Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
File: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft (raw, json)
Hash identifier: Wy4LpqJ+l4BuueeA3ROGNIYFFncJFzQzxnYITg7Zz+c=
Subject key identifier: CC:71:C1:B1:D3:65:74:9A:1D:2A:BC:29:F2:C5:38:1A:D3:3E:C2:25
Authority key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
Certificate issuer: /CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Certificate serial: 019873E3CE2B333E4891FDCAB7A47C1DCA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
Manifest number: 0D78
Signing time: Mon 04 Aug 2025 07:02:45 +0000
Manifest this update: Mon 04 Aug 2025 07:02:45 +0000
Manifest next update: Tue 05 Aug 2025 07:02:45 +0000
Files and hashes: 1: 0qrwU3AHf3uhnYK1JVGdBCRu6z8.roa (hash: /kYhLDLgGmD/nuK1uy52fNBM98m/fU6G1KeanfyrJjY=)
2: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl (hash: WyFgE5lgapb9crkZlcMxqjyXt371ItYliy8WnxMpZbY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:ce:2b:33:3e:48:91:fd:ca:b7:a4:7c:1d:ca:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Validity
Not Before: Aug 4 07:02:45 2025 GMT
Not After : Aug 5 07:02:45 2025 GMT
Subject: CN=cc71c1b1d365749a1d2abc29f2c5381ad33ec225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:81:ab:9a:ca:25:b2:ee:2d:4f:61:a5:e6:
f8:fe:d0:54:23:ec:5b:23:49:f8:5c:c9:d9:cb:c2:
ef:8b:b1:90:84:36:ee:f0:19:32:3e:31:7b:67:5b:
79:54:02:5f:10:9f:9e:fb:cc:69:1f:1b:64:7c:bf:
88:a8:f1:24:b4:7f:3d:1c:88:40:e4:d2:e7:17:56:
f2:67:10:6a:34:b0:0c:b1:f7:37:71:83:e7:91:94:
39:6e:ab:8e:14:29:c3:89:15:67:9b:b7:eb:61:31:
78:3e:0e:63:1b:ed:8d:38:79:4b:3a:5e:67:4b:76:
58:f0:6d:11:bd:cb:ed:fc:6c:2d:39:92:c0:96:f3:
41:95:5e:c6:a0:53:61:39:f4:f3:8c:23:6f:f5:88:
45:2b:fd:ab:64:d7:d5:c3:1b:38:b4:4b:3f:9a:a0:
fc:bb:3a:e0:44:ea:4a:9d:42:15:5f:91:05:63:6b:
84:ce:48:d6:ea:aa:12:3c:5a:0a:cf:95:31:a7:8a:
32:9a:25:39:4b:e4:d4:9f:50:de:fc:29:de:7f:96:
df:05:07:b8:81:58:b2:2e:6b:45:54:4c:15:43:81:
b8:36:58:48:59:f8:e9:d6:69:c6:4e:d4:92:8c:da:
1d:58:75:5c:33:a2:34:74:dc:32:c7:b4:67:ea:dc:
2e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:71:C1:B1:D3:65:74:9A:1D:2A:BC:29:F2:C5:38:1A:D3:3E:C2:25
X509v3 Authority Key Identifier:
keyid:9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fe:cd:91:c0:d4:bd:d8:f5:72:ea:8f:0f:23:ce:9a:03:5f:
d5:f4:92:f6:f4:88:32:62:f1:9e:4b:25:15:39:a5:96:8e:5c:
91:28:be:1a:5b:86:8f:63:4a:53:f3:01:a1:e6:4c:1e:06:57:
9c:47:d1:22:47:db:9b:d1:07:2d:ca:76:c2:5c:5b:66:8b:bb:
2b:f2:74:b9:3c:ff:29:71:bb:49:bb:41:4c:92:f5:fc:8e:5b:
8c:3b:8f:4d:4c:22:63:62:25:76:63:bd:a2:5d:5d:4c:cd:99:
4a:76:e8:d2:78:3e:33:ad:f7:4c:5e:dd:02:8b:4d:f5:87:1f:
46:ec:c3:0a:86:39:6d:01:7b:a5:97:5f:0e:2d:c8:1e:cf:c9:
65:42:9d:80:a2:ec:ab:99:27:43:4b:99:6d:b4:6b:51:36:da:
77:77:76:04:81:45:8f:97:97:7e:b4:99:90:67:6c:d3:b5:0f:
df:fd:8c:35:51:58:b9:b3:c9:cc:25:0f:f4:ab:e2:85:0a:cf:
7d:bd:40:e2:46:4f:b8:9c:fd:fe:e9:4f:11:5f:b2:4e:3f:d0:
8f:25:25:fd:7d:4b:86:ff:39:46:a6:b0:e7:0e:dd:05:ad:85:
4f:82:50:ac:13:a6:2e:60:15:ab:c2:8f:3c:4f:9a:ec:57:38:
fc:97:cf:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:18:01 2025 by rpki-client