Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
File: EX-Mmn_H8TZY1ir76285iC2lEcw.mft (raw, json)
Hash identifier: BZml4NRN2CQP1pHuu2WfRBsKbRqF7rdOhgJ+4s5xRYk=
Subject key identifier: 7F:66:EE:24:75:75:95:45:64:9F:E3:6A:55:E4:F7:44:B1:80:4E:2B
Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
Certificate issuer: /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Certificate serial: 019A541AF37EBE740866E4EA79E250C1D402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 13:00:43 +0000
Manifest this update: Wed 05 Nov 2025 13:00:43 +0000
Manifest next update: Thu 06 Nov 2025 13:00:43 +0000
Files and hashes: 1: EX-Mmn_H8TZY1ir76285iC2lEcw.crl (hash: b2SkF3Nk2nebUVZ7eOHODcKqCR+XsFDXJ8xri87+2gc=)
2: ibWU2hc-15QgZKi7MldaZ8Rm5_8.roa (hash: bP6Dry9UHojDKjvZz2pROS6WfkRMKw8CNymma91NgNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:f3:7e:be:74:08:66:e4:ea:79:e2:50:c1:d4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc
Validity
Not Before: Nov 5 13:00:43 2025 GMT
Not After : Nov 6 13:00:43 2025 GMT
Subject: CN=7f66ee2475759545649fe36a55e4f744b1804e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:58:fb:20:fc:86:31:e1:32:34:3e:45:24:
3e:c0:5c:c9:43:20:c3:3d:73:3e:70:31:af:7a:4d:
01:1f:f4:41:41:14:d3:2f:02:b9:32:4c:1e:0f:e1:
41:51:55:4b:7c:b2:d0:b6:7e:7f:07:2d:22:96:dc:
67:85:09:e7:4a:c6:27:af:b6:e2:36:14:1b:d5:cf:
b8:72:7b:d5:84:32:cc:ce:2b:a2:5e:00:a4:55:77:
bc:26:07:cd:fd:a7:68:fa:61:64:dd:c4:3f:03:57:
77:5e:00:b0:4a:d7:df:82:c4:08:ec:50:15:ea:3b:
24:93:d6:01:2a:27:c3:e0:39:93:b7:ff:1d:a4:35:
bf:04:c7:13:12:05:c2:06:0d:6b:28:75:6f:3d:9e:
b2:e7:1b:6b:44:41:46:1a:aa:45:39:e7:5d:0f:fa:
13:40:b1:c7:15:b2:38:a3:1e:47:2b:2e:c2:fe:f2:
c6:e7:95:f9:15:70:a2:ce:fe:7b:02:73:55:47:78:
91:f0:88:16:0a:e5:ab:7b:87:9d:da:f4:78:aa:e1:
8c:0b:21:79:94:1f:50:e4:a9:a6:5a:59:a8:59:ba:
16:62:d1:c7:ed:57:1e:8e:ed:61:de:de:bd:11:ec:
7c:4a:74:59:81:8f:37:ef:46:bb:05:44:eb:fe:c0:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:66:EE:24:75:75:95:45:64:9F:E3:6A:55:E4:F7:44:B1:80:4E:2B
X509v3 Authority Key Identifier:
keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:37:3c:27:93:7e:fc:81:12:35:4a:c6:13:7c:97:90:e4:13:
c0:41:05:e0:e8:6a:6d:d4:be:60:68:b0:4d:e6:b5:a1:5d:57:
e2:1f:af:33:48:e2:ee:3e:ce:6d:27:df:d2:91:5c:26:e4:bc:
99:ec:ff:be:10:8d:c5:30:4f:d0:57:1c:51:ee:af:aa:b0:58:
14:bd:e5:23:4a:ce:8a:b6:6c:cf:bb:31:c8:f3:3e:ef:eb:1e:
b6:ae:e3:a8:7f:70:d7:7c:ca:ea:f1:e7:12:81:8c:a0:84:45:
d7:9e:a1:f0:ef:d6:59:48:ee:a6:15:57:54:cf:2e:cb:1d:6d:
bc:7d:ff:c4:d8:8e:c1:2f:0e:df:99:83:b1:f4:7a:cf:25:b9:
7d:74:0c:56:0c:fd:ee:11:3c:9d:76:17:29:64:42:6c:4c:be:
27:d1:71:74:7a:09:72:9c:ab:b7:fc:6d:fb:8a:0b:33:5c:f9:
47:a8:42:6a:87:70:1e:60:7a:e4:6f:28:f0:21:20:17:2c:ac:
b5:6b:97:1c:3a:e6:a7:ea:07:ad:4b:79:ae:b7:ed:65:05:14:
68:c7:a0:90:cb:6b:2d:eb:b6:93:4c:bd:83:45:bc:c1:9c:ef:
a5:22:cc:b8:e6:6e:41:5f:b7:2c:d2:6c:bf:a4:1a:63:a7:c2:
c5:84:c3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:14:03 2025 by rpki-client