Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
File: mmCuS92dbvum6hHGBzfLoC3PHmA.mft (raw, json)
Hash identifier: 2soMLWlBso3g9T6yrfVBFun8S958ctiARXy9ElTrVuI=
Subject key identifier: 9E:57:8B:15:99:AC:51:B8:85:C3:4B:8F:99:F4:3C:A6:2A:D1:FB:A1
Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Certificate issuer: /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Certificate serial: 019A4F2B0E9BD4179C830D17E7ED6426DDEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
Manifest number: 09D1
Signing time: Tue 04 Nov 2025 14:00:13 +0000
Manifest this update: Tue 04 Nov 2025 14:00:13 +0000
Manifest next update: Wed 05 Nov 2025 14:00:13 +0000
Files and hashes: 1: mmCuS92dbvum6hHGBzfLoC3PHmA.crl (hash: 4LQSj1F2I+wx29Rhmx3tUbDUE9Zwvf90ZIbd0zJPYTM=)
2: u1q93eogqq8ewSFI28D24ujX7vQ.roa (hash: pvm3GrE3J/VbhZBCkLiKY82QF1T8mhNfTTlLlGr7usY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:0e:9b:d4:17:9c:83:0d:17:e7:ed:64:26:dd:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Validity
Not Before: Nov 4 14:00:13 2025 GMT
Not After : Nov 5 14:00:13 2025 GMT
Subject: CN=9e578b1599ac51b885c34b8f99f43ca62ad1fba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7e:56:95:31:92:d9:5e:e5:24:aa:f4:6a:95:
5c:85:4d:fa:c6:ce:17:75:14:f8:07:a2:1e:cf:52:
df:b1:e2:45:99:17:af:55:b0:51:41:81:65:0d:24:
99:a4:ea:42:2b:f2:8a:2c:0f:9d:5b:dd:30:2a:80:
33:b4:78:05:c7:0d:3b:aa:97:bd:71:0c:22:22:f6:
bb:76:84:aa:ee:e3:44:4f:7a:fa:12:8d:c9:95:ce:
4c:fe:57:9b:85:e0:b4:38:35:62:05:f9:e1:29:18:
e8:7c:13:cb:03:e7:4e:9b:a0:41:5b:9c:8c:9b:0b:
12:cc:39:63:fc:6e:f4:d2:3a:d7:12:81:7a:7e:54:
ff:b7:14:4e:b5:3b:f8:79:06:de:0b:64:7d:12:cc:
92:55:17:cb:68:c6:d9:b0:fa:4e:34:b4:d3:36:85:
b8:b8:7a:9a:6e:04:1c:de:b0:2b:75:4d:76:ca:6d:
b3:9a:8d:81:89:e0:67:8f:22:a8:ad:e9:e1:e7:74:
99:f6:b6:d2:27:f8:36:9e:2a:f1:79:9c:04:22:84:
b6:42:05:b7:96:c4:13:df:7c:a1:b8:cb:27:31:ed:
28:b6:6a:b5:c8:d1:05:38:77:83:13:87:87:65:18:
aa:2d:40:e2:59:4f:e2:2b:a0:15:5a:df:9b:29:d1:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:57:8B:15:99:AC:51:B8:85:C3:4B:8F:99:F4:3C:A6:2A:D1:FB:A1
X509v3 Authority Key Identifier:
keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d1:bf:6e:7a:6b:01:5a:36:80:e9:bf:a2:3d:0f:f1:a3:52:
67:ff:80:00:bb:fe:68:06:27:ee:12:86:55:9a:66:2f:a6:20:
9a:7d:10:e3:c9:3a:26:74:41:00:91:13:af:7f:b9:2c:e2:1a:
f4:08:ba:f5:bf:fd:e4:88:82:76:08:e2:0a:d0:ec:f0:88:0a:
0d:9a:8e:5b:9c:11:de:62:fb:53:22:6d:1a:ac:c6:c5:d1:27:
d3:ec:1d:85:f9:ac:3c:e9:8c:a5:ed:a0:55:e7:09:2e:d9:f5:
65:fe:6d:9d:f2:d9:12:81:a9:ce:5e:77:d2:ef:77:87:1f:a2:
bc:0c:51:2e:fa:7a:0b:4f:45:4d:f0:88:b7:fe:e0:c6:29:46:
37:76:f1:90:76:93:6c:ce:6f:e8:0c:17:00:60:2f:40:67:33:
13:db:89:5d:2a:22:76:bd:78:6e:cb:90:ef:58:0d:07:ab:19:
6c:40:16:d9:00:07:d4:7c:69:e5:c3:8a:28:c1:bb:0f:17:f7:
e7:0a:05:24:96:d3:73:9c:ad:ca:08:69:b7:80:30:c7:0b:f0:
5e:a9:70:a4:4d:c8:7c:c3:03:bc:9b:19:8a:6b:ad:fc:b6:47:
cd:54:47:33:a5:66:24:b4:e9:fc:e9:ab:14:48:72:43:3f:b1:
26:c4:b3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:05 2025 by rpki-client