Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
File: mmzb9HURP5bKeKB6-9RFjIiIB3E.mft (raw, json)
Hash identifier: 3aJQIvTShbIlv60YTDsXrrSgrKe2lbRrc+I3yG8wdz8=
Subject key identifier: B5:FF:1F:37:48:4C:CF:F6:C5:55:FF:73:B2:EF:C6:8F:61:71:FD:A3
Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Certificate serial: 019788EB9314803FFB795110CCC214489113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
Manifest number: 0464
Signing time: Thu 19 Jun 2025 16:00:29 +0000
Manifest this update: Thu 19 Jun 2025 16:00:29 +0000
Manifest next update: Fri 20 Jun 2025 16:00:29 +0000
Files and hashes: 1: j_X8tJ2h9OHGJHosgdoOoXcoQic.roa (hash: +g3waCGUvWC6G9wCV2Zz7i7n4x4ui8ded+3mDQgQ1Kc=)
2: mmzb9HURP5bKeKB6-9RFjIiIB3E.crl (hash: LtQ/4Uqp5wMX5QcRU3lZfGwRiM1WEg25+fvaLJuqFes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:eb:93:14:80:3f:fb:79:51:10:cc:c2:14:48:91:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Validity
Not Before: Jun 19 16:00:29 2025 GMT
Not After : Jun 20 16:00:29 2025 GMT
Subject: CN=b5ff1f37484ccff6c555ff73b2efc68f6171fda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:96:b2:0b:49:61:c7:d4:7c:6b:7d:da:fd:1f:
29:f1:f8:65:81:c9:bd:68:1f:83:43:11:bf:84:8c:
21:1f:be:71:06:00:00:a8:a1:ae:d4:a4:fc:4a:3c:
71:51:28:ed:a5:78:fd:c6:1d:97:a7:bd:45:e1:82:
b7:51:47:6e:56:33:a3:14:03:66:31:61:01:d2:9b:
83:d4:59:c6:bf:21:67:d2:38:82:06:3f:df:89:cb:
37:99:cd:2a:42:1b:b9:e5:56:70:81:c9:89:1b:73:
26:c4:19:da:9e:55:63:9a:46:c4:32:65:9f:9c:f5:
65:5e:38:5a:50:59:49:be:6f:6f:47:61:64:16:ab:
9a:5a:90:b1:d6:2f:3d:3e:1c:fe:53:55:fa:bd:f3:
96:fd:af:7f:5e:ca:c3:fb:dc:13:00:6e:47:71:ab:
d3:a3:6d:f9:96:6f:15:4b:e9:00:2d:73:1f:eb:de:
df:38:41:ea:a7:3c:cd:57:70:a8:58:66:9c:62:87:
29:bb:3c:d5:bb:da:a1:ae:98:7f:ad:7c:a5:64:5b:
94:be:6a:7f:04:88:b9:32:99:88:91:d0:22:4a:8c:
2b:c8:cf:40:38:33:f9:b4:69:d6:f9:ac:87:c3:6d:
5d:ea:8c:c7:77:86:c8:f9:68:d9:5f:2e:5d:a7:d7:
f3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FF:1F:37:48:4C:CF:F6:C5:55:FF:73:B2:EF:C6:8F:61:71:FD:A3
X509v3 Authority Key Identifier:
keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:82:97:ea:de:f8:63:3f:0c:6d:84:bb:cd:47:60:df:e5:f6:
30:13:ce:8a:59:1d:cc:b6:dc:0f:be:b2:df:22:35:9d:45:c0:
f8:17:63:d5:a3:a6:94:e6:72:4b:c3:ba:a3:a6:20:41:f2:fe:
90:2a:d6:d4:fa:98:f5:b2:46:f6:f9:4a:03:7a:d6:08:73:2d:
fc:02:6d:ba:11:d5:83:c8:8d:68:1a:42:0f:f1:16:37:9a:5c:
ae:5f:88:b4:42:c2:70:94:57:2b:d9:07:da:1c:50:1e:a2:99:
d8:03:cf:0f:b0:2d:87:f3:a2:59:ec:4d:fd:7d:fb:44:58:67:
a9:d1:7e:94:87:7c:3f:d8:d2:fa:4b:52:ed:06:aa:51:58:7d:
aa:82:d6:8b:c1:26:82:a0:9a:04:c1:08:49:cf:94:b1:a8:8e:
8d:76:16:62:f5:bd:20:8c:39:82:7d:4a:c5:3a:8a:c2:89:29:
91:46:54:c1:54:1b:21:7d:8c:df:79:80:34:0c:1c:db:95:0a:
d3:2b:b5:31:6e:e0:ea:9c:d7:f1:34:e3:44:f5:a1:bc:ba:6f:
4d:40:5c:48:ea:f6:a8:b4:ce:a8:74:5d:9d:1a:f8:6a:d2:1c:
35:a5:3c:62:f5:3b:ef:7b:d8:58:75:4b:8f:c0:77:ea:33:50:
19:b1:8c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:38:05 2025 by rpki-client