Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File: mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier: ogbhvbQxRfEkPxe7TjbdJ/y19GSFBnF0SY9wtj8XGn8=
Subject key identifier: CA:9D:0B:AA:B0:A5:DA:56:8C:EE:0F:5F:21:44:89:D2:8C:7D:5A:69
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 0199FDD9CC8A0B6E343CA44C12B1CEF4590D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:02:13 +0000
Manifest this update: Sun 19 Oct 2025 19:02:13 +0000
Manifest next update: Mon 20 Oct 2025 19:02:13 +0000
Files and hashes: 1: TAIaujQ4VKKsXuUakY0dKEcAcGs.roa (hash: d9TADe0Qn4Oy08MasSNafdYWP3qjs55v/m6HHzPTGmc=)
2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: FKnqmSrp8cS0AHSO3ej1/Bo0FAQAAB8oj2y4VC3kNAg=)
3: osc7ldM1EyAIq-Pc65jfOVsDsEo.roa (hash: jLW59X/F/Mi9You64kz4gdG8TC0tIrDCV1yujScQLmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:cc:8a:0b:6e:34:3c:a4:4c:12:b1:ce:f4:59:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Oct 19 19:02:13 2025 GMT
Not After : Oct 20 19:02:13 2025 GMT
Subject: CN=ca9d0baab0a5da568cee0f5f214489d28c7d5a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:6e:0f:1e:21:1b:f5:a2:51:37:65:fb:94:
a2:bd:0b:c9:db:5e:16:4a:66:2c:25:a8:e6:61:79:
45:70:cb:50:6b:d5:ec:a4:70:25:3d:c3:6c:e8:90:
c6:2b:05:ce:70:3e:1a:85:f0:df:fd:f1:d0:f2:14:
92:0a:a5:c7:b8:dd:08:92:60:c6:14:99:d5:98:62:
a5:0d:d9:a2:3f:be:6f:91:ca:e4:70:fc:f2:f1:33:
f2:b7:e3:e5:80:d8:90:11:5b:43:b9:08:20:68:b1:
61:a0:7a:48:0e:09:7d:88:23:14:53:9c:74:30:05:
20:47:49:b2:0d:80:b6:1d:ef:16:81:b9:be:d8:db:
2d:87:63:85:a0:99:9b:09:09:64:40:29:92:ec:86:
0d:1a:44:c4:79:48:97:47:fa:3c:b1:05:d1:ac:b3:
33:1f:dd:06:e1:b1:70:e2:71:b7:c7:c4:eb:58:0d:
f8:71:7d:5d:a2:bc:c3:01:11:a9:14:ff:ab:54:54:
ab:2d:36:33:e1:6f:36:0b:02:d1:1b:cd:fb:24:3c:
7c:78:70:67:45:bf:2b:08:1b:32:49:f5:70:6b:b2:
43:c3:a2:46:97:bb:4f:dc:82:48:da:f2:1e:41:a1:
c7:7f:b9:ce:6f:43:c7:89:20:97:17:8f:bd:39:6e:
87:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9D:0B:AA:B0:A5:DA:56:8C:EE:0F:5F:21:44:89:D2:8C:7D:5A:69
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ae:a2:bf:9b:41:a0:bb:ad:6f:a2:fd:db:1b:9d:9a:4c:b0:
3b:72:0a:d0:09:23:46:e6:9d:22:d2:20:de:ac:d1:17:d5:85:
84:e3:6e:ed:99:83:4d:f4:42:d2:de:bc:21:a2:f9:18:ba:bf:
40:3b:5b:f5:6b:bf:28:37:36:de:06:a7:f8:53:bf:75:4c:ec:
8a:0b:b3:8d:56:6b:d1:67:c5:5c:23:b4:da:ae:81:03:1c:32:
34:ce:c5:ef:b8:c6:43:48:51:52:d8:57:a7:7c:4f:48:90:93:
4a:06:04:8d:d7:62:fa:53:77:b3:01:9c:f2:3c:b7:0b:9b:ea:
57:9c:61:f3:fb:34:bd:14:c9:5d:af:87:18:1b:4d:bd:2b:96:
2f:fc:54:c2:e5:b0:b9:1d:ad:be:66:df:d4:97:8d:ec:32:5c:
a6:aa:d6:b2:da:1b:e8:15:8d:c0:df:8d:9d:9c:72:15:3c:9c:
9b:41:bf:94:e5:88:51:fb:f6:be:9a:51:78:97:6d:d6:29:7d:
dd:3c:ef:b3:b5:29:9f:8f:a8:4c:e5:00:23:4c:48:5c:d7:70:
1c:d5:54:21:be:8e:1c:a8:7e:7b:f5:e1:99:3e:d6:ad:5c:2f:
60:8a:32:31:fb:e7:27:5d:45:33:5a:3f:79:e3:82:c7:d2:ef:
d0:83:24:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:26 2025 by rpki-client