Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
File: MSOZsSkM1Bmni9L7MR47x9-fXx8.mft (raw, json)
Hash identifier: 7ebLqevu2vorKB3u4KIskvulN9dDuQ0l40OsfBGlS/M=
Subject key identifier: 10:21:05:A6:C1:EA:7E:FC:EE:9D:9C:62:D9:02:D4:E4:C7:59:9E:02
Authority key identifier: 31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
Certificate issuer: /CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Certificate serial: 0199FCFD1D01C8D9E80A3400B6612B5FF569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
Manifest number: 01F0
Signing time: Sun 19 Oct 2025 15:01:10 +0000
Manifest this update: Sun 19 Oct 2025 15:01:10 +0000
Manifest next update: Mon 20 Oct 2025 15:01:10 +0000
Files and hashes: 1: MSOZsSkM1Bmni9L7MR47x9-fXx8.crl (hash: 72CbvAQLBwmEsrGL9wbRvb9cMmgK8Y0D6EIxAyNeEE0=)
2: _YRrPXeHgAXgMpc2QmNmEMk3D08.roa (hash: rjz45MaRJ7ZN8GT6YntGrX6BstY+oeOQVYxVS/+RMXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:1d:01:c8:d9:e8:0a:34:00:b6:61:2b:5f:f5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=312399b1290cd419a78bd2fb311e3bc7df9f5f1f
Validity
Not Before: Oct 19 15:01:10 2025 GMT
Not After : Oct 20 15:01:10 2025 GMT
Subject: CN=102105a6c1ea7efcee9d9c62d902d4e4c7599e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:e9:6c:84:42:26:8e:35:ce:7e:54:ca:90:
d9:ca:c5:3e:3e:1c:c0:bd:47:38:33:f8:02:78:c0:
09:74:8e:f2:99:5c:f9:cb:2a:6d:b4:27:73:90:50:
bd:4a:84:63:65:02:06:8e:02:74:07:80:14:24:5b:
ee:46:e7:d6:94:d2:a8:65:f2:1d:85:be:72:5f:28:
b6:5e:57:87:9b:aa:5e:8d:8a:19:92:93:e0:48:0a:
34:ee:89:57:62:3d:e0:52:13:4e:ac:47:e5:3c:ef:
65:62:0f:ce:a3:34:eb:2f:76:3e:55:fc:3f:9e:13:
ab:f7:18:2b:9e:0f:8b:92:31:eb:bf:50:53:f3:46:
f3:72:7b:ea:de:30:bf:02:ee:5f:98:b1:54:85:5e:
56:04:d6:28:4f:95:17:54:76:e3:ad:b5:a3:18:36:
f5:5d:0c:54:6c:68:6c:01:3a:f7:c0:c6:4a:31:d7:
6b:81:63:02:e0:d8:ea:c4:be:85:96:45:07:4c:e5:
58:8c:3d:57:ee:5b:f6:12:ec:8c:a2:be:12:41:8a:
ad:86:c2:78:d4:b8:fe:72:c9:f5:b8:91:d1:e6:b8:
b1:fd:2c:0f:f9:ae:c2:6b:87:78:68:ba:f0:ae:2d:
28:ff:d3:fb:46:54:c3:2b:d5:97:c3:02:1c:85:f2:
18:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:21:05:A6:C1:EA:7E:FC:EE:9D:9C:62:D9:02:D4:E4:C7:59:9E:02
X509v3 Authority Key Identifier:
keyid:31:23:99:B1:29:0C:D4:19:A7:8B:D2:FB:31:1E:3B:C7:DF:9F:5F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSOZsSkM1Bmni9L7MR47x9-fXx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/676499-9143-4877-9dff-2884103776c8/1/MSOZsSkM1Bmni9L7MR47x9-fXx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4c:ac:9b:ab:bf:a5:fd:a8:ef:52:55:3e:f7:97:5b:ec:ae:
21:5b:55:15:df:e5:8f:c4:8e:44:78:59:6c:6d:d8:9e:18:ab:
d2:41:28:35:d1:be:56:4c:b1:29:de:79:52:4e:79:9c:34:e9:
c1:f5:d4:88:d2:e4:c3:77:dc:2a:75:f0:09:e0:7d:18:80:44:
1a:45:89:35:90:cb:2b:47:02:b4:21:ef:d9:be:ff:f3:f1:10:
bd:5f:1e:88:5e:a9:01:97:cb:21:77:a2:76:b3:68:8e:99:0c:
4f:e0:99:41:be:de:53:74:3b:49:b4:95:61:ba:04:e9:52:37:
55:72:f7:82:73:3f:cc:86:1b:c1:80:2a:df:97:af:3c:90:88:
a2:9e:d2:3f:48:5b:8e:bf:3f:82:1f:30:bc:b1:2d:dd:df:cf:
a1:3f:c0:65:d4:47:ea:6f:c5:b8:41:8e:7f:f4:4d:29:fb:01:
c2:85:1b:fe:1f:75:4d:4f:fe:18:93:51:61:20:c5:84:f9:e6:
b3:7e:d1:30:50:4a:72:18:fc:44:70:0d:54:90:04:06:37:3a:
6b:f7:0d:bd:17:82:1c:20:e7:c6:a2:46:f8:f7:ef:49:1f:65:
b9:a2:74:21:e3:5e:34:fa:77:12:86:b6:e7:a6:ec:aa:8b:ab:
6f:90:17:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:44:47 2025 by rpki-client