Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
File: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft (raw, json)
Hash identifier: aw9vq0kYaqBJrpP0Q2cYAgpTFjFwNNTdpQSddXnVre8=
Subject key identifier: 3D:FA:BA:02:83:70:D6:A6:93:68:59:8C:F3:F5:95:77:C1:5D:22:13
Authority key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
Certificate issuer: /CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Certificate serial: 019774F7BEA772DA98D33B2D6D8339179EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
Manifest number: 0CF4
Signing time: Sun 15 Jun 2025 19:01:22 +0000
Manifest this update: Sun 15 Jun 2025 19:01:22 +0000
Manifest next update: Mon 16 Jun 2025 19:01:22 +0000
Files and hashes: 1: 0qrwU3AHf3uhnYK1JVGdBCRu6z8.roa (hash: /kYhLDLgGmD/nuK1uy52fNBM98m/fU6G1KeanfyrJjY=)
2: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl (hash: tMmtV68wbe5U2vPYgk+PhPQ1WXPj0p3jGR0aqxCeg84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:be:a7:72:da:98:d3:3b:2d:6d:83:39:17:9e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Validity
Not Before: Jun 15 19:01:22 2025 GMT
Not After : Jun 16 19:01:22 2025 GMT
Subject: CN=3dfaba028370d6a69368598cf3f59577c15d2213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:11:95:95:b6:eb:7e:f2:c8:e0:05:f6:10:
b3:4e:96:8b:51:66:f9:85:cf:8b:5c:21:d0:58:33:
c6:15:c6:aa:89:39:1d:17:24:88:8e:ae:34:2f:90:
92:72:68:05:6c:c7:b3:58:72:b3:c1:b2:a3:5a:ce:
f6:90:47:92:a3:fe:2d:55:53:9c:19:d1:32:ae:ed:
72:a3:6f:13:97:2a:3c:76:d2:42:58:39:66:f6:3e:
e7:cb:6c:55:20:8e:b1:3b:a1:25:6d:e4:92:be:4f:
16:19:e2:4c:23:47:ff:83:ad:fb:11:41:72:36:97:
0b:99:67:b8:8b:cf:48:22:54:2c:17:35:55:72:8f:
13:07:e0:3f:1e:8b:2e:df:04:f9:d1:6b:0d:7b:5b:
ff:26:d8:df:5e:aa:a2:cf:ba:dd:4d:c6:19:74:74:
1d:8b:43:a7:67:57:0d:ed:4f:ae:5e:65:d1:cb:68:
da:d9:02:e5:62:38:e4:d1:d2:96:c4:27:af:a0:20:
6b:38:63:01:b7:a6:05:69:31:c0:19:0d:e8:08:df:
34:db:1b:5d:d9:88:6b:63:97:a7:61:d7:de:8b:be:
d2:c6:89:32:5a:14:2d:05:79:6f:e4:59:ba:17:be:
42:f3:91:c1:e4:69:d9:63:91:47:04:bf:f5:6a:97:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:FA:BA:02:83:70:D6:A6:93:68:59:8C:F3:F5:95:77:C1:5D:22:13
X509v3 Authority Key Identifier:
keyid:9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a0:51:5e:1f:3e:cb:e5:df:af:6a:4a:ce:f5:4e:a9:23:de:
77:79:a0:10:45:67:32:36:1f:c2:3e:1c:64:78:3e:22:67:79:
cb:ec:2b:51:ba:16:50:6f:8b:1b:d2:05:0e:78:51:db:f8:b5:
e9:42:5b:c9:90:8f:bc:ad:01:b6:eb:12:bd:f5:7a:eb:fd:cc:
f7:1c:20:3c:4d:84:fe:55:63:71:64:66:a3:28:2c:63:bf:51:
24:35:34:0e:6c:4f:20:d2:b2:ab:89:97:98:01:e3:c2:d8:a1:
cc:52:8c:81:6e:ec:52:0b:80:b9:91:76:de:a3:85:ce:71:a6:
19:97:d9:85:0b:ef:f2:f3:6c:53:42:b0:cb:02:b7:80:b4:49:
df:74:a3:8d:e2:e0:e9:43:db:d1:11:f0:4c:34:24:b8:66:4a:
ed:59:08:3e:31:dd:43:f9:b8:23:de:82:bb:f9:62:a0:d4:2e:
3d:83:57:b8:09:98:b6:86:20:8c:a6:71:e0:93:74:d2:13:ba:
52:0f:8e:fc:f7:89:68:dd:39:dd:78:fc:70:62:ed:28:44:cb:
e3:9c:a1:3b:7d:90:fd:f6:0f:53:4e:31:05:1a:95:58:3d:29:
b9:d8:71:6a:6c:a7:08:f5:f6:73:30:a1:09:01:3b:0a:25:82:
a8:b8:89:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 02:03:47 2025 by rpki-client