Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json)
Hash identifier: jLfq7mneULHhzGhtrJMGCkvkVJtVw3ISGIc7KVJJ52M=
Subject key identifier: 6F:B5:A0:45:B2:51:8C:C9:34:33:98:5F:25:5D:2A:71:B4:7E:23:48
Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Certificate serial: 0197789CEF25B73C1B3E1963D6B48486305B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
Manifest number: 038F
Signing time: Mon 16 Jun 2025 12:00:40 +0000
Manifest this update: Mon 16 Jun 2025 12:00:40 +0000
Manifest next update: Tue 17 Jun 2025 12:00:40 +0000
Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: aBZPHqeSqj/hI9n1BgvfxtNF2I2tPWnvf9EUGvP7pyY=)
2: sRNeT65rt6woLISuiM8vg1rgfeg.roa (hash: U0++MMBJLtG7d5c7Me3am120THV8UBDE/53t4i8cpqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:9c:ef:25:b7:3c:1b:3e:19:63:d6:b4:84:86:30:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Validity
Not Before: Jun 16 12:00:40 2025 GMT
Not After : Jun 17 12:00:40 2025 GMT
Subject: CN=6fb5a045b2518cc93433985f255d2a71b47e2348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:eb:ef:27:3f:3c:84:f2:87:93:ce:8f:5d:f4:
05:b1:1e:01:4b:1f:25:01:84:84:fa:3d:42:6b:6d:
3b:8f:d7:6d:6c:c0:43:97:31:96:b5:20:f0:cf:69:
74:58:89:cf:c5:d3:a2:ea:76:6f:74:e5:56:cd:a2:
07:9d:36:b4:fb:b2:3f:30:2a:fe:45:05:06:63:63:
0c:2c:1b:a7:32:df:d1:85:2f:bf:b4:ef:0b:64:58:
33:7e:1f:d8:f8:f1:fc:97:5d:70:d0:c6:16:d9:2a:
02:fd:f6:83:9f:9a:b8:21:28:97:69:30:f7:e3:0b:
85:83:16:66:c9:d9:4e:18:94:b8:19:d0:1d:9d:85:
d5:ab:e3:e0:ce:e4:e8:21:b1:c7:3f:58:aa:62:d0:
91:7b:8a:21:99:5f:ea:ef:ad:fd:de:2d:22:a4:4c:
cb:7d:14:f7:f0:28:18:4d:b4:f2:6b:e2:8c:34:51:
f4:b5:35:09:bc:bc:18:2e:de:6b:67:b3:29:e8:fd:
3e:90:2b:d7:8b:f5:e5:fc:60:4b:dc:ec:a6:b3:2b:
e0:60:4f:cb:d9:3e:6f:10:5b:70:5c:9a:db:b4:d1:
a4:60:01:2d:74:08:6b:56:4d:7d:1a:1d:9f:b6:cc:
47:ca:9c:df:3f:01:f2:91:e3:40:95:1d:64:ea:2a:
4e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B5:A0:45:B2:51:8C:C9:34:33:98:5F:25:5D:2A:71:B4:7E:23:48
X509v3 Authority Key Identifier:
keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:62:fb:70:b1:2d:8d:b8:25:1b:9e:e5:74:80:0f:4c:a1:c7:
8f:52:29:97:31:a6:f5:23:7c:e9:1d:95:70:47:bb:ce:9b:d0:
89:a2:e6:0e:a6:17:e2:e2:5b:f0:91:6b:18:e2:87:7f:4f:d4:
b1:aa:a8:4d:c8:ac:25:f7:b7:32:af:f3:1e:e8:6f:10:ca:69:
97:9c:5d:f6:f4:60:98:73:56:ab:5a:9a:88:89:8a:6f:a7:fe:
1b:11:af:d6:c8:9a:a3:91:d2:4d:a4:2e:86:be:cf:c6:04:9e:
2e:7c:e7:97:5d:21:b2:ea:71:f5:3f:08:50:7b:78:c4:f9:2a:
38:60:09:33:a3:33:55:4f:5a:ef:b0:4e:98:55:2f:d7:7a:13:
e2:e7:3d:72:af:69:5c:7c:d0:5a:12:c8:46:bb:bb:8d:56:7d:
a1:18:fd:f3:b1:32:32:c0:e2:12:91:b6:a5:d1:62:49:80:61:
fb:d3:d3:4c:e3:5e:fe:66:55:a5:79:74:60:7d:40:37:cf:09:
bf:45:36:26:94:52:4b:5d:d1:49:14:bd:c7:e1:7a:e9:34:a3:
60:98:57:0a:c7:9d:16:e2:b7:af:6d:73:8f:c0:f8:13:26:8e:
11:35:96:36:ef:da:f0:62:fd:4e:af:c1:39:a7:ff:2d:ba:a9:
6a:26:23:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:45:40 2025 by rpki-client