Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
File: mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft (raw, json)
Hash identifier: WEEOqF5+CLRrhB48Dn+iN0MAc0pTGPk8JErjY8Cxl/c=
Subject key identifier: 74:5B:0C:F5:2E:C2:6F:05:83:5C:E9:A3:C6:1D:05:58:2B:4D:5D:00
Authority key identifier: 99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
Certificate issuer: /CN=99252ff7f4dcf62234d22f86a1135b344923daab
Certificate serial: 0199FC590226D4D45A439BE64E41602C00A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
Manifest number: 0999
Signing time: Sun 19 Oct 2025 12:01:55 +0000
Manifest this update: Sun 19 Oct 2025 12:01:55 +0000
Manifest next update: Mon 20 Oct 2025 12:01:55 +0000
Files and hashes: 1: 7qi71OAs6leux75HGJJKxd48zLc.roa (hash: z9Iokxbw9AVC6K3SxkWdhXBi3p5Bja4hYfL/NkWRSQw=)
2: mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl (hash: DSJUwGHv+Xmoe3OglTBNLk+j21QpWbK2qCYF6dmswSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:02:26:d4:d4:5a:43:9b:e6:4e:41:60:2c:00:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99252ff7f4dcf62234d22f86a1135b344923daab
Validity
Not Before: Oct 19 12:01:55 2025 GMT
Not After : Oct 20 12:01:55 2025 GMT
Subject: CN=745b0cf52ec26f05835ce9a3c61d05582b4d5d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6b:eb:cf:d0:2e:5a:a1:2b:6a:58:b5:77:b8:
13:7e:50:93:68:d7:32:fc:3e:4c:7f:55:c0:72:c1:
a1:f3:af:d6:0c:c6:64:c6:c5:7f:30:89:11:4d:03:
11:c6:9f:46:18:15:71:1e:85:21:22:21:38:ab:0b:
10:24:6d:6a:61:a0:64:07:e6:0e:93:dc:e2:7f:96:
56:17:cb:bb:98:67:29:88:d2:1f:1f:05:6d:dd:49:
18:6b:a2:58:f0:75:d2:ed:7d:67:fa:e6:23:cb:2e:
53:44:29:f8:df:b7:91:09:5b:f0:b5:56:d2:34:ff:
bf:d1:07:f5:7f:d3:61:18:74:55:7e:01:7c:1f:64:
04:b6:73:cf:37:57:56:e8:26:80:66:4a:0a:21:af:
ee:f0:ce:21:66:d9:63:6e:40:0c:d5:b3:63:6f:03:
96:7c:7e:a1:17:c3:2a:2a:94:1a:b4:33:3e:2f:ec:
d2:f6:60:d9:19:95:4a:a3:56:ca:0d:70:15:49:c0:
c1:65:7e:90:4e:45:1e:38:6e:39:60:ac:34:df:c7:
09:8f:5c:6f:e7:30:7f:96:d8:e9:3e:45:3d:78:41:
0c:09:15:e8:0f:2b:4c:c6:86:a3:41:c0:04:5b:2a:
71:b8:e9:30:99:d8:27:9c:5f:14:07:bb:b6:15:f3:
15:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5B:0C:F5:2E:C2:6F:05:83:5C:E9:A3:C6:1D:05:58:2B:4D:5D:00
X509v3 Authority Key Identifier:
keyid:99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ff:42:24:a6:68:c6:6d:a1:0e:6f:d3:9e:ed:fb:a9:d6:69:
3a:93:e2:2b:cc:c2:ff:4a:af:49:ad:26:12:40:5c:05:1b:a2:
d4:16:50:b8:6d:d7:f6:8b:1d:de:71:15:00:9f:c4:04:32:44:
67:88:ad:08:7c:d0:9f:79:5c:ed:10:f7:be:de:4b:65:b7:c5:
d2:76:2b:fb:db:10:e8:7e:d9:86:58:07:ff:c0:97:ba:79:6d:
28:62:06:1e:8d:96:79:22:7b:79:d6:a8:75:8d:15:a1:3f:49:
f1:82:ed:ef:c2:ce:f8:75:b7:da:5a:e7:43:83:7a:a9:75:10:
03:81:c5:13:5b:0d:bc:7d:57:3f:21:6e:06:17:83:7d:05:48:
65:2f:0a:16:55:06:6b:5f:30:4c:19:2b:35:e8:06:91:90:d4:
e1:a1:ca:7a:b5:f3:cd:96:ed:aa:8c:47:b1:95:26:6b:7a:c1:
eb:82:c6:f9:66:0f:da:f1:75:41:41:64:43:42:2e:80:0c:2b:
06:76:46:ad:c6:00:4b:29:64:93:d7:0d:b2:04:7a:ac:ad:bf:
4b:4a:e0:ed:56:e6:d0:74:76:47:c9:9c:2d:3f:f9:78:1a:35:
fc:6d:69:36:b0:00:50:f2:45:23:71:15:b8:4c:6f:23:c5:cf:
07:64:78:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:54 2025 by rpki-client