Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
File: mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft (raw, json)
Hash identifier: qDuve/xQRz6J5X9mjgRQgwW6cCKAYE+yWUec/rABGcE=
Subject key identifier: 33:2C:D6:B1:44:76:22:3E:D3:3D:A7:F2:74:74:FA:ED:FB:3A:9B:BC
Authority key identifier: 9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
Certificate issuer: /CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Certificate serial: 0199FC586A04DF467A51BF0F72320868E290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
Manifest number: 0B2F
Signing time: Sun 19 Oct 2025 12:01:16 +0000
Manifest this update: Sun 19 Oct 2025 12:01:16 +0000
Manifest next update: Mon 20 Oct 2025 12:01:16 +0000
Files and hashes: 1: mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl (hash: U/Cj7VQPlzwytOKWHM52JLB7j+CN8H2ej3W1lcIn3K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6a:04:df:46:7a:51:bf:0f:72:32:08:68:e2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Validity
Not Before: Oct 19 12:01:16 2025 GMT
Not After : Oct 20 12:01:16 2025 GMT
Subject: CN=332cd6b14476223ed33da7f27474faedfb3a9bbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:05:56:da:03:d7:7e:b0:96:41:66:a3:56:cb:
86:fe:e6:61:ee:ed:80:4f:d1:7f:bf:c3:6d:12:79:
5b:ac:f1:24:c8:aa:d2:df:6e:4a:5b:1a:3a:15:fe:
dd:cf:a1:22:9f:b2:cb:1d:69:c2:15:10:5a:22:75:
2b:91:34:34:50:8c:6e:23:b8:2c:a2:f6:e5:7d:b1:
b2:e5:48:7a:cf:77:54:3b:f2:9d:a8:7d:6f:c9:8a:
f9:70:52:e5:3c:34:86:c5:78:b7:bb:ca:81:ca:92:
9f:d7:c5:a8:e2:19:3b:12:9a:6e:df:85:80:87:76:
be:12:31:a2:7e:61:83:76:5d:87:3a:60:71:c4:24:
a4:dc:ad:a0:26:3c:99:dc:8b:e5:6c:4e:64:2a:dd:
0b:ed:db:47:43:3a:c0:53:de:ae:9c:75:f8:08:af:
c8:0c:c1:d1:75:30:5c:f4:1b:6a:f8:9e:1e:52:12:
19:77:b1:1d:2e:d1:cb:39:c5:b6:94:21:23:05:28:
d7:8b:6c:e0:af:57:35:65:50:9e:cd:d3:bb:42:33:
0b:bc:b1:c7:0d:9f:25:65:98:db:d2:7c:c7:ba:cf:
75:32:ad:2b:6b:5f:df:bf:0c:c1:83:41:7a:3b:f3:
55:83:9a:e1:83:54:80:22:e1:6a:7c:47:0d:94:31:
f0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2C:D6:B1:44:76:22:3E:D3:3D:A7:F2:74:74:FA:ED:FB:3A:9B:BC
X509v3 Authority Key Identifier:
keyid:9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c5:e5:42:fb:e4:73:ad:9d:e1:aa:38:87:50:97:c0:60:f5:
62:02:ff:8a:3d:df:31:34:6b:c9:ee:e4:fa:55:bd:26:59:cb:
d4:1c:d3:36:0f:2f:8a:40:26:fc:73:09:7b:6d:f3:83:d3:43:
76:0e:89:97:99:8f:81:98:11:d3:e5:16:0e:24:5c:b4:28:2c:
59:92:f4:96:9a:e9:9e:d9:e4:78:cb:68:23:25:c8:6a:94:8d:
31:33:1a:05:79:ec:47:6f:be:1c:91:ca:c4:93:4e:b5:a5:c5:
4b:9e:b9:70:a2:92:7f:57:a1:ff:2d:22:63:83:df:14:60:ab:
52:fe:d3:55:d5:e4:13:67:4b:5e:34:6f:79:5b:0a:a0:85:d3:
1c:bc:cd:94:0b:a9:f2:0a:03:ee:cc:99:68:c0:ff:95:00:3b:
10:0c:ce:58:60:ec:86:a7:04:2c:79:47:8b:86:9e:a7:98:2e:
de:14:31:e5:04:1e:12:be:80:f2:f6:1a:48:e1:f7:6d:22:40:
8c:ba:e3:78:30:2a:29:8e:a7:28:12:1d:39:b1:04:ce:45:1a:
46:98:53:dc:63:aa:ae:af:e8:50:e6:2f:2e:1d:34:77:ac:af:
69:c0:1a:0f:19:6d:eb:6b:f6:bd:93:ca:24:a4:d6:24:81:05:
60:d2:e8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:16 2025 by rpki-client