Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
File: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft (raw, json)
Hash identifier: 0lm524/CSDetw3N47D27KBQsmVBOVRflqlzN4ubWNpc=
Subject key identifier: C1:80:FC:75:99:04:7D:07:E8:87:78:2C:C3:2A:49:12:11:67:F1:16
Authority key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
Certificate issuer: /CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Certificate serial: 019A01B64F7BB399E5725394554622E4FBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
Manifest number: 0E46
Signing time: Mon 20 Oct 2025 13:01:56 +0000
Manifest this update: Mon 20 Oct 2025 13:01:56 +0000
Manifest next update: Tue 21 Oct 2025 13:01:56 +0000
Files and hashes: 1: 0qrwU3AHf3uhnYK1JVGdBCRu6z8.roa (hash: /kYhLDLgGmD/nuK1uy52fNBM98m/fU6G1KeanfyrJjY=)
2: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl (hash: X+6rvb+/KnB9+4lQVRz4nzY5JbYsBU9eTORjuvPiW2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:4f:7b:b3:99:e5:72:53:94:55:46:22:e4:fb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Validity
Not Before: Oct 20 13:01:56 2025 GMT
Not After : Oct 21 13:01:56 2025 GMT
Subject: CN=c180fc7599047d07e887782cc32a49121167f116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:53:bd:cf:d8:b9:94:c2:9d:b6:d9:c6:fb:
21:c8:1c:90:c7:2c:db:14:02:ff:43:0e:d2:51:80:
c1:e4:0e:ce:df:8e:09:62:6e:a6:51:24:75:b0:2a:
2f:e4:21:d2:4a:2e:b7:3e:c4:09:51:9c:fc:54:1c:
94:1b:31:b9:67:30:ab:a6:e8:f5:61:6f:cd:ec:f0:
c0:0b:2e:73:2d:c6:23:d4:fc:c5:20:92:c7:00:12:
e5:d1:c5:b5:52:f4:47:be:64:7a:0b:9b:10:0a:4a:
e3:2b:77:29:5b:e9:5b:0f:9c:6f:7b:fb:7a:0c:47:
86:bd:b6:69:32:53:b7:4b:38:13:b3:c6:70:b1:bd:
91:8b:ec:cd:2b:1c:38:85:75:31:3a:02:36:e9:f5:
72:6f:c4:46:04:08:14:0c:56:72:8a:f4:e4:7d:17:
87:8c:1d:9e:b9:39:fb:00:98:af:d8:b1:c5:70:aa:
44:ae:f0:21:96:2d:6e:63:ac:68:5a:64:40:69:9a:
d0:29:8c:11:c1:04:c9:6b:ce:d5:b3:b6:60:2d:66:
a3:dc:91:10:98:a3:c9:d5:48:aa:3b:59:00:e9:40:
02:1f:96:eb:c8:7b:84:a1:ee:b3:1a:78:b5:61:93:
2f:b5:fe:a9:41:29:b3:18:73:29:a9:a0:61:72:60:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:80:FC:75:99:04:7D:07:E8:87:78:2C:C3:2A:49:12:11:67:F1:16
X509v3 Authority Key Identifier:
keyid:9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:32:5a:d5:43:ba:50:df:af:78:72:1c:38:0a:04:c2:96:51:
d6:86:fa:fe:d3:73:14:5c:2c:c0:1f:c3:aa:8b:4d:72:4e:8e:
1e:c7:4a:3b:cd:f3:f9:4f:38:94:a9:b4:2d:8a:1b:b4:3f:a2:
22:da:13:95:37:57:81:34:09:b5:c4:22:5d:6b:6f:05:99:f2:
43:6b:45:66:4f:b2:2a:57:d7:6a:16:f5:3a:cd:e3:d4:69:19:
35:90:d6:42:e9:e4:ca:2e:e0:6d:54:21:b0:11:95:8a:04:c4:
40:e5:98:45:21:de:3a:a0:b0:46:78:cd:08:ef:ab:32:59:f7:
c5:13:aa:b9:21:0f:09:04:37:f9:cf:ed:98:f7:05:b9:8c:39:
c2:e9:e0:5a:fc:cd:12:09:9a:44:f2:b0:3b:3d:4d:ac:e8:df:
eb:e0:57:f6:07:c8:87:21:14:27:3d:cf:68:fa:55:13:05:ea:
4d:6c:31:62:27:60:2d:75:5b:36:5c:1a:29:ee:20:21:24:a9:
b2:26:45:8c:95:08:92:3c:c6:24:74:e9:08:74:04:99:8f:fb:
6f:c0:55:a2:b0:44:32:74:4c:84:57:c2:af:c1:72:a9:4a:85:
36:f1:86:9b:ab:6e:d6:5a:57:a9:8a:ab:86:05:39:a4:be:63:
bd:bf:f8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:50:43 2025 by rpki-client