Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
File: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft (raw, json)
Hash identifier: 6pqGlH25BtMwpd/1sFkhqZYIEJSd8eloslJzmsczlWg=
Subject key identifier: 9F:1B:2C:72:21:B6:F5:4A:77:AB:76:26:0D:7E:84:00:36:09:6C:8B
Authority key identifier: 31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
Certificate issuer: /CN=31242850cad41cdf75a3c9d60b21fca543f74384
Certificate serial: 0199FBEAAFEA2AE124BE2137BF40E98506A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 10:01:25 +0000
Manifest this update: Sun 19 Oct 2025 10:01:25 +0000
Manifest next update: Mon 20 Oct 2025 10:01:25 +0000
Files and hashes: 1: 6G5nNFKJWFzHfNQU02eI4MMaEEg.roa (hash: 6cSP9En6aM/vjTao+cEFN3U0rlWFoCsSysKwaT7SNIU=)
2: MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl (hash: ClIM22s6K52zi1lnISMz4rpvQ0Wioi2/liPxNie3Teo=)
3: dTX8V27b3FZ8vwtYRtnPTsQ9bhg.roa (hash: 77xEsKoJwAS0zsMbL8sU52nye1oYIoAnIfCbqIAKy1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:af:ea:2a:e1:24:be:21:37:bf:40:e9:85:06:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31242850cad41cdf75a3c9d60b21fca543f74384
Validity
Not Before: Oct 19 10:01:25 2025 GMT
Not After : Oct 20 10:01:25 2025 GMT
Subject: CN=9f1b2c7221b6f54a77ab76260d7e840036096c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3c:d6:d0:c7:fa:74:93:d0:04:f0:c9:74:c6:
5e:e2:db:0c:1d:b3:03:f1:98:40:0a:d9:3f:07:33:
b2:d2:4b:3f:99:80:5b:ee:f1:4a:33:fd:34:5d:12:
91:4e:d6:00:cb:9f:69:06:1e:7c:e0:c9:1d:c6:27:
bb:eb:ab:54:64:7c:b0:cf:c9:66:d1:80:77:7e:e5:
3c:4e:fe:cf:72:dd:14:f6:e7:8f:15:8d:97:6b:0f:
42:fc:7f:ba:70:31:bb:65:91:b8:5f:24:e7:8f:bf:
ce:63:49:ed:84:14:7c:e8:b5:0e:da:6f:1a:85:64:
b0:67:ec:4a:87:9e:e6:09:c8:c9:c2:4b:73:66:74:
6c:12:40:57:9b:29:c1:d4:c1:42:91:5c:a7:9f:cc:
dc:62:82:9d:4c:32:c7:5c:f8:a4:05:9f:1b:bb:b6:
b3:0d:c7:dd:ea:37:81:c1:54:f8:76:5a:bb:c9:dc:
40:41:54:28:6f:a7:25:71:81:94:90:ca:5e:5b:3b:
55:c1:76:98:a9:06:c3:1b:c2:59:42:dc:96:9a:fd:
87:df:48:e2:d8:6e:03:82:91:ae:09:19:f1:8b:b2:
32:de:c0:c8:1e:66:e9:2e:d0:7d:ce:51:4c:76:c7:
9b:4d:ea:26:0a:a6:6a:42:46:46:6b:25:ed:a9:f6:
af:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1B:2C:72:21:B6:F5:4A:77:AB:76:26:0D:7E:84:00:36:09:6C:8B
X509v3 Authority Key Identifier:
keyid:31:24:28:50:CA:D4:1C:DF:75:A3:C9:D6:0B:21:FC:A5:43:F7:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1a27ec-eb0a-4406-a1d1-07ed46b149c3/1/MSQoUMrUHN91o8nWCyH8pUP3Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:70:fd:eb:46:89:18:8e:76:90:ef:c0:f4:34:cf:c4:97:30:
8d:b9:4f:6f:9e:bc:8e:9d:a1:99:9f:dd:7b:4f:44:9b:c3:9f:
10:d8:43:a3:45:e1:e5:0c:5e:81:7d:a2:b8:9c:d1:9d:6a:d5:
1e:ba:95:c7:9c:0a:01:36:fc:a0:8c:c2:a7:40:5c:08:c1:53:
95:f2:a5:af:1e:f2:3f:39:34:bd:60:81:52:55:e9:53:59:ee:
da:91:5f:0c:90:03:ba:2d:a9:50:91:b8:d0:51:3f:b7:5e:bc:
30:9f:44:4c:9a:a8:84:95:2f:a5:6b:0c:99:25:57:76:ec:d6:
90:93:79:23:69:63:1d:2d:0c:55:24:19:11:a2:d7:a8:1b:ad:
cd:47:e0:e0:08:8d:ca:ad:b7:e5:e1:18:f7:27:02:30:06:13:
e2:fb:a3:20:fd:5d:4c:69:be:d0:49:7b:5e:7b:93:cb:b0:fe:
52:a8:ff:bf:a4:b2:d0:bf:07:2c:fb:eb:b2:b5:56:cb:14:aa:
f0:7a:41:65:23:db:ea:53:45:80:b0:e8:4f:ae:73:38:eb:c0:
f7:32:2d:1e:0e:c2:53:1d:51:0a:3c:94:2a:9b:f0:bc:78:41:
aa:51:5a:76:8f:98:54:83:5e:43:de:0c:41:51:a6:a8:6d:fa:
3b:22:4e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:51 2025 by rpki-client