Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
File: mmzb9HURP5bKeKB6-9RFjIiIB3E.mft (raw, json)
Hash identifier: GiWYckpyUeiGfSGRUm0IVWUUj/FJ4rjYDYWGSd0fDX0=
Subject key identifier: 69:9A:29:DA:48:CF:B2:06:1A:B6:C3:C5:BA:FB:6E:C4:F6:28:2C:69
Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Certificate serial: 0197B7456AE3EA6942D8225BE85C0146C94F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
Manifest number: 047C
Signing time: Sat 28 Jun 2025 16:01:09 +0000
Manifest this update: Sat 28 Jun 2025 16:01:09 +0000
Manifest next update: Sun 29 Jun 2025 16:01:09 +0000
Files and hashes: 1: j_X8tJ2h9OHGJHosgdoOoXcoQic.roa (hash: +g3waCGUvWC6G9wCV2Zz7i7n4x4ui8ded+3mDQgQ1Kc=)
2: mmzb9HURP5bKeKB6-9RFjIiIB3E.crl (hash: UiXBbAdtck9vkkDXeDl1HG2wl+WQjSzbG9VGcp1Ty+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6a:e3:ea:69:42:d8:22:5b:e8:5c:01:46:c9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Validity
Not Before: Jun 28 16:01:09 2025 GMT
Not After : Jun 29 16:01:09 2025 GMT
Subject: CN=699a29da48cfb2061ab6c3c5bafb6ec4f6282c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:82:13:ae:67:da:b9:8f:3c:54:1d:3d:1b:
da:bf:d1:fe:fc:d5:1e:f1:3a:ba:c9:59:a7:7d:79:
48:af:21:18:5f:66:a8:5e:2a:22:a2:eb:27:52:61:
b6:81:75:01:90:7f:3f:4c:54:6a:84:6a:52:23:19:
0b:b7:82:81:cb:31:81:95:cf:79:e8:dc:99:26:a7:
3c:63:79:26:89:97:ce:d2:c6:67:4b:50:51:66:eb:
ec:bd:28:33:51:55:d5:4d:12:a3:f6:a6:6d:6b:26:
c4:b5:da:e5:6d:51:63:3f:cf:d6:2b:cd:c7:4f:7e:
24:ad:21:95:0b:25:5b:3d:f7:96:1e:ff:61:7d:0f:
2a:16:b6:92:9c:fb:3d:a0:ad:86:8b:49:d7:30:cb:
57:14:8d:f4:53:8b:a5:df:39:79:24:90:f4:b8:f1:
69:b9:99:54:1e:a9:a8:6a:0a:9c:19:3d:cf:77:ff:
de:62:b9:24:c3:51:25:38:93:94:52:bc:e2:32:af:
41:32:4f:ff:30:94:6c:b9:51:33:f9:05:3b:e3:53:
c7:ad:43:77:b4:cf:b3:28:aa:66:c5:43:e2:24:d7:
3f:ed:6c:e3:1f:f5:d8:09:81:4e:85:ad:52:eb:d9:
24:3a:3d:6b:20:1c:49:5c:1a:f9:0c:cf:53:33:6a:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9A:29:DA:48:CF:B2:06:1A:B6:C3:C5:BA:FB:6E:C4:F6:28:2C:69
X509v3 Authority Key Identifier:
keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:84:9a:9c:7b:6f:c7:53:d9:34:a6:62:74:5a:9c:e8:07:09:
29:40:8a:1e:0d:44:f1:b9:11:dc:63:b1:68:c4:94:59:b4:37:
91:1d:51:c8:4a:c9:00:9c:73:7e:a9:2c:c3:d1:cd:2e:a4:66:
fd:1f:a5:d4:3f:16:43:42:88:eb:31:64:b3:52:62:fc:e9:cd:
1d:15:3a:e3:d1:ce:8e:a8:f3:9d:ca:ac:32:fb:c2:7d:85:77:
95:07:a0:a6:8b:5b:5c:86:44:56:d7:4a:06:f2:41:7d:f2:e3:
44:68:07:71:fa:cc:5d:4d:9f:c7:81:5c:62:9d:cd:d8:f6:69:
72:7b:d5:c8:67:74:ee:e9:a8:87:45:8c:3a:c8:66:81:bc:a7:
aa:43:9d:bd:bf:3c:e4:f4:fd:20:de:c8:c1:50:d4:c5:d4:82:
eb:86:7c:1b:7d:4b:51:cb:53:e5:69:af:ef:82:e4:79:87:ef:
bc:68:aa:db:3e:d7:5d:c7:3d:f4:8f:7e:1b:a0:6f:4b:a0:7a:
83:c9:1a:28:ff:8e:e7:a4:5a:a0:4e:35:d9:3f:19:77:b9:c2:
94:cf:55:d4:69:bf:54:68:f6:62:26:5b:04:fb:6a:ba:37:90:
1f:0f:35:1f:3c:2e:29:82:c3:14:1b:3d:0f:ac:57:1b:16:a9:
6c:a9:a2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:05 2025 by rpki-client