Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
File: mmCuS92dbvum6hHGBzfLoC3PHmA.mft (raw, json)
Hash identifier: aUVpsZmxFBmk/aoLN5vIo04GTP+fzFtBB6X6f18qTuw=
Subject key identifier: CB:29:AD:05:6B:2D:B8:01:AF:6F:DD:68:29:C5:69:21:A9:EF:E4:A7
Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Certificate issuer: /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Certificate serial: 0197771C7AE526BB16AB12B38A5EF3B9840B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
Manifest number: 0858
Signing time: Mon 16 Jun 2025 05:00:44 +0000
Manifest this update: Mon 16 Jun 2025 05:00:44 +0000
Manifest next update: Tue 17 Jun 2025 05:00:44 +0000
Files and hashes: 1: mmCuS92dbvum6hHGBzfLoC3PHmA.crl (hash: ZlpOHkRtxdR2BC4Xl7/wvceyiQ+9D8w9INSj8xNL0Q4=)
2: u1q93eogqq8ewSFI28D24ujX7vQ.roa (hash: pvm3GrE3J/VbhZBCkLiKY82QF1T8mhNfTTlLlGr7usY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:7a:e5:26:bb:16:ab:12:b3:8a:5e:f3:b9:84:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Validity
Not Before: Jun 16 05:00:44 2025 GMT
Not After : Jun 17 05:00:44 2025 GMT
Subject: CN=cb29ad056b2db801af6fdd6829c56921a9efe4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:ce:35:8d:fc:bd:dd:4d:98:e9:f4:e8:57:
43:8d:4c:a9:d0:74:a9:50:a8:52:8e:0a:28:ee:fe:
8f:55:6c:8e:29:40:c8:1b:1b:25:8e:47:9b:b0:11:
f7:01:c6:40:bf:79:38:71:18:1c:5b:97:ed:6b:7f:
3a:29:fe:2a:26:04:a4:2d:b7:e9:9d:14:9d:1a:8e:
9a:62:31:2d:d1:1c:f3:4e:fd:be:5a:75:b2:03:24:
92:b7:71:e7:2c:30:6d:81:2f:c3:e7:03:a4:37:48:
bf:19:6e:e7:6a:22:63:91:f8:1c:93:4e:c4:23:9c:
5b:f5:fb:ef:64:54:2f:4e:08:c6:a1:9e:75:93:45:
b6:88:bf:f5:7c:52:b7:cf:89:e9:9f:02:68:9f:38:
be:58:c9:b9:28:0f:30:e1:85:40:a8:69:28:cd:4d:
79:e0:0c:48:c0:0b:0f:fc:28:51:39:b5:13:a3:73:
2e:6a:2e:55:87:c0:30:23:1b:b5:70:bc:84:b7:6b:
a9:b7:fa:07:29:0c:86:b7:82:c2:d2:98:37:08:7d:
a5:60:5a:cb:ff:6b:7e:f0:fc:2d:59:b8:c5:47:d8:
0e:fe:bb:ff:ac:d5:a4:45:2b:03:4e:e0:b2:43:73:
4a:9a:f0:97:ad:b3:89:88:08:1e:f3:23:d3:db:8e:
76:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:29:AD:05:6B:2D:B8:01:AF:6F:DD:68:29:C5:69:21:A9:EF:E4:A7
X509v3 Authority Key Identifier:
keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:15:ee:ad:0a:49:86:53:3b:7e:aa:92:66:b4:b8:fb:e0:89:
bc:39:19:92:e1:22:24:4b:d7:9e:48:14:52:6d:bd:0c:1a:34:
60:dd:2e:05:13:78:0b:0b:74:74:0b:44:d8:ab:77:22:05:93:
18:15:a7:b5:cb:dc:01:bf:3a:9f:8c:f8:24:e9:99:7b:93:f4:
c1:81:39:f9:11:c0:44:88:44:5f:2d:42:d9:95:9f:53:01:e4:
d9:ac:46:19:c8:9d:4c:09:69:fb:42:99:bc:33:fb:e5:db:6d:
ba:40:9a:99:20:b4:26:42:ea:c2:a3:cb:6a:3b:2c:1a:63:b5:
dd:00:a6:df:d0:4c:92:93:71:af:58:14:9b:c2:51:c9:84:1a:
90:fc:24:9a:fb:cf:37:9d:7d:b5:4c:4d:5c:ba:5e:42:99:2e:
d1:09:d8:ca:80:ad:76:1c:75:96:5f:c1:ec:36:7a:38:7f:3f:
f3:2e:ed:33:fe:45:1c:96:0f:0d:00:b8:84:4b:53:d4:52:fc:
71:de:ed:2c:d3:9f:6d:d0:bf:98:01:86:c2:3b:b4:b9:f4:cb:
0d:80:99:88:3c:23:19:cd:0d:1b:bc:44:37:ea:1c:94:6e:83:
d5:d1:b7:01:d3:c6:18:fb:af:cb:a5:b0:9f:92:8d:32:69:ec:
27:92:0a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:22:12 2025 by rpki-client