Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
File: mmzb9HURP5bKeKB6-9RFjIiIB3E.mft (raw, json)
Hash identifier: JbIw6yrMB+mc2EmwW1tLTqbDOrWP7K/ao6wpOqUe1X8=
Subject key identifier: 0D:30:0E:75:AF:95:0F:C5:D7:26:1A:20:33:F5:08:82:93:96:13:F8
Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Certificate serial: 019A4DAAD89E5DD69E9916BB70BD22B9FD5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
Manifest number: 05D3
Signing time: Tue 04 Nov 2025 07:00:33 +0000
Manifest this update: Tue 04 Nov 2025 07:00:33 +0000
Manifest next update: Wed 05 Nov 2025 07:00:33 +0000
Files and hashes: 1: j_X8tJ2h9OHGJHosgdoOoXcoQic.roa (hash: +g3waCGUvWC6G9wCV2Zz7i7n4x4ui8ded+3mDQgQ1Kc=)
2: mmzb9HURP5bKeKB6-9RFjIiIB3E.crl (hash: 0Vos189TgsKRij608+0EOyeQVn2QylO6kWDay97CnZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:d8:9e:5d:d6:9e:99:16:bb:70:bd:22:b9:fd:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Validity
Not Before: Nov 4 07:00:33 2025 GMT
Not After : Nov 5 07:00:33 2025 GMT
Subject: CN=0d300e75af950fc5d7261a2033f50882939613f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:04:90:16:2c:7e:9d:2a:cb:73:54:4b:d5:
5d:a4:cb:54:3f:4d:54:6b:de:c1:54:b8:50:b6:25:
15:52:f8:76:a4:f8:aa:c3:89:ac:2e:8c:5e:12:b7:
71:ad:95:64:1a:31:08:eb:f1:5f:d6:fd:5a:a5:2b:
a2:19:18:fa:6b:c9:da:35:b8:b9:1d:07:23:72:ba:
27:d8:d5:39:c9:72:b0:d2:7c:48:9d:68:22:d3:fc:
86:0c:a4:79:66:6b:c5:23:bf:6e:aa:9b:a1:ec:35:
6e:e2:e1:6b:ae:5d:05:d7:bc:71:81:5a:53:0a:c0:
86:fc:33:4c:31:d6:f4:b6:a9:c6:69:db:1b:32:43:
b7:48:1b:ff:81:22:57:6d:f3:17:2d:dc:6d:ee:b1:
6a:e3:97:f9:39:3c:69:d1:85:9d:f7:05:b3:c8:68:
aa:12:93:f1:f2:c8:00:a3:31:12:86:9d:2b:9b:23:
5f:0e:e8:63:01:cf:77:7c:34:c0:ea:4a:bf:71:ad:
9a:bf:5e:a1:b9:b1:92:d5:22:a0:c7:29:d7:56:eb:
ab:fc:92:22:a1:4e:eb:36:2a:99:06:35:a8:d4:8b:
ad:aa:5d:8f:e0:6f:4e:93:02:db:44:d9:14:fb:8f:
dd:c2:c0:1c:d2:47:3b:56:6e:28:12:a2:9b:03:74:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:30:0E:75:AF:95:0F:C5:D7:26:1A:20:33:F5:08:82:93:96:13:F8
X509v3 Authority Key Identifier:
keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:32:89:64:a5:01:0f:e4:d5:77:ca:60:b6:f9:1a:21:9c:be:
7f:cf:6f:b0:5f:1a:ac:4c:f9:6c:47:51:a9:32:b3:df:a2:04:
3d:d9:f0:5d:5c:ac:e2:0b:56:55:f3:22:c2:2b:bc:0c:2c:21:
59:d3:38:29:a8:e2:cb:f6:a9:f4:c3:e2:f9:2b:82:dd:ce:97:
df:ac:b9:20:0a:89:da:e3:b3:7d:d8:f3:59:29:11:d0:7c:71:
bd:04:b1:6f:86:21:87:6e:ee:67:68:83:a2:4a:eb:54:2f:7b:
a3:33:fe:58:5e:f8:af:9c:6c:5b:5e:d3:75:15:1f:d5:62:5a:
0c:c6:b6:25:4c:b6:08:f3:b7:64:26:92:20:22:a3:77:a7:64:
d1:f4:57:d8:f6:81:61:25:95:b0:86:13:0d:25:1c:4a:34:46:
1d:5c:87:d1:96:48:ca:d2:f8:a5:8f:fe:bd:f2:13:00:8f:2c:
c4:13:80:33:e1:aa:1a:38:fd:eb:d4:94:c9:55:a6:c2:aa:b1:
5d:a7:6f:e3:8a:4c:3b:3f:52:14:d4:3f:03:6c:cf:46:bf:03:
59:b8:9c:0b:59:27:a3:b9:68:6a:21:4e:83:b7:e3:8c:9d:05:
31:36:0d:94:32:68:a4:de:4d:df:e9:52:f6:c8:ae:17:44:86:
67:dc:d6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:43 2025 by rpki-client