Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
File: mmCuS92dbvum6hHGBzfLoC3PHmA.mft (raw, json)
Hash identifier: r8ylFjnpEo5jrzjXfsDKPYtkySXswbzzeSfBRsD9iKQ=
Subject key identifier: 1E:1D:6B:56:E6:9F:06:42:1A:47:E3:9E:25:C8:33:71:9D:0D:B6:F7
Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Certificate issuer: /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Certificate serial: 0198D4A83E5B7B1752399BF29136330EBED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
Manifest number: 090D
Signing time: Sat 23 Aug 2025 02:00:52 +0000
Manifest this update: Sat 23 Aug 2025 02:00:52 +0000
Manifest next update: Sun 24 Aug 2025 02:00:52 +0000
Files and hashes: 1: mmCuS92dbvum6hHGBzfLoC3PHmA.crl (hash: gs+4jKjm8cToHES4zQHxdxUmxd0X3O14IxcBsd398ds=)
2: u1q93eogqq8ewSFI28D24ujX7vQ.roa (hash: pvm3GrE3J/VbhZBCkLiKY82QF1T8mhNfTTlLlGr7usY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:3e:5b:7b:17:52:39:9b:f2:91:36:33:0e:be:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Validity
Not Before: Aug 23 02:00:52 2025 GMT
Not After : Aug 24 02:00:52 2025 GMT
Subject: CN=1e1d6b56e69f06421a47e39e25c833719d0db6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0a:45:be:c8:1f:26:f7:43:fc:ed:78:d4:6c:
43:b7:a3:38:bc:d5:df:d6:8b:81:5e:ab:22:e3:26:
51:e3:84:4b:7d:4a:09:63:23:6b:af:17:d9:31:14:
9d:b8:87:50:a8:7d:29:28:cb:4f:27:d0:5b:75:c6:
52:43:85:6d:09:06:c4:78:12:98:11:7a:d3:73:9c:
eb:c0:f6:af:29:69:d8:dc:cb:4a:7b:a2:aa:9c:e5:
25:06:40:38:6a:23:88:cd:ec:7a:f7:24:ae:8d:c2:
a8:53:ab:d3:6a:81:68:4a:6d:3b:9f:62:27:9b:6c:
33:c4:e7:cd:00:26:88:7d:e5:2a:2a:33:c8:4b:02:
fa:d3:4c:4c:96:45:70:75:00:ec:de:11:f4:10:d5:
da:b6:be:ae:af:fa:8a:03:34:5d:c6:ea:20:40:b0:
13:28:76:65:d1:40:dd:a0:6a:ee:e2:31:65:c7:95:
6a:9a:84:96:d7:03:a7:4a:2d:84:da:03:3b:67:ed:
bd:b1:a7:fe:bb:c9:3c:14:cd:6a:1a:47:66:37:11:
09:02:74:3a:ae:a4:36:e9:fa:d3:77:11:ac:eb:fd:
ec:a1:c2:4f:bc:e6:3d:04:ba:91:40:c4:a3:32:42:
17:2a:91:73:74:f7:85:dd:ab:a5:3c:0c:80:35:32:
e4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1D:6B:56:E6:9F:06:42:1A:47:E3:9E:25:C8:33:71:9D:0D:B6:F7
X509v3 Authority Key Identifier:
keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e5:75:d7:64:f3:56:3d:24:3a:7f:66:56:95:ae:46:8a:59:
02:e4:15:70:0a:92:99:ac:f7:fc:2e:39:2c:f0:0b:70:d7:48:
56:8b:9c:76:cd:d9:77:8e:c0:00:92:89:b0:ab:b0:cd:26:0c:
d5:d1:e2:fe:7d:16:87:94:07:93:d7:6f:7a:2f:e2:22:da:2b:
cf:49:7f:7e:f9:60:7e:55:1d:ab:f1:be:8a:45:c2:e1:fe:62:
9a:c4:74:67:fb:b5:04:c8:96:54:41:85:eb:6d:0f:be:b5:d3:
02:bb:a2:23:01:a9:05:7c:d9:ec:d3:49:9e:53:14:ab:15:06:
d7:93:db:cd:53:dd:b7:f9:7a:c0:95:9e:c9:84:2f:d4:53:8c:
3b:25:cd:49:14:fb:6b:f0:79:4d:f7:d6:2d:3e:20:22:89:12:
ba:b0:d9:65:d5:23:15:a9:82:4f:3d:d7:1b:fd:fb:cf:8c:f6:
87:e1:34:51:c2:54:70:ab:98:c7:0c:46:b7:e1:a2:af:53:39:
6a:8b:19:6e:a0:71:42:5a:79:68:88:23:64:12:d1:1e:ee:13:
77:4e:32:60:22:10:37:71:9d:dc:55:17:2a:55:59:4c:7b:77:
8f:bb:00:b9:82:a1:75:bd:c3:a0:12:e7:40:bd:b8:a3:52:6a:
24:51:e9:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqD5bexdSOZvykTYzDr7QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNjBhZTRiZGQ5ZDZlZmJhNmVhMTFjNjA3MzdjYmEwMmRj
ZjFlNjAwHhcNMjUwODIzMDIwMDUyWhcNMjUwODI0MDIwMDUyWjAzMTEwLwYDVQQD
EygxZTFkNmI1NmU2OWYwNjQyMWE0N2UzOWUyNWM4MzM3MTlkMGRiNmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QpFvsgfJvdD/O141GxDt6M4vNXf
1ouBXqsi4yZR44RLfUoJYyNrrxfZMRSduIdQqH0pKMtPJ9BbdcZSQ4VtCQbEeBKY
EXrTc5zrwPavKWnY3MtKe6KqnOUlBkA4aiOIzex69ySujcKoU6vTaoFoSm07n2In
m2wzxOfNACaIfeUqKjPISwL600xMlkVwdQDs3hH0ENXatr6ur/qKAzRdxuogQLAT
KHZl0UDdoGru4jFlx5VqmoSW1wOnSi2E2gM7Z+29saf+u8k8FM1qGkdmNxEJAnQ6
rqQ26frTdxGs6/3socJPvOY9BLqRQMSjMkIXKpFzdPeF3aulPAyANTLkvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4da1bmnwZCGkfjniXIM3GdDbb3MB8GA1UdIwQY
MBaAFJpgrkvdnW77puoRxgc3y6Atzx5gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW1DdVM5MmRidnVtNmhIR0J6ZkxvQzNQSG1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wNjE2ZTAtOWNiYi00MzBhLTgyNDQt
ZWRjYzUyZTE3YTk0LzEvbW1DdVM5MmRidnVtNmhIR0J6ZkxvQzNQSG1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8wNjE2ZTAtOWNiYi00MzBhLTgyNDQtZWRjYzUyZTE3YTk0
LzEvbW1DdVM5MmRidnVtNmhIR0J6ZkxvQzNQSG1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOV112Tz
Vj0kOn9mVpWuRopZAuQVcAqSmaz3/C45LPALcNdIVoucds3Zd47AAJKJsKuwzSYM
1dHi/n0Wh5QHk9dvei/iItorz0l/fvlgflUdq/G+ikXC4f5imsR0Z/u1BMiWVEGF
620PvrXTAruiIwGpBXzZ7NNJnlMUqxUG15PbzVPdt/l6wJWeyYQv1FOMOyXNSRT7
a/B5TffWLT4gIokSurDZZdUjFamCTz3XG/37z4z2h+E0UcJUcKuYxwxGt+Gir1M5
aosZbqBxQlp5aIgjZBLRHu4Td04yYCIQN3Gd3FUXKlVZTHt3j7sAuYKhdb3DoBLn
QL24o1JqJFHp0g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:46 2025 by rpki-client