Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
File: mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft (raw, json)
Hash identifier: NAxO3q6AcD3bD3ZTk7YALVchj8L4Ctx5SgEMJdx67A4=
Subject key identifier: 10:11:28:11:E9:4F:EB:08:70:62:D9:40:4E:A0:BA:4B:8E:32:6B:C3
Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Certificate serial: 0198D7A8A3BBD87F899D87D252DB622B78BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 16:00:10 +0000
Manifest this update: Sat 23 Aug 2025 16:00:10 +0000
Manifest next update: Sun 24 Aug 2025 16:00:10 +0000
Files and hashes: 1: djCZyDS3Av-3n9Oi3QzE4yqgYHQ.roa (hash: umRqAsXCH4x+gTRMItrAG7erZAX903krnPo4zn0Ncs0=)
2: kIauAKAEPDGUiqRzZKf1-zzLViU.roa (hash: ajO4l/6tIJY/grZz1/mU3dymnv+IkFvwXNVUf7Kw9ao=)
3: mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl (hash: BIFzVeA8Qoh9UvMK35a1E+qZFuuN9T4+0eRfTqZCPOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:a3:bb:d8:7f:89:9d:87:d2:52:db:62:2b:78:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Validity
Not Before: Aug 23 16:00:10 2025 GMT
Not After : Aug 24 16:00:10 2025 GMT
Subject: CN=10112811e94feb087062d9404ea0ba4b8e326bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:2b:17:f2:74:36:fa:ae:46:9b:fa:16:26:
43:9d:55:71:b2:d1:9c:1e:b1:8f:4c:5f:75:cc:8c:
fa:dd:5c:35:9d:c2:a2:eb:58:3f:4c:b7:69:d4:a4:
b3:d2:54:69:ea:aa:ae:d9:2d:61:e1:db:52:77:8c:
62:2b:67:65:be:fe:7e:86:35:d8:b1:b3:e0:bd:21:
25:a6:74:8a:32:38:29:52:07:ff:37:45:cc:7f:14:
c8:4b:0b:ea:c1:2a:62:9d:bd:3a:04:fe:44:29:ff:
53:5e:56:6e:6a:f2:1c:82:9a:83:f9:dc:a2:3c:bf:
6f:cc:49:05:d2:fd:92:80:07:d4:5e:5c:c5:6a:67:
aa:b1:cb:70:b5:3c:27:c5:b8:44:89:dc:96:51:9f:
d5:61:fe:08:e6:48:f9:b7:6a:2f:df:06:06:ae:2e:
a7:f1:2e:73:34:fb:6a:d2:7f:53:29:f1:80:3f:71:
67:f7:42:7b:0e:ac:22:ae:03:b5:77:2a:98:c1:49:
b6:5f:42:9c:28:99:9f:b6:03:41:0d:ff:f0:7a:8c:
f9:5f:02:b7:4e:8b:1a:a3:b3:81:65:3b:c7:1c:e0:
9b:2e:b7:70:c6:2b:80:7d:3b:f1:17:4e:85:32:6c:
a6:98:a9:4f:7d:b5:48:f0:7e:eb:31:87:b9:60:5b:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:11:28:11:E9:4F:EB:08:70:62:D9:40:4E:A0:BA:4B:8E:32:6B:C3
X509v3 Authority Key Identifier:
keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:13:3e:0f:c2:3d:0e:93:db:72:b6:2c:66:8f:50:df:2f:e5:
c4:1e:94:af:2e:57:dc:ee:5c:13:60:55:5a:b5:99:c3:e9:39:
98:1f:f4:28:b5:47:86:37:67:79:77:70:a8:53:33:fc:62:05:
0c:34:59:e3:37:00:1a:09:f2:24:94:94:e1:47:17:29:70:9d:
e7:37:63:63:25:5c:6f:7c:7f:50:34:b1:3d:b0:10:e8:bd:cc:
4d:cf:29:d4:ea:a4:46:fa:e5:2d:50:a9:e0:82:8a:bc:18:34:
14:44:d6:11:83:2d:b6:77:5a:2d:ee:70:e0:75:17:49:0e:69:
6f:26:a5:7f:0b:0a:ab:d1:bd:ac:13:b2:40:51:42:b2:05:b9:
5f:69:1b:b0:6c:c8:32:f8:45:c7:c8:b6:fb:32:1e:f9:7b:f0:
48:b5:56:96:8b:85:eb:de:2d:88:11:8f:17:68:ce:ab:60:93:
a7:52:82:f4:b6:a3:20:a6:70:e4:31:b9:a5:36:72:67:a2:73:
a2:4d:1f:a9:18:55:9e:11:04:83:3b:a7:7e:05:0d:b3:75:fa:
7b:5e:eb:84:f6:be:f2:2c:14:9a:af:94:c5:6e:d8:58:36:20:
c9:58:03:0a:65:ce:73:cc:d9:c4:8e:52:4b:8d:d4:ab:aa:ee:
68:e4:eb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:07:39 2025 by rpki-client