Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
File: mmzb9HURP5bKeKB6-9RFjIiIB3E.mft (raw, json)
Hash identifier: GE/YgCNkMT0K2FsSPN3+cpXXbLxJeZIjAC0l8vzms1c=
Subject key identifier: 24:6F:FE:ED:F1:AB:A4:35:AB:EE:52:C5:4A:58:4F:F5:C4:C9:25:BC
Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Certificate serial: 0198D515CC61014BFC22D3B8919CFB50A48F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
Manifest number: 0510
Signing time: Sat 23 Aug 2025 04:00:32 +0000
Manifest this update: Sat 23 Aug 2025 04:00:32 +0000
Manifest next update: Sun 24 Aug 2025 04:00:32 +0000
Files and hashes: 1: j_X8tJ2h9OHGJHosgdoOoXcoQic.roa (hash: +g3waCGUvWC6G9wCV2Zz7i7n4x4ui8ded+3mDQgQ1Kc=)
2: mmzb9HURP5bKeKB6-9RFjIiIB3E.crl (hash: 5RcoqTd5cHMjIU6rekcVcI7mWAziu0FfWNeAqbxZwFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:cc:61:01:4b:fc:22:d3:b8:91:9c:fb:50:a4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Validity
Not Before: Aug 23 04:00:32 2025 GMT
Not After : Aug 24 04:00:32 2025 GMT
Subject: CN=246ffeedf1aba435abee52c54a584ff5c4c925bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3b:29:c9:ec:89:80:ea:d2:91:d3:6b:2d:2d:
58:ea:17:b6:68:a4:5a:6d:9d:ed:c2:28:f4:e8:be:
a1:ad:ab:a3:21:25:49:e3:f0:d7:e9:45:38:c1:89:
d3:c3:9d:04:96:d8:91:dd:a7:41:72:e8:5a:f7:0a:
83:0e:15:b4:b2:89:4f:92:5b:cb:5e:c1:46:4c:e7:
a9:c4:fb:ef:e1:ae:5f:08:7d:25:8c:4e:cc:15:00:
3f:79:6c:40:18:1f:bd:7a:21:0c:fd:8f:ca:17:af:
7c:36:61:5f:1b:8b:f7:9f:f8:4a:3c:50:1b:f2:da:
28:bd:6e:84:e8:34:65:3e:02:b8:99:ce:ce:37:67:
d9:c2:97:88:a2:b1:7e:b8:07:8f:69:b1:b2:4b:9b:
7d:18:b3:e1:99:da:32:48:20:b5:3c:64:a5:a6:f5:
0d:3b:e0:88:7a:fd:69:31:ef:67:f4:cb:37:ba:ee:
e1:f3:d8:9b:36:55:69:f0:1e:26:e8:b1:5e:11:22:
e4:8e:2f:35:0f:71:c7:98:fc:62:17:5d:2e:aa:bb:
0e:a7:7c:c5:58:a3:28:98:cf:f4:62:fe:bb:df:ed:
a4:4e:f9:dc:6a:20:5b:ab:60:60:b8:18:64:7f:51:
ae:a8:2f:d5:18:bd:e7:c5:e9:4e:c6:78:73:32:db:
ff:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6F:FE:ED:F1:AB:A4:35:AB:EE:52:C5:4A:58:4F:F5:C4:C9:25:BC
X509v3 Authority Key Identifier:
keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:af:63:79:39:f5:70:b7:04:59:d2:9c:20:45:95:02:72:b1:
f9:56:7b:d5:11:f4:bd:08:a5:f6:88:8e:74:fb:4b:f9:4b:f3:
cf:ae:47:12:82:33:c3:c1:e3:f3:17:24:db:9f:26:54:4b:52:
67:4c:99:0d:48:e6:d8:52:eb:54:dd:3f:40:01:71:b3:ed:58:
d8:a0:11:67:58:0c:07:b2:47:94:d3:07:95:00:09:32:fd:12:
5a:5b:a4:d4:f6:6f:50:27:3a:32:e1:5a:45:b4:a6:6d:41:8b:
46:f6:f7:20:49:b5:ce:2b:e9:21:0e:03:cb:08:68:78:fa:12:
bd:55:3d:d5:e3:86:b9:c5:82:9d:0e:60:c3:2b:d3:fa:a1:bb:
b4:19:39:20:68:d8:88:cd:c0:6f:88:a6:ce:f2:7d:1b:4d:0c:
fc:5f:a7:42:4a:d4:e7:ca:9b:10:c6:e8:11:be:d3:db:2f:6a:
d7:f1:a2:2e:84:72:61:05:3c:d5:b4:a7:54:c9:57:d6:f5:46:
f7:f3:5b:06:67:a8:a4:5b:04:ab:a6:36:54:7b:15:a8:14:62:
19:4c:3b:b4:17:e0:31:c6:c7:29:ea:0b:44:0a:6c:7d:a8:ad:
2e:8d:cd:fa:97:8e:cc:c9:e9:f9:1d:32:67:ed:1d:b1:e0:43:
79:cb:9e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:38:45 2025 by rpki-client