Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
File: mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft (raw, json)
Hash identifier: M5YnM0B+EX6H4MyVE4Oe1FHYyXuoWZttYrGgtjYVSjc=
Subject key identifier: D2:F6:EF:4D:54:02:AE:87:8B:9C:C3:19:86:7F:02:F8:67:4B:2A:1C
Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Certificate serial: 0199FF22A284C50A80492CCF2E4067603B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 01:01:23 +0000
Manifest this update: Mon 20 Oct 2025 01:01:23 +0000
Manifest next update: Tue 21 Oct 2025 01:01:23 +0000
Files and hashes: 1: djCZyDS3Av-3n9Oi3QzE4yqgYHQ.roa (hash: umRqAsXCH4x+gTRMItrAG7erZAX903krnPo4zn0Ncs0=)
2: kIauAKAEPDGUiqRzZKf1-zzLViU.roa (hash: ajO4l/6tIJY/grZz1/mU3dymnv+IkFvwXNVUf7Kw9ao=)
3: mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl (hash: sX4cY+Z2T50SIoBr1SZHPIu8PrdLdRwIvDKSxCw/9DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:a2:84:c5:0a:80:49:2c:cf:2e:40:67:60:3b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Validity
Not Before: Oct 20 01:01:23 2025 GMT
Not After : Oct 21 01:01:23 2025 GMT
Subject: CN=d2f6ef4d5402ae878b9cc319867f02f8674b2a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:33:5b:fe:ec:23:9b:7f:e2:db:9d:76:15:
1f:7e:32:e5:88:40:e1:8b:36:3c:78:bc:b5:6d:d2:
4b:28:97:90:c0:f3:25:79:ff:6f:8b:05:48:1a:f4:
8f:a6:0d:72:db:33:8e:38:5b:ad:04:b7:68:17:f5:
c2:a0:2f:d2:7a:ce:a1:57:69:f1:b7:21:e7:7d:f3:
50:df:49:b7:a1:e2:f4:32:80:8d:ca:93:0f:ab:05:
aa:ee:60:60:18:4a:ca:f1:ee:d2:90:98:16:73:0a:
f2:28:31:a1:21:c7:9f:e6:70:49:8c:c2:0d:09:43:
c6:8a:e5:55:13:1f:8b:ca:1c:a8:91:f2:f6:76:cd:
90:a3:ff:4b:6e:c1:0d:41:a6:e2:a5:71:6c:9e:0b:
ec:72:52:89:2e:56:84:2e:90:e4:83:b2:43:be:a8:
69:9d:19:56:e5:08:f0:d1:52:9c:a2:f9:36:18:f0:
1e:17:3f:8f:b4:b0:41:2b:af:a5:e7:ae:bf:d9:d6:
d2:7c:de:e5:c8:99:84:f4:2b:a4:97:51:98:1a:6e:
f3:3e:28:4a:7e:ac:4f:ca:24:2c:81:f6:3c:39:d5:
54:56:2e:84:62:21:b5:2b:62:55:c9:29:49:58:b6:
b4:80:d5:a1:60:eb:42:83:c8:11:63:ef:ac:bc:38:
5e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F6:EF:4D:54:02:AE:87:8B:9C:C3:19:86:7F:02:F8:67:4B:2A:1C
X509v3 Authority Key Identifier:
keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8c:6e:31:ae:dc:97:84:84:bd:ee:0e:71:ee:f0:cd:44:a3:
93:e8:c6:4e:0e:a5:65:c3:24:42:8e:07:ba:c1:e6:82:8c:b3:
0d:b9:35:73:09:08:40:9c:76:41:34:66:d8:21:ca:df:26:b1:
b8:44:25:3c:dc:8e:e2:96:29:1f:3b:6e:a1:6c:70:b2:da:ff:
cb:b6:f8:cc:47:c8:74:8e:18:3e:3e:4d:be:28:a5:e5:38:ee:
22:d0:cd:12:78:88:9d:29:96:36:66:83:07:3a:f9:a6:ac:cd:
7e:28:6b:e9:7f:d1:77:f4:b1:25:c7:b2:91:1a:be:b7:51:95:
9c:1a:67:81:6e:31:39:d0:d1:16:15:a4:e0:31:aa:d5:32:e4:
fe:5b:a5:5a:85:ff:f6:5b:4d:24:23:2c:2a:b4:a8:b8:a3:39:
a7:6e:47:48:ce:4d:b8:6a:7f:af:d1:84:33:35:30:f5:b4:2e:
67:40:0c:18:61:6a:be:85:6d:90:e9:85:f5:17:23:11:ba:cb:
c8:9f:8b:dc:30:8c:4d:ef:ac:51:ec:33:5b:34:a4:0f:33:9c:
d0:b2:40:2e:3b:28:4a:9d:c4:7c:58:74:b3:70:eb:c0:85:2d:
2a:d1:55:42:de:2e:65:6a:05:0d:ad:0e:4c:c2:5b:f6:96:cb:
9e:b0:4c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:47:17 2025 by rpki-client