Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
File: mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft (raw, json)
Hash identifier: y9eaCffzHjbWcYjHI5SVXjs+TX3oW5fzrzw+uI5AoR4=
Subject key identifier: 7E:2C:BB:E5:B5:1D:BC:E0:46:D3:4C:FF:1E:CA:80:79:10:59:A0:EF
Authority key identifier: 9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
Certificate issuer: /CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Certificate serial: 0198D4E03398220201EBC14806962655419B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
Manifest number: 0A96
Signing time: Sat 23 Aug 2025 03:01:59 +0000
Manifest this update: Sat 23 Aug 2025 03:01:59 +0000
Manifest next update: Sun 24 Aug 2025 03:01:59 +0000
Files and hashes: 1: mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl (hash: X4IfUkhfLeLTP5XfLBWiCIAvJQdI7ulFv2wCj9W089A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:33:98:22:02:01:eb:c1:48:06:96:26:55:41:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Validity
Not Before: Aug 23 03:01:59 2025 GMT
Not After : Aug 24 03:01:59 2025 GMT
Subject: CN=7e2cbbe5b51dbce046d34cff1eca80791059a0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:16:91:10:10:3e:4a:d6:e8:3d:7f:ca:9a:
01:21:8c:1a:50:0b:be:d5:49:25:fb:e7:67:33:d0:
69:43:c3:05:99:59:a3:0a:0a:6d:19:8c:cf:af:b0:
91:f7:80:7b:07:41:3a:5a:35:72:a0:60:1f:54:61:
8f:f9:1a:56:5a:97:22:6c:41:d3:e7:9a:25:20:c3:
2b:bd:22:77:f9:0c:26:47:3d:d7:c7:1d:1e:6f:5a:
f1:78:c1:53:3a:dc:3c:01:5c:f6:f4:67:9c:4b:c0:
07:e0:a0:9c:67:e9:08:15:46:ec:7b:f6:57:f0:0f:
9b:e2:5b:36:a0:30:72:4e:ce:1e:c0:0e:cd:1a:a6:
87:8e:07:be:ad:a0:b7:bf:44:aa:3c:1e:e2:7f:56:
29:b3:3d:f5:97:92:1f:13:46:1a:78:6f:e8:fe:6b:
86:61:f2:30:f4:e4:d9:75:50:47:4e:a2:00:d9:03:
61:23:91:cf:88:d2:5d:8a:50:ff:dd:d7:d4:c7:6b:
ae:c5:b5:fe:41:6c:b2:d9:4c:c2:18:9a:99:02:3f:
d6:41:1b:44:f0:45:25:59:39:9a:ac:b1:b2:b0:bc:
63:8d:c7:39:a5:03:7e:82:d1:d0:02:6b:27:8c:d5:
d4:fb:21:83:91:06:96:d8:22:0a:fd:ca:20:9c:15:
43:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2C:BB:E5:B5:1D:BC:E0:46:D3:4C:FF:1E:CA:80:79:10:59:A0:EF
X509v3 Authority Key Identifier:
keyid:9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ad:19:63:60:4f:68:13:94:df:f7:5b:46:5f:6a:ed:b9:7f:
cc:cd:16:09:b6:cc:44:05:79:ca:cd:65:53:bb:dc:ad:26:41:
e3:43:19:20:17:f0:ca:a3:f6:77:1e:9a:35:43:f8:8d:1d:22:
7b:06:f3:98:88:b7:e1:40:07:97:11:97:f7:8c:93:d0:57:56:
05:a5:fc:92:2e:5f:6e:9c:04:9c:9d:a0:dc:a9:2d:f8:ab:bc:
56:ae:68:c9:2a:f7:7c:c7:d7:76:bf:ff:5f:88:4a:26:e3:a8:
46:ef:f2:6e:b9:66:d7:44:da:e9:9a:75:9e:ef:14:c2:9b:74:
82:7e:3d:57:9e:e1:6b:fb:fd:27:f8:c5:6b:2d:ff:70:3b:3a:
38:67:de:18:6e:55:2f:57:4d:87:ad:f8:f1:f1:99:5f:a7:f2:
0a:c5:d9:7e:82:ca:bc:40:7b:44:80:44:f4:28:21:26:07:65:
40:4b:7b:39:08:c5:a1:5c:46:8f:f3:89:4b:8c:19:ce:dc:9c:
10:6f:5c:0e:f2:8e:ed:65:2e:cb:54:8c:7a:56:ff:fd:b8:98:
19:23:43:e7:0f:3e:34:d2:22:e1:a8:f5:d5:99:e3:93:70:72:
52:09:19:e2:70:fe:2c:06:7f:35:a8:95:97:78:f3:8b:b4:69:
38:43:aa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:12 2025 by rpki-client