Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
File: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft (raw, json)
Hash identifier: +oqwAgDrCuLKjYi7brGt4pYTYuz0twuWg5+woqkss7c=
Subject key identifier: C9:EE:DA:3D:88:F7:11:96:20:67:16:F3:0F:26:FE:92:59:6A:A0:E2
Authority key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
Certificate issuer: /CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Certificate serial: 0198D6611300DD2FFC90B91DB0D208D7B4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
Manifest number: 0DAB
Signing time: Sat 23 Aug 2025 10:02:22 +0000
Manifest this update: Sat 23 Aug 2025 10:02:22 +0000
Manifest next update: Sun 24 Aug 2025 10:02:22 +0000
Files and hashes: 1: 0qrwU3AHf3uhnYK1JVGdBCRu6z8.roa (hash: /kYhLDLgGmD/nuK1uy52fNBM98m/fU6G1KeanfyrJjY=)
2: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl (hash: Y8PfJTfC+xg1oIvVZy6b8Ew8LR0bQ3hV1OyMutDPoyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:13:00:dd:2f:fc:90:b9:1d:b0:d2:08:d7:b4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Validity
Not Before: Aug 23 10:02:22 2025 GMT
Not After : Aug 24 10:02:22 2025 GMT
Subject: CN=c9eeda3d88f71196206716f30f26fe92596aa0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:fe:31:d7:1c:68:89:77:55:2c:bf:c0:db:3f:
3b:1d:45:90:41:1c:70:d1:70:23:10:5f:08:c4:26:
93:f7:31:39:50:3a:bd:07:c7:48:d5:1e:9d:cd:e3:
a8:fe:44:8c:85:3e:71:da:c6:0d:f4:01:a5:73:14:
55:c9:04:28:ef:a3:40:55:40:87:04:89:f1:79:6f:
a1:97:f3:c5:95:36:f0:3d:68:cc:e3:ce:be:e2:5f:
eb:cb:49:33:67:56:c5:56:7d:e2:a8:0e:af:45:0f:
3f:cb:52:f6:26:bc:44:cb:69:7d:96:d0:fd:58:3c:
44:6a:4a:85:11:8a:13:bc:64:bf:d2:65:18:e5:a3:
fd:70:fb:2b:53:54:e6:c5:29:a7:1e:f4:c0:b0:61:
e2:d3:e7:3b:86:04:16:08:79:0e:9e:74:bb:87:87:
54:23:b1:4e:9b:9a:9d:3d:82:2f:73:52:1d:68:d4:
83:ac:dd:88:05:54:a9:80:ef:77:98:9b:70:c0:95:
76:3f:77:9c:0a:02:de:69:bf:d3:59:0a:29:d1:83:
58:3a:10:9c:43:b5:ba:0f:c1:cf:5c:ba:f5:bf:fa:
4e:84:af:6c:11:f3:fc:65:8f:db:f7:6b:28:68:d7:
74:89:22:d6:60:b6:4e:8e:d4:bf:ba:c4:c8:09:e5:
54:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EE:DA:3D:88:F7:11:96:20:67:16:F3:0F:26:FE:92:59:6A:A0:E2
X509v3 Authority Key Identifier:
keyid:9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:88:73:25:24:97:cd:17:e3:4f:8c:c4:2d:f7:33:0b:cd:1e:
f0:53:2f:19:75:c3:cf:3e:fe:7e:b3:19:f0:3b:b3:1f:ef:0b:
8b:d8:d1:a2:14:58:fb:82:03:12:64:f9:45:7b:16:a3:c9:a8:
6e:38:02:00:46:f8:d1:e4:56:96:3b:9e:34:d4:f3:eb:90:bd:
34:56:a5:89:eb:c5:15:27:2d:31:56:38:09:8e:b2:9b:e5:6d:
79:56:47:6f:5d:e4:f2:1f:14:df:e4:4e:80:d5:b1:dd:3e:e0:
9d:ac:d4:62:8f:a1:01:5a:09:c9:dd:b7:01:a2:70:25:89:ff:
ed:88:fe:a9:95:2a:e9:69:71:f4:bc:64:c0:32:ad:42:8d:6c:
c1:29:2f:5f:50:29:09:6f:1e:22:25:08:f7:c5:b0:84:38:be:
0c:bb:98:e6:2a:9f:25:0b:29:6e:99:c2:60:9e:3a:84:b5:48:
81:44:46:d5:60:2c:21:0e:b8:87:ce:94:e7:5e:5d:4e:38:8a:
bb:0e:84:31:13:3a:5c:c5:f0:41:05:f5:35:d6:07:4d:0e:04:
b7:8f:d1:64:86:a6:ad:2a:9d:f9:ad:17:75:b9:36:e6:d3:05:
51:da:ac:3a:37:b3:61:f9:3c:81:22:c0:30:ee:73:46:42:c8:
1a:5c:17:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:06:41 2025 by rpki-client