Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
File: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft (raw, json)
Hash identifier: ngICWcejs4KGksXxCZONh/Y5pSoRfjKY33QgdjRnrLc=
Subject key identifier: CB:73:55:D2:E7:6E:C1:3C:ED:2B:77:DA:17:40:95:E3:C8:01:50:56
Authority key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
Certificate issuer: /CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Certificate serial: 019A50E2DFB476A7F2AC4AF56CA92D083A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
Manifest number: 0E6F
Signing time: Tue 04 Nov 2025 22:00:36 +0000
Manifest this update: Tue 04 Nov 2025 22:00:36 +0000
Manifest next update: Wed 05 Nov 2025 22:00:36 +0000
Files and hashes: 1: 0qrwU3AHf3uhnYK1JVGdBCRu6z8.roa (hash: /kYhLDLgGmD/nuK1uy52fNBM98m/fU6G1KeanfyrJjY=)
2: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl (hash: AtG2aT7MiOwRoNDKwGoZPj9vlOeATAUSqmg4VLMC6oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:df:b4:76:a7:f2:ac:4a:f5:6c:a9:2d:08:3a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Validity
Not Before: Nov 4 22:00:36 2025 GMT
Not After : Nov 5 22:00:36 2025 GMT
Subject: CN=cb7355d2e76ec13ced2b77da174095e3c8015056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:59:f4:9a:67:7f:c1:a0:b3:42:19:43:45:66:
9c:04:51:1a:a3:ba:25:69:56:08:07:b0:a0:76:a3:
8d:60:b5:6b:44:3f:aa:0f:5d:87:37:55:36:69:f8:
79:38:ab:ce:f0:03:fa:01:a3:60:5c:de:8a:bc:82:
8a:ac:0d:9b:1c:d0:42:be:85:da:b5:49:2b:3e:8c:
ab:c2:b3:91:3c:5b:64:d7:ea:a7:99:c3:d3:c2:65:
9b:11:af:dd:57:35:c5:42:22:83:6b:20:f4:dc:3c:
be:cf:bb:1d:3a:b9:f0:a1:e7:97:72:fc:42:55:42:
4b:09:05:66:2a:22:b9:93:5e:ce:db:f9:11:d3:d8:
1d:76:53:b4:48:8f:e5:d7:b7:46:98:fd:be:c7:42:
6a:5a:8b:6d:15:9d:fd:b3:bc:f1:71:2f:04:7e:c9:
e4:05:63:f5:92:3b:6e:a6:b8:45:a1:52:2e:f9:34:
77:8a:bb:97:c3:5f:d2:f3:a9:6c:2c:4d:fb:a7:6a:
28:0b:f2:07:77:f5:46:65:a8:ce:29:33:aa:8c:3b:
60:fa:bf:7e:a1:2e:c0:04:7e:ae:d3:25:21:2f:51:
3f:d7:5d:d4:66:b9:28:52:31:f9:9b:f8:11:6e:00:
05:4b:a6:95:67:c3:09:14:69:b5:3e:75:7f:09:f7:
32:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:73:55:D2:E7:6E:C1:3C:ED:2B:77:DA:17:40:95:E3:C8:01:50:56
X509v3 Authority Key Identifier:
keyid:9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b5:27:e2:b6:e8:39:64:40:d3:f8:aa:ef:51:c2:ba:a6:98:
ba:33:ad:46:9b:7f:21:1e:c8:19:0c:d7:10:96:58:cb:88:c4:
90:08:eb:4e:ca:86:31:2c:82:b7:61:e1:00:05:66:a2:d7:31:
f1:fb:4b:32:50:94:67:6d:00:cb:d0:dc:91:07:b6:75:49:1b:
da:89:fc:dc:21:27:69:b9:43:a8:2d:6b:9b:e2:72:b0:05:77:
d6:a2:55:cc:5c:1d:9e:43:f8:e0:59:82:67:ac:f6:be:17:c8:
12:82:04:ff:a8:01:4a:a0:62:0e:ff:96:8c:99:31:de:e3:6d:
71:af:4b:2f:b8:df:3c:bd:50:64:26:8b:75:e3:74:34:f5:6c:
1d:1b:bc:cf:35:18:65:49:30:11:d8:db:7a:84:fc:35:c3:e2:
f4:bf:e8:31:55:d0:84:3a:ae:bd:6d:94:72:af:e6:d2:53:93:
b9:fe:ab:fa:38:b3:a2:68:1e:81:34:ba:fc:c6:38:5e:bb:33:
3f:68:6b:fe:e0:30:09:40:62:e4:ef:b8:5d:9a:92:4b:00:fb:
42:5c:f9:40:a8:53:7f:32:8d:ec:cb:0f:38:3d:00:85:ab:7c:
0b:91:6d:56:0b:89:0a:8b:a1:3b:9c:78:b6:01:02:2b:79:21:
a0:ea:92:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQ4t+0dqfyrEr1bKktCDonMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNjIwZTY5MWQ5NWFhY2ViMzI2MmRiZGZjYjBjYTUwOTll
ZTI0NDQwHhcNMjUxMTA0MjIwMDM2WhcNMjUxMTA1MjIwMDM2WjAzMTEwLwYDVQQD
EyhjYjczNTVkMmU3NmVjMTNjZWQyYjc3ZGExNzQwOTVlM2M4MDE1MDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ln0mmd/waCzQhlDRWacBFEao7ol
aVYIB7CgdqONYLVrRD+qD12HN1U2afh5OKvO8AP6AaNgXN6KvIKKrA2bHNBCvoXa
tUkrPoyrwrORPFtk1+qnmcPTwmWbEa/dVzXFQiKDayD03Dy+z7sdOrnwoeeXcvxC
VUJLCQVmKiK5k17O2/kR09gddlO0SI/l17dGmP2+x0JqWottFZ39s7zxcS8Efsnk
BWP1kjtuprhFoVIu+TR3iruXw1/S86lsLE37p2ooC/IHd/VGZajOKTOqjDtg+r9+
oS7ABH6u0yUhL1E/113UZrkoUjH5m/gRbgAFS6aVZ8MJFGm1PnV/Cfcy/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtzVdLnbsE87St32hdAlePIAVBWMB8GA1UdIwQY
MBaAFJpiDmkdlarOsyYtvfywylCZ7iREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW1JT2FSMlZxczZ6SmkyOV9MREtVSm51SkVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yODU0ZjItODJkNy00MmJkLWFjYmMt
ZDA4YTljZGVjOTg2LzEvbW1JT2FSMlZxczZ6SmkyOV9MREtVSm51SkVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yODU0ZjItODJkNy00MmJkLWFjYmMtZDA4YTljZGVjOTg2
LzEvbW1JT2FSMlZxczZ6SmkyOV9MREtVSm51SkVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbUn4rbo
OWRA0/iq71HCuqaYujOtRpt/IR7IGQzXEJZYy4jEkAjrTsqGMSyCt2HhAAVmotcx
8ftLMlCUZ20Ay9DckQe2dUkb2on83CEnablDqC1rm+JysAV31qJVzFwdnkP44FmC
Z6z2vhfIEoIE/6gBSqBiDv+WjJkx3uNtca9LL7jfPL1QZCaLdeN0NPVsHRu8zzUY
ZUkwEdjbeoT8NcPi9L/oMVXQhDquvW2Ucq/m0lOTuf6r+jizomgegTS6/MY4Xrsz
P2hr/uAwCUBi5O+4XZqSSwD7Qlz5QKhTfzKN7MsPOD0Ahat8C5FtVguJCouhO5x4
tgECK3khoOqSBQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:31:54 2025 by rpki-client