
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
File: MMu06oV_eyolkC7geq4ucSLc1cw.mft (raw, json)
Hash identifier: Ol1JKI4qxhvkPqBo88EEzm/cXX88MU6qe5wSb6iDj3U=
Subject key identifier: CF:23:62:43:E7:2A:DC:83:4E:CF:5E:32:FE:5E:ED:47:BC:D1:1A:93
Authority key identifier: 30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC
Certificate issuer: /CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
Certificate serial: 01988167037D5E47EE21695A34BD5B00613E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 22:01:08 +0000
Manifest this update: Wed 06 Aug 2025 22:01:08 +0000
Manifest next update: Thu 07 Aug 2025 22:01:08 +0000
Files and hashes: 1: MMu06oV_eyolkC7geq4ucSLc1cw.crl (hash: Zyg4Vx+PrMjLyRVvvferFlF2ckFf30i3yvDm+16L/xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:03:7d:5e:47:ee:21:69:5a:34:bd:5b:00:61:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
Validity
Not Before: Aug 6 22:01:08 2025 GMT
Not After : Aug 7 22:01:08 2025 GMT
Subject: CN=cf236243e72adc834ecf5e32fe5eed47bcd11a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:81:b5:5c:5a:90:8a:95:7d:de:4d:ba:92:af:
95:f4:17:f6:08:30:da:6d:7e:f6:44:16:ad:db:5e:
37:6a:ce:88:b7:a8:43:d5:7b:ac:e3:be:1b:63:98:
8a:00:82:34:2b:e9:b2:da:b5:ab:c4:6c:79:47:1a:
b3:54:94:79:3a:ac:69:4d:5e:ad:fd:4d:6d:35:54:
b7:5b:89:72:96:cf:cb:b6:61:c3:c1:7f:3c:08:93:
48:59:be:b5:d7:4c:a8:dd:88:40:df:9e:d9:e0:d1:
94:8c:a7:54:9c:96:6d:fc:df:b3:b3:ab:ef:f5:f9:
df:db:79:b1:fc:4e:20:a6:0e:79:37:8b:9a:ad:27:
16:ec:5b:9d:17:92:ae:02:db:8e:ce:c2:ad:1d:0c:
00:af:33:a7:92:54:31:43:b7:75:58:2f:9f:72:d3:
ee:32:ed:2b:73:b5:64:d6:16:9f:a9:6b:f8:30:46:
bf:fe:a5:6a:7b:fe:80:d5:40:ab:43:52:b2:9c:de:
68:29:bd:19:ac:6d:50:c3:8e:16:92:2c:23:39:4a:
61:95:9c:22:4c:3f:13:d6:8d:d2:38:ca:e1:b5:a8:
c1:02:6f:32:4e:9c:6b:89:3f:16:53:0b:74:bd:09:
00:cf:e1:c3:af:27:81:2e:80:32:9d:a1:49:d1:04:
ec:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:23:62:43:E7:2A:DC:83:4E:CF:5E:32:FE:5E:ED:47:BC:D1:1A:93
X509v3 Authority Key Identifier:
keyid:30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c8:34:5c:1a:e7:01:a3:2a:86:92:9d:52:5a:99:fb:d0:a8:
be:7b:f9:9c:71:01:4d:5a:d6:df:83:2d:48:a7:0c:12:21:aa:
30:02:3e:c4:7e:1b:52:b6:cc:b4:e1:81:c4:da:92:6e:16:e0:
e1:a7:87:e0:2c:2c:de:ba:24:e0:dd:12:c7:02:41:b8:30:67:
80:f9:dc:48:b3:d0:47:c2:47:64:90:4f:fd:3e:1e:6f:32:c1:
03:fc:a1:41:7a:0c:c0:f1:21:b9:67:a7:bf:fe:dd:04:1a:85:
88:24:33:37:d8:80:05:bd:64:2f:d6:d0:27:78:91:e5:fc:f9:
30:29:15:cf:68:43:44:af:3d:9c:6d:b3:0b:3e:99:48:75:a5:
16:56:d6:ad:c2:7d:58:38:43:4b:76:cf:7c:1d:0d:28:fd:83:
7d:41:5c:68:0d:4d:8a:3c:a0:f6:57:ab:9b:e9:6c:07:91:6e:
89:f5:b2:35:92:0e:5e:2a:4c:b4:9a:56:c1:03:36:4d:b6:19:
06:76:4f:86:6b:cc:20:b0:0a:d3:67:50:68:00:76:29:31:ed:
61:c7:b6:05:7a:23:25:d5:a3:4c:b8:8b:89:09:34:a1:78:52:
31:9b:a3:81:df:cc:74:0b:94:db:41:cd:14:fb:f9:3f:0f:ad:
1f:4d:6d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:55 2025 by rpki-client