Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
File: mmCuS92dbvum6hHGBzfLoC3PHmA.mft (raw, json)
Hash identifier: KVPkF32uUIM9g6hhw1zv34V28P4AxIzwbURAFgi144k=
Subject key identifier: DC:5B:F9:CF:6F:07:07:F5:88:8C:AE:48:88:42:AA:32:C5:27:8C:B6
Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Certificate issuer: /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Certificate serial: 0199FE0FDCF7CAADC2A226BB7C7325DE7EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
Manifest number: 09A7
Signing time: Sun 19 Oct 2025 20:01:16 +0000
Manifest this update: Sun 19 Oct 2025 20:01:16 +0000
Manifest next update: Mon 20 Oct 2025 20:01:16 +0000
Files and hashes: 1: mmCuS92dbvum6hHGBzfLoC3PHmA.crl (hash: fY7BBhNaJMbrpshhWSnDSU76cSrsm5AkiUR+P77gbz8=)
2: u1q93eogqq8ewSFI28D24ujX7vQ.roa (hash: pvm3GrE3J/VbhZBCkLiKY82QF1T8mhNfTTlLlGr7usY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:dc:f7:ca:ad:c2:a2:26:bb:7c:73:25:de:7e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Validity
Not Before: Oct 19 20:01:16 2025 GMT
Not After : Oct 20 20:01:16 2025 GMT
Subject: CN=dc5bf9cf6f0707f5888cae488842aa32c5278cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:61:c3:45:03:61:f5:6b:f8:f3:d3:ba:e1:c5:
32:eb:19:27:98:2f:cf:5c:c8:3c:05:f1:04:de:82:
87:75:63:e4:74:70:4a:9b:0e:56:dc:c5:20:c0:22:
93:a9:c3:de:03:eb:0c:2d:7e:e5:d6:f3:e7:40:14:
ff:f5:99:21:ef:f8:89:63:a8:7f:ed:5a:79:ba:19:
dd:9f:9e:2f:f2:80:e8:38:56:7d:50:01:0a:f5:6b:
9c:17:43:b8:f7:cc:d6:5a:ec:f8:b6:2c:d3:64:c4:
d2:51:07:f9:ce:07:0e:50:3d:19:04:ca:3a:9b:6e:
81:b8:5f:76:e7:cb:01:7c:6c:f0:b9:2f:02:50:ec:
6b:01:64:37:52:38:ec:af:b6:2a:c9:03:1b:50:68:
4b:d4:8c:94:43:10:b1:93:b8:47:eb:fa:dc:3d:5b:
90:0f:20:07:a8:cd:7a:48:0c:5f:f7:e9:f8:da:c5:
d8:f2:a9:70:b2:10:94:8e:a8:db:8c:57:4b:e5:26:
1d:ed:96:7f:a5:65:a6:74:cc:bd:4d:ec:32:7c:29:
67:99:3f:6a:03:7c:4b:01:e7:8b:ce:f3:2f:d3:b9:
15:27:9b:93:a7:bf:a7:cb:05:42:a1:d5:33:85:fc:
73:a8:35:69:20:8e:43:fa:ee:4e:ad:c4:d9:b3:fa:
f2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5B:F9:CF:6F:07:07:F5:88:8C:AE:48:88:42:AA:32:C5:27:8C:B6
X509v3 Authority Key Identifier:
keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:39:80:ea:b1:8c:86:9e:ee:17:34:cf:f2:67:a7:d8:c4:ba:
e6:07:3c:ad:aa:40:a2:d9:89:d2:99:ca:4c:13:7a:3b:d6:6f:
0f:24:84:37:9b:0b:bb:31:e6:60:bf:55:8e:62:5e:80:a4:be:
98:a4:75:7a:cc:4d:8a:8f:e3:73:ba:52:c5:f0:c6:70:f9:29:
9d:ac:27:4a:ad:7a:9e:8f:2f:96:29:c5:a3:8d:3b:20:a7:0f:
89:b5:66:20:36:29:56:e5:a4:dd:31:64:1f:2c:c9:36:b7:86:
56:7a:92:69:7e:26:b7:23:8b:62:a2:2b:86:ee:21:ec:09:62:
ee:74:be:18:ea:fe:6e:23:e4:74:29:ff:b3:43:60:60:9f:bf:
44:d8:75:4b:7e:f0:cc:09:d5:04:8f:6a:e1:c9:a4:ab:f7:af:
0f:55:a4:18:ec:43:dd:ee:c3:b1:a1:68:24:f6:53:3c:18:71:
2b:aa:42:64:d9:e6:c5:01:6e:34:91:1c:c8:1b:bc:f5:5f:6d:
48:be:6e:4a:34:f9:ff:d4:5f:cb:17:77:21:23:19:4d:6b:44:
e9:66:35:3b:e4:c8:38:b9:e5:e5:1c:b5:9b:d9:78:6d:a8:2b:
2f:ac:96:06:6b:7f:2c:89:6b:dd:27:4e:5b:df:4c:5e:db:85:
05:b3:fd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:27 2025 by rpki-client