Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
File: mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft (raw, json)
Hash identifier: yQKvBO1lXUIb1NDHfp207PQ5eUb73op88IyYOcctSBw=
Subject key identifier: 07:5A:E5:75:21:77:AD:18:4F:F2:A4:19:08:10:C5:B6:40:BF:A0:1D
Authority key identifier: 9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
Certificate issuer: /CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Certificate serial: 019A4D7380DE071C64FC23A74C8DDF215C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
Manifest number: 0B59
Signing time: Tue 04 Nov 2025 06:00:06 +0000
Manifest this update: Tue 04 Nov 2025 06:00:06 +0000
Manifest next update: Wed 05 Nov 2025 06:00:06 +0000
Files and hashes: 1: mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl (hash: cNI0IyydsOGEewCOaTSO6NnOd3i4PWRZDGoYqvnzUXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:80:de:07:1c:64:fc:23:a7:4c:8d:df:21:5c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Validity
Not Before: Nov 4 06:00:06 2025 GMT
Not After : Nov 5 06:00:06 2025 GMT
Subject: CN=075ae5752177ad184ff2a4190810c5b640bfa01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:23:09:0d:f7:70:e9:b6:31:64:46:73:eb:
22:7e:21:17:01:af:1f:c5:88:49:d6:4f:23:b5:67:
9c:c0:0e:2f:bc:4d:b8:ef:25:04:60:e6:b8:79:17:
66:9a:a1:ce:a3:a3:1d:19:21:8f:93:ec:36:30:2e:
be:e3:6f:bd:cf:02:83:20:e8:2c:56:2a:af:8b:66:
e0:cb:bc:f5:44:42:11:5d:69:1e:81:71:37:ac:d2:
cd:f1:e9:8c:96:c2:f1:97:0c:36:56:69:92:0e:98:
23:ea:06:7a:4b:0a:f0:79:11:42:9d:4a:5d:db:83:
1f:1f:bd:7a:59:f3:d2:23:8d:e7:bb:6d:05:4d:f2:
ab:97:4c:0b:93:9f:1d:73:a0:8a:42:62:a7:5b:88:
64:55:77:87:ec:47:91:78:9f:2a:87:5e:e4:4a:ba:
47:2a:80:fa:51:96:51:44:2b:89:d0:e9:1c:aa:54:
92:ce:1b:55:35:78:0b:a5:60:1c:8f:2c:f8:93:70:
ab:d0:bf:6f:63:b5:1f:62:6e:6f:fb:17:1d:fb:45:
43:de:c1:dc:01:e3:88:ff:d3:87:81:e7:a2:ab:86:
1f:f5:e3:4b:ed:a8:ff:a1:a3:cd:a7:b6:3c:0a:68:
83:ca:57:a1:40:3d:d4:22:ce:23:e8:16:9e:eb:59:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5A:E5:75:21:77:AD:18:4F:F2:A4:19:08:10:C5:B6:40:BF:A0:1D
X509v3 Authority Key Identifier:
keyid:9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fc:1e:cf:82:e4:74:ff:d6:cd:93:5e:00:b9:b9:06:ba:93:
23:0b:13:25:94:21:6c:a7:29:82:20:1a:28:1e:b7:90:04:77:
3c:f2:3d:ec:e4:aa:a4:07:e0:05:17:ac:50:2a:29:88:76:65:
49:13:c9:fa:62:12:ab:f6:8d:dd:5e:61:5c:6f:69:e4:21:3f:
06:44:5c:4c:5c:c9:6a:ce:b0:67:d0:2e:a8:79:55:95:5b:ec:
1d:78:ca:d1:f1:70:09:74:f9:ae:3d:0e:f2:48:08:10:f9:b3:
b7:4f:24:3a:33:fe:9f:a8:32:b6:18:9a:23:c6:34:4a:ae:5f:
6f:1a:67:a3:f2:80:39:aa:f8:9f:64:40:25:f8:43:37:a1:3d:
c0:10:ec:63:1a:aa:e6:6c:23:14:98:c0:69:48:c9:b5:bb:41:
d7:da:6d:33:b4:31:30:cc:a8:e7:97:d9:ea:73:20:e1:de:3b:
9b:b3:a0:17:d6:20:f8:4b:25:14:40:81:29:7b:c7:e0:2a:dc:
76:6c:56:65:23:bd:fe:7b:ff:8b:02:05:e5:ab:46:29:5b:fb:
47:c0:61:11:8e:50:38:c9:f2:10:57:40:01:18:9b:5c:e4:66:
74:d1:5e:23:d7:5c:fe:a8:9a:33:b8:2c:7f:a5:df:71:c8:69:
34:62:fa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:04 2025 by rpki-client