Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json)
Hash identifier: ec6JQkllrfj9ZrrPGmCXhRDvDZpnqNOm3fCubS5PPiA=
Subject key identifier: CC:8B:C4:90:60:C7:FB:2F:3B:C4:81:56:3F:79:0F:08:5E:E5:B0:CA
Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Certificate serial: 019873E36654E032F91C876C3A7A539349BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
Manifest number: 0411
Signing time: Mon 04 Aug 2025 07:02:19 +0000
Manifest this update: Mon 04 Aug 2025 07:02:19 +0000
Manifest next update: Tue 05 Aug 2025 07:02:19 +0000
Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: t49fBMx8dh9ljTsugkVqee+u4ESl8nlpZsu0DzukVTE=)
2: sRNeT65rt6woLISuiM8vg1rgfeg.roa (hash: U0++MMBJLtG7d5c7Me3am120THV8UBDE/53t4i8cpqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:66:54:e0:32:f9:1c:87:6c:3a:7a:53:93:49:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Validity
Not Before: Aug 4 07:02:19 2025 GMT
Not After : Aug 5 07:02:19 2025 GMT
Subject: CN=cc8bc49060c7fb2f3bc481563f790f085ee5b0ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:57:19:ab:97:4b:de:2c:5b:a2:13:82:90:
55:51:72:6f:39:68:07:61:7d:e9:51:4a:a6:07:43:
2e:63:73:cf:14:07:3d:44:d6:4d:e0:ee:71:64:70:
f9:95:cb:65:1d:65:2d:a5:c6:bb:4a:93:87:fc:28:
65:59:cf:db:d8:fc:39:1c:83:dd:e2:2a:5d:69:0e:
35:c5:74:31:0d:7c:c5:32:d4:ed:64:c6:5d:95:75:
5b:14:c5:33:ba:80:74:31:87:4f:87:56:31:ed:05:
0e:ff:2d:71:3f:1d:c1:a4:42:d7:40:05:4b:07:c8:
3c:a1:c2:34:05:cd:e6:0c:b4:5e:5d:af:e9:b5:5a:
89:76:22:b4:54:81:b5:e0:cf:3f:4f:b9:14:33:8f:
89:1c:c7:43:5b:47:12:b9:2a:85:34:24:22:cc:a6:
82:fa:03:29:43:25:e5:a2:ff:4a:c8:77:17:be:49:
be:51:b3:56:30:76:79:9b:f1:67:c6:8b:60:3c:aa:
3f:85:49:f1:e4:28:4b:ec:a0:99:42:72:5f:50:1f:
54:4a:3b:d9:a5:c4:03:f1:9c:fb:12:bd:21:03:1d:
9d:b7:94:5c:5c:46:3a:85:36:6f:e9:3a:2d:ab:ae:
77:16:5c:0b:f5:07:d2:c1:f4:32:97:c0:df:16:df:
e8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8B:C4:90:60:C7:FB:2F:3B:C4:81:56:3F:79:0F:08:5E:E5:B0:CA
X509v3 Authority Key Identifier:
keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:1b:44:89:f4:66:d0:e3:ac:5e:a1:3a:1a:88:62:34:4d:06:
d5:74:80:6b:34:3b:79:7d:2c:c0:58:5c:8c:5b:55:9f:8f:42:
5a:0b:75:7a:3d:54:04:72:62:a3:19:f5:e1:a7:8f:0b:e4:73:
b9:95:43:b5:12:9e:4c:60:dc:35:b1:ab:3a:36:8d:78:e8:1c:
9f:3a:6d:12:d0:68:5c:46:45:e3:d7:9b:1f:ab:4e:b1:14:45:
07:39:3a:6b:cc:f1:4e:a8:64:72:03:8f:1d:42:1d:72:0f:d0:
d9:dd:14:df:8b:bb:1e:b6:2a:2d:b3:82:27:4a:5a:46:23:e9:
f6:50:fc:20:59:3f:55:15:de:e2:2f:79:39:a9:9a:e9:3c:2d:
05:8a:70:f7:5d:8c:90:10:2a:5f:f1:65:d0:e1:22:1e:07:5b:
54:f2:96:b0:0d:b5:bb:c8:71:30:31:47:70:21:02:72:c4:05:
2c:11:a2:18:95:90:d6:f1:9b:34:40:ee:24:15:89:b1:0e:88:
9f:3e:2d:14:ea:48:f8:5a:24:be:15:32:a5:8c:dc:92:1e:cd:
47:8a:45:b2:9d:f6:11:67:01:b5:e4:e9:01:40:24:fd:18:8f:
79:b1:72:0b:b2:3d:e1:65:ca:90:0b:db:ce:12:ef:60:d9:20:
b0:f1:81:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:02 2025 by rpki-client