Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
File: mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft (raw, json)
Hash identifier: FahD/ZPbGwi+JYAWvHn9alOJaXLSeYvjG6Usr3RVLRY=
Subject key identifier: 52:FE:20:6D:0C:CF:A4:9A:D3:97:43:29:27:F3:D7:2F:46:1F:78:C2
Authority key identifier: 9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
Certificate issuer: /CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Certificate serial: 0197B8FD32954E0BA30BDB8BDA22C03EAAEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
Manifest number: 0A03
Signing time: Sun 29 Jun 2025 00:01:30 +0000
Manifest this update: Sun 29 Jun 2025 00:01:30 +0000
Manifest next update: Mon 30 Jun 2025 00:01:30 +0000
Files and hashes: 1: mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl (hash: jeODSw9gpI5m/ESop60k9BcMj6Vim53Xq9FjK2yoJfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:32:95:4e:0b:a3:0b:db:8b:da:22:c0:3e:aa:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Validity
Not Before: Jun 29 00:01:30 2025 GMT
Not After : Jun 30 00:01:30 2025 GMT
Subject: CN=52fe206d0ccfa49ad397432927f3d72f461f78c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f3:93:7b:fe:ac:04:d3:59:4c:5b:ab:1b:c6:
63:27:b5:38:63:9b:4c:16:32:cb:90:0a:9d:23:87:
74:95:80:ce:47:ef:43:37:c6:a2:43:55:9c:b7:e3:
15:a5:3c:0d:05:26:55:f6:20:c0:03:c9:df:48:5d:
4a:83:43:d5:8d:f1:c1:c2:23:37:b0:d6:9b:3e:ed:
4c:a2:1c:d4:21:68:d4:ff:41:32:d4:58:fa:79:65:
75:7a:6d:5b:c3:d7:e8:b3:c9:06:41:15:32:4c:2c:
22:5f:a3:e2:b6:cf:b4:af:67:9c:0d:81:fe:ef:96:
bb:df:45:a6:be:ff:63:77:2e:fb:80:e8:51:fb:03:
bd:6c:19:96:65:a8:d2:75:62:f3:e9:a3:4a:8f:ae:
ad:ae:69:c8:74:6d:48:b5:ed:7d:71:76:ae:ba:37:
9d:e2:52:42:10:f9:b8:42:d8:c9:a0:3a:f4:cc:c9:
22:5a:62:07:e7:66:91:9a:04:e9:fa:30:62:01:93:
f9:77:6f:08:85:15:c4:96:33:c8:f6:c7:70:1b:e0:
50:31:51:51:8e:91:65:7c:0e:c0:c5:d0:ea:84:f1:
17:98:95:5b:d4:c3:27:59:92:c7:16:78:34:f1:de:
81:3e:30:eb:c1:95:09:04:ee:e3:ec:85:e3:ba:32:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FE:20:6D:0C:CF:A4:9A:D3:97:43:29:27:F3:D7:2F:46:1F:78:C2
X509v3 Authority Key Identifier:
keyid:9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8a:bd:b0:98:8a:49:7a:5c:30:d9:2d:3f:86:d5:87:10:6f:
fa:a9:d1:3c:b7:d4:f9:71:2a:65:d0:94:3a:0d:4b:79:ce:5c:
ca:0f:ba:cf:b2:88:c6:20:80:33:a2:4f:34:1e:e3:8b:7d:75:
81:86:fb:be:07:8c:c0:a5:dd:c5:f3:e2:9a:72:bb:70:ef:eb:
07:57:60:dc:43:81:76:6f:95:7e:f5:f6:ac:8a:5c:93:8b:f3:
a3:67:cb:09:30:25:42:21:6e:d1:7d:94:c9:2f:b9:9c:71:ba:
7f:dd:0b:04:c4:99:2e:44:40:8a:35:15:cd:93:8f:65:60:39:
9e:c4:6b:87:09:15:cb:1d:a5:e5:ee:56:6b:8a:88:39:3d:7f:
b2:e7:71:4f:3e:9d:cc:b8:d4:6e:21:ba:50:76:c0:4a:0a:2e:
a4:03:3e:ea:5c:0f:fd:1f:0b:a7:56:57:6c:27:96:81:29:b7:
bd:94:5a:a0:28:80:c7:0c:25:b7:2d:eb:3d:c4:d5:0f:47:88:
20:d3:78:2f:a9:d3:04:42:2e:11:8f:e2:91:f8:b5:4d:55:4c:
4a:3a:f2:75:f1:85:ed:e1:54:56:f0:af:4d:0c:97:96:9b:ff:
43:39:ef:ff:91:7f:b9:66:27:a2:31:61:28:d1:ab:b3:b4:eb:
fe:ad:65:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:11 2025 by rpki-client