Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
File: MseO7vestFH8N1df65EU38zBzfs.mft (raw, json)
Hash identifier: gEYV8clgu0ZT5vYv0OSpRunGPO3zmgljLIq7ksCqzwQ=
Subject key identifier: F5:63:46:15:29:27:DE:DC:DC:E8:90:A3:14:47:60:86:3E:4E:04:CD
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 0199FDA1DB8135A2C9F0B45BF6A6FFE20BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
Manifest number: 1224
Signing time: Sun 19 Oct 2025 18:01:06 +0000
Manifest this update: Sun 19 Oct 2025 18:01:06 +0000
Manifest next update: Mon 20 Oct 2025 18:01:06 +0000
Files and hashes: 1: 9i8DjH71Ep8U9n2vVSWdpKwB5UA.roa (hash: fm2wqDwUiAhqNuk8l7rNQtkTwCk4cyJ8IN2iwk3dti0=)
2: GbEyk8ZWl0vqgj_sPWLMTAGno6s.roa (hash: JzRbeYoWUwlRVaKgJmm7hD8H9CYTCwAivI+PSmgKwME=)
3: M6U6dkH9DSHzE2ElXf3ZUgv-gao.roa (hash: gyUWfn2VEKn6DTTZDCrSAEanNDrzsmaWPFOYycLgJ88=)
4: MseO7vestFH8N1df65EU38zBzfs.crl (hash: VPt4zygPc3c/GT9/LyiPejm/idfkfY6eyED5GZFz/K8=)
5: qcE5lMt-ta8yQgK_A4TOf_qcnKk.roa (hash: mHbw87Bhgg5orJBSCEF9YhID6w2GXs/pHd+LaovXweg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:db:81:35:a2:c9:f0:b4:5b:f6:a6:ff:e2:0b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Oct 19 18:01:06 2025 GMT
Not After : Oct 20 18:01:06 2025 GMT
Subject: CN=f56346152927dedcdce890a3144760863e4e04cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:46:fc:80:e8:b1:77:e7:6e:3a:8d:aa:3d:86:
c1:a0:c1:0a:98:b2:74:bc:33:58:8e:91:25:2f:d2:
88:91:e3:e3:d9:2a:d8:07:9d:98:b8:e8:75:8b:ce:
88:91:64:07:22:77:61:81:cc:aa:12:9f:94:21:20:
34:dd:3b:9f:b1:15:f3:97:f7:82:06:37:f8:b4:65:
e2:ef:7d:60:22:70:69:de:1d:ed:0f:05:dd:d3:d1:
40:0e:84:ef:80:c0:84:6d:82:08:bc:48:9d:74:69:
f5:56:33:e8:e8:18:3e:a3:f4:85:bc:72:bf:cc:a6:
4f:7f:97:98:48:f6:23:39:4d:36:ee:eb:09:2f:98:
97:6b:83:c1:b1:a5:3a:f6:ac:dd:cc:19:2b:e7:55:
8b:94:20:a0:65:c3:c5:60:2a:a5:1a:0f:78:a6:d3:
b9:54:5c:61:f5:3b:73:bc:8a:d4:df:1e:c5:40:e3:
25:67:bf:66:dd:07:d5:8f:40:ca:f5:34:38:1d:23:
bc:98:3f:e5:1f:8f:92:e2:62:45:b5:5e:4a:4a:4b:
c3:01:a9:c9:97:96:6b:63:3b:33:29:16:e1:01:cd:
77:b3:74:1c:56:2d:8a:88:89:71:ab:20:93:69:c8:
4f:ff:be:21:79:e4:d2:d1:16:14:84:61:c0:41:4d:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:63:46:15:29:27:DE:DC:DC:E8:90:A3:14:47:60:86:3E:4E:04:CD
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:db:22:ef:92:cf:dc:3e:5e:25:5c:28:89:f6:36:b8:77:fd:
62:75:59:51:97:6b:d0:c2:a2:91:ff:9d:61:ea:9e:85:a4:b6:
54:b0:17:21:41:e6:b4:e6:0b:12:0e:cf:a1:5a:3d:b2:27:37:
4d:dd:6d:e6:e6:20:34:b9:81:ca:c0:e9:44:a4:f1:0e:ed:b0:
3f:9f:35:4d:a1:c2:11:b5:79:ba:9a:a1:a8:4b:52:87:cd:50:
30:1a:78:bc:52:27:7c:65:8d:e4:c1:42:15:80:be:ca:85:58:
7b:77:d0:c3:e4:8f:97:06:43:f0:6b:a5:f2:e9:4e:4b:4d:54:
12:f9:1a:6c:20:d1:95:34:a1:d2:be:67:47:58:a0:ee:08:4b:
3e:c4:15:7f:e1:c6:2b:c4:a7:86:fc:2c:fb:5c:2d:bb:7d:1c:
30:a0:ed:bf:f3:c6:53:36:41:64:4f:3b:62:f4:72:89:6c:c4:
ae:41:3d:c4:b6:4e:ba:f2:45:8a:15:3f:fd:f6:9e:07:c4:0a:
46:06:d7:dc:3e:f0:f0:ba:59:f3:9b:47:b0:61:3b:7a:01:08:
35:18:b2:42:14:11:db:00:9f:f6:5f:2b:41:53:52:91:98:1a:
c7:53:19:a1:fc:54:4b:17:78:8b:d0:0a:71:18:db:6d:da:70:
00:4c:51:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:04 2025 by rpki-client