EygyNGYwMWE2YmNjODQ1ZmI3ZGRhNWMwNjIyNjg4OTgyMGQ3M2MxZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWoHgbpr77py5Zo4HmAgOOfcFudE
KbTckess9JqiicrlWQ/Lz7MOMxJtKJ1ZTGLqVz2dLyUy6q7UQO3W9Xb3ay8/pzdh
1ARnIlvdHxl4y5V9Dfd+dUtNek/xPHvVm9vCSuj7RtY8RB4qZbL+WH1d0nPHOH7Y
4ZClbMKYq8+7N2hIYu9kIvENKZCZO9Wne0imnrYrMVuH5suAsIVn1MrsiY5z1Y/3
Q4QD+iszqhlpdcNXx952xdwKyhKUQdSE+WFFGTa93vLoJF2fUTPjlquNrpqsApIk
260TkAR4qnJZ1y6NmJGIR4U+OrZ41Jt3c7MXI7io23z+l4mFH1q08umJ6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTwGmvMhF+33aXAYiaImCDXPB/zMB8GA1UdIwQY
MBaAFJkjgSoVl+lgXiqb9JrPjWOJgaX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jM2NlZWYtZDc1NS00MzU1LTkzMDQt
NmIxNmM3ODhhOTBmLzEvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9jM2NlZWYtZDc1NS00MzU1LTkzMDQtNmIxNmM3ODhhOTBm
LzEvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFEl6Zwp
WzNT4BYYvh6nzW2XHFOHIyqxV1S/D+uHpuqN/ExIn9gWfXY8xT/k9Cy8X7t2DI7L
u0frUrFTgV8uyQz5vvjKBgc4/+4xTHrfGp/Qb3L/cDqoCjXyIMKNXQeOzoMQpeD0
+IRHImDyETkg7SiHGdvfo6ekzOkq2ZBv8aCNqdbEwiw5zT4l9Jx5dX6xMQLWazsd
N9dyiDGESnbnqurwHYMZdibTqwF91EbePZ8kKFoHCNgOmEsLAjxQgoRKqpxWgQr/
YchXHBHHM445iilpfW8m7AAu4uNG+crnxzn/fbaejfKGSMqqO0yKuG5eUwQWtGRS
czcGbjoSMgJgCg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:50 2025 by rpki-client