Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
File: 1-msoRBterQGEZTXq8gv9B1LgdkU.mft (raw, json)
Hash identifier: QtaTVQT3vindfSWU6oRHMIXwWwxfFwlckvB5N0AXjqQ=
Subject key identifier: 77:51:FA:C5:0B:A9:AA:EE:DA:2E:8A:7E:2F:07:55:0A:91:9C:B5:12
Authority key identifier: FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45
Certificate issuer: /CN=fa6b28441b5ead01846535eaf20bfd0752e07645
Certificate serial: 0199FB0F55BE9321C14E4D2FEE8CC4430AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
Manifest number: 27
Signing time: Sun 19 Oct 2025 06:01:50 +0000
Manifest this update: Sun 19 Oct 2025 06:01:50 +0000
Manifest next update: Mon 20 Oct 2025 06:01:50 +0000
Files and hashes: 1: 1-msoRBterQGEZTXq8gv9B1LgdkU.crl (hash: fwDG9bYvYyBJvJkd3J0/TRV70Ck0tpUdPEX/T2z+cyU=)
2: vBOQCuTyEfYV4gQKe7qCxZbiu9I.roa (hash: YzgNFzACvcQVNgde31Xeo9Tat9fZP3Es1rC5dljFCQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:55:be:93:21:c1:4e:4d:2f:ee:8c:c4:43:0a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6b28441b5ead01846535eaf20bfd0752e07645
Validity
Not Before: Oct 19 06:01:50 2025 GMT
Not After : Oct 20 06:01:50 2025 GMT
Subject: CN=7751fac50ba9aaeeda2e8a7e2f07550a919cb512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b4:82:97:3f:32:25:a5:18:63:ff:df:52:05:
5f:66:18:3c:92:22:fb:20:e6:d1:07:f0:bb:0d:8e:
03:98:ea:a3:12:16:08:49:d1:a7:e5:c8:f8:04:5e:
b3:1a:d3:b8:b0:60:d8:b8:85:14:98:66:d3:7a:1f:
5f:f0:fa:75:28:09:cf:08:ad:e4:92:16:dd:1c:00:
8a:ca:2a:ab:de:a8:36:65:97:94:e7:73:da:e3:da:
bd:c8:4d:58:3b:10:68:9b:45:35:2d:1d:ef:8b:bd:
c3:73:d3:dc:02:dd:37:08:81:31:1a:68:4f:9c:ab:
01:d8:da:f4:cc:d6:0f:3c:64:73:06:7d:64:7d:cf:
b0:b2:17:d7:40:4b:ac:3f:d9:3e:b1:ed:20:a5:c3:
c8:12:d6:27:37:10:63:fd:a1:8a:1a:e9:c3:ed:35:
f7:f5:76:b4:83:64:74:04:74:43:39:e7:c1:5d:b7:
4c:ab:df:34:65:25:29:7e:d5:06:7c:da:56:18:51:
f5:f0:11:60:95:47:50:39:ca:93:27:6e:a3:6e:fc:
65:f1:eb:46:76:22:a3:a4:a3:2f:3c:c2:e9:f0:61:
7b:c8:ef:ad:a4:87:0d:f3:aa:86:cd:1e:6a:ae:84:
bc:27:65:3f:78:7c:d8:14:2a:31:63:00:ae:e0:0e:
04:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:51:FA:C5:0B:A9:AA:EE:DA:2E:8A:7E:2F:07:55:0A:91:9C:B5:12
X509v3 Authority Key Identifier:
keyid:FA:6B:28:44:1B:5E:AD:01:84:65:35:EA:F2:0B:FD:07:52:E0:76:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-msoRBterQGEZTXq8gv9B1LgdkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bdd256-2f59-431b-b653-cae678b2f21e/1/1-msoRBterQGEZTXq8gv9B1LgdkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:98:6c:cd:cf:1b:b5:40:96:1b:32:c7:4d:59:53:50:f3:4b:
3c:b6:4d:01:5d:d7:79:2d:8d:d3:e9:bb:84:96:31:76:cb:bd:
ea:ce:77:36:1b:c6:27:cf:1f:01:d9:67:bf:32:5b:6a:9d:7a:
12:c6:dc:6e:ab:08:89:63:18:62:5c:3c:b5:2c:53:7b:97:52:
6a:f6:21:80:80:6c:61:0f:f2:fa:c5:e8:2a:b3:9f:93:50:a5:
ec:a9:fd:8e:78:b0:51:d2:87:86:15:a0:2a:ec:d5:1b:88:5a:
ba:0b:b2:1d:99:7b:7d:35:f5:46:10:85:5f:f2:9a:9c:24:37:
57:d2:db:51:f4:a7:07:bc:22:c7:7b:13:70:87:36:f3:5a:88:
4d:7d:10:38:8b:b9:14:8e:f3:98:25:11:f8:63:ed:1b:bf:fb:
85:d4:b1:50:d5:62:8c:07:25:9f:b4:9f:0f:11:b9:4c:ca:42:
5e:c8:15:eb:e1:0c:9d:1b:18:96:1a:cb:d8:43:ac:8c:b8:ad:
c7:2c:86:2e:8b:be:9b:1e:d0:3c:e3:3d:e5:13:62:d9:4c:a9:
46:d6:15:5e:ba:75:da:9a:ca:61:a0:7c:eb:6c:13:2c:34:eb:
55:dc:a4:6e:1a:d9:40:06:26:f7:9f:db:44:f3:0b:df:48:6e:
23:e9:94:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:20 2025 by rpki-client