Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
File: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft (raw, json)
Hash identifier: 4taNl2XP85kpesAXMzreEO9urTHp3cZVEnMCxeBbzq8=
Subject key identifier: 44:33:FB:69:05:D5:A6:D5:E2:C6:9F:13:34:72:EC:6E:1F:07:3F:B8
Authority key identifier: 99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
Certificate issuer: /CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Certificate serial: 0198D5F1BFC6AA65978FCDFEA9DF09E0DEC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
Manifest number: 0640
Signing time: Sat 23 Aug 2025 08:00:46 +0000
Manifest this update: Sat 23 Aug 2025 08:00:46 +0000
Manifest next update: Sun 24 Aug 2025 08:00:46 +0000
Files and hashes: 1: Hg9K5nZYj4y2LREbfAkkrFG5Zls.roa (hash: F2au21rdmN5JT8fnaZxO8lAlqsDmX3/SHMl+Sh2h2I8=)
2: PYZw-6nO0E-fCuRk7f6-YtCO0xE.roa (hash: HII+EpmrCTFcWzx501ezrd96ebkYigxDHvPMzn/KKcI=)
3: mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl (hash: XfJsOPEDmLADNcXd+oNn9xhpWoWbouv9OUMw8RB3rdA=)
4: x7qF1swc6KDeUuxg1VrqWurToxo.roa (hash: YrT3FZ1bNCws8FjDrY5Tigrw49fzDr1WY2YjpG9Nkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:bf:c6:aa:65:97:8f:cd:fe:a9:df:09:e0:de:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9923812a1597e9605e2a9bf49acf8d638981a5f4
Validity
Not Before: Aug 23 08:00:46 2025 GMT
Not After : Aug 24 08:00:46 2025 GMT
Subject: CN=4433fb6905d5a6d5e2c69f133472ec6e1f073fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:f8:74:7c:08:ac:7d:d3:c6:fb:e2:05:ab:
e9:5f:e6:b0:9c:30:a8:d4:b8:0f:13:10:58:1b:32:
48:98:84:f9:b5:05:7f:26:a8:8d:b5:ec:1a:20:0b:
e7:cf:2a:ad:aa:08:4c:05:6d:a2:4e:fc:c6:bc:77:
03:d3:38:fa:b7:64:66:a2:73:85:4f:73:93:24:28:
25:c6:b4:3f:bd:27:ca:94:04:30:ca:e9:47:f9:e2:
72:6b:d2:4c:6a:c7:a5:90:17:82:02:76:e9:1b:b6:
14:d5:d8:c3:97:67:28:dd:73:b6:b4:b4:03:d3:90:
22:ab:dc:71:e6:d8:97:a6:cc:3f:1c:8b:79:df:2f:
ab:52:9d:10:f5:bc:9f:0f:da:56:c6:32:e3:23:9d:
d8:6b:89:6e:41:ed:f9:90:ee:a5:f1:7e:ba:99:45:
fe:fd:21:8d:c1:6e:44:1c:b3:8f:01:de:11:3f:e1:
7d:81:ba:78:a2:9e:8d:e0:b0:05:c3:b4:5e:f6:51:
d0:91:1c:d6:64:21:75:71:19:ba:2b:3f:2b:95:0d:
4b:4a:46:08:6a:2e:8f:f8:5f:af:37:bb:de:30:04:
0c:6c:c5:33:a9:18:ea:3c:ec:92:c6:65:e1:38:64:
6d:fa:58:70:3d:28:65:56:23:1c:21:ad:4b:bc:c8:
96:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:33:FB:69:05:D5:A6:D5:E2:C6:9F:13:34:72:EC:6E:1F:07:3F:B8
X509v3 Authority Key Identifier:
keyid:99:23:81:2A:15:97:E9:60:5E:2A:9B:F4:9A:CF:8D:63:89:81:A5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c3ceef-d755-4355-9304-6b16c788a90f/1/mSOBKhWX6WBeKpv0ms-NY4mBpfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:26:d7:6f:b0:ba:3f:c0:d4:b0:e2:7b:e5:d0:f7:89:62:31:
fb:9a:38:f7:65:24:01:ca:fd:95:e8:91:dd:90:54:14:0b:68:
41:0a:a8:46:73:18:23:ff:76:cd:63:1d:5c:1a:ed:7b:54:04:
ba:9b:8f:e3:cf:62:83:0c:5d:b8:4d:43:b6:e8:8f:29:6e:04:
1f:7b:fc:68:88:3d:74:67:8b:a0:91:e8:e4:c0:cd:14:cc:a9:
65:21:76:72:d0:c6:c2:f0:4b:51:01:59:bf:1e:63:a6:8d:62:
6f:ee:99:c9:db:35:b5:b8:f2:fa:9d:f9:39:28:d3:42:7d:1b:
29:18:8e:0c:a4:61:c9:a5:c6:ef:0c:84:96:22:d5:a0:b9:16:
33:b1:a9:9b:7c:b7:98:f5:a7:e8:df:49:88:1e:75:01:dd:e8:
2a:60:28:45:3e:9a:93:d2:6e:04:d0:1b:6b:ae:c0:4f:8f:14:
b8:25:96:08:6b:2c:c6:df:e9:86:69:62:fb:d0:8f:d9:0c:7b:
f9:8c:19:ed:b5:16:25:a2:8c:5c:20:18:64:a3:c0:f9:3e:6d:
fc:cb:e8:73:95:33:29:49:25:79:84:07:bb:cd:93:60:53:b0:
89:42:77:4b:0c:c3:9d:6a:c1:96:27:82:d5:71:e0:33:80:55:
e0:12:d0:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8b/GqmWXj83+qd8J4N7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MjM4MTJhMTU5N2U5NjA1ZTJhOWJmNDlhY2Y4ZDYzODk4
MWE1ZjQwHhcNMjUwODIzMDgwMDQ2WhcNMjUwODI0MDgwMDQ2WjAzMTEwLwYDVQQD
Eyg0NDMzZmI2OTA1ZDVhNmQ1ZTJjNjlmMTMzNDcyZWM2ZTFmMDczZmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotn4dHwIrH3TxvviBavpX+awnDCo
1LgPExBYGzJImIT5tQV/JqiNtewaIAvnzyqtqghMBW2iTvzGvHcD0zj6t2RmonOF
T3OTJCglxrQ/vSfKlAQwyulH+eJya9JMaselkBeCAnbpG7YU1djDl2co3XO2tLQD
05Aiq9xx5tiXpsw/HIt53y+rUp0Q9byfD9pWxjLjI53Ya4luQe35kO6l8X66mUX+
/SGNwW5EHLOPAd4RP+F9gbp4op6N4LAFw7Re9lHQkRzWZCF1cRm6Kz8rlQ1LSkYI
ai6P+F+vN7veMAQMbMUzqRjqPOySxmXhOGRt+lhwPShlViMcIa1LvMiWzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQz+2kF1abV4safEzRy7G4fBz+4MB8GA1UdIwQY
MBaAFJkjgSoVl+lgXiqb9JrPjWOJgaX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jM2NlZWYtZDc1NS00MzU1LTkzMDQt
NmIxNmM3ODhhOTBmLzEvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9jM2NlZWYtZDc1NS00MzU1LTkzMDQtNmIxNmM3ODhhOTBm
LzEvbVNPQktoV1g2V0JlS3B2MG1zLU5ZNG1CcGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWybXb7C6
P8DUsOJ75dD3iWIx+5o492UkAcr9leiR3ZBUFAtoQQqoRnMYI/92zWMdXBrte1QE
upuP489igwxduE1DtuiPKW4EH3v8aIg9dGeLoJHo5MDNFMypZSF2ctDGwvBLUQFZ
vx5jpo1ib+6Zyds1tbjy+p35OSjTQn0bKRiODKRhyaXG7wyEliLVoLkWM7Gpm3y3
mPWn6N9JiB51Ad3oKmAoRT6ak9JuBNAba67AT48UuCWWCGssxt/phmli+9CP2Qx7
+YwZ7bUWJaKMXCAYZKPA+T5t/Mvoc5UzKUkleYQHu82TYFOwiUJ3SwzDnWrBlieC
1XHgM4BV4BLQJg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:13 2025 by rpki-client