Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json)
Hash identifier: DEoCFEy45Y7XdEuBtvbIc7hzvsgGLlWrwVE2+tvXVVU=
Subject key identifier: DD:4D:F9:EF:00:B1:83:74:3B:6A:AA:40:2F:B4:2F:B9:5A:49:93:C3
Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Certificate serial: 0197B88ED007D4D453F89D39DE8797D60F65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
Manifest number: 03B0
Signing time: Sat 28 Jun 2025 22:00:56 +0000
Manifest this update: Sat 28 Jun 2025 22:00:56 +0000
Manifest next update: Sun 29 Jun 2025 22:00:56 +0000
Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: +yq5WMLkTGi/06Wwqts1ecQUFZyY7DedDXT9tAgxFn4=)
2: sRNeT65rt6woLISuiM8vg1rgfeg.roa (hash: U0++MMBJLtG7d5c7Me3am120THV8UBDE/53t4i8cpqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:d0:07:d4:d4:53:f8:9d:39:de:87:97:d6:0f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Validity
Not Before: Jun 28 22:00:56 2025 GMT
Not After : Jun 29 22:00:56 2025 GMT
Subject: CN=dd4df9ef00b183743b6aaa402fb42fb95a4993c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f7:f9:97:dc:4e:96:36:f0:48:01:0d:51:c8:
50:d6:96:76:04:61:08:d1:d2:62:43:eb:bb:93:6f:
b5:07:35:b9:0a:23:b5:dd:f4:54:2d:10:08:23:34:
d1:aa:76:c5:65:06:15:22:d9:ae:f9:06:30:4c:1a:
60:e5:d8:f7:56:7c:4f:ab:3a:a8:33:72:cf:ce:20:
2a:4f:22:13:fc:ba:41:df:85:7a:98:8a:69:1a:9d:
5c:43:ba:3c:6c:8d:c0:18:ec:6b:9f:58:64:b3:6e:
0d:52:3c:8f:eb:9f:c0:39:44:a9:be:6e:a1:fd:4f:
dc:46:f3:4e:90:be:c7:c6:39:10:67:4a:af:44:fe:
72:28:f6:ac:80:16:7a:71:53:ed:52:36:26:3d:b0:
1d:18:ad:ec:20:ab:3f:05:80:9b:56:6d:d1:ad:51:
8e:51:2d:a4:a0:27:62:78:f5:13:a6:77:f2:42:57:
8c:3b:03:6f:2f:c5:ef:96:ab:39:2a:6f:5e:35:59:
fb:46:4a:10:31:ad:d9:34:d4:ee:0b:4e:c3:84:ac:
e0:20:a2:87:00:d3:ae:ce:44:5b:a5:04:da:26:22:
5f:5b:9c:e4:f8:9b:aa:3b:97:06:24:a0:46:59:25:
ca:cd:f1:8c:c8:e3:7d:b6:13:c8:2b:fd:3e:23:58:
e3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4D:F9:EF:00:B1:83:74:3B:6A:AA:40:2F:B4:2F:B9:5A:49:93:C3
X509v3 Authority Key Identifier:
keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:23:82:0f:90:8e:37:db:ee:26:07:38:da:0b:cb:f3:09:7a:
99:92:f3:f8:cf:75:a1:1a:e6:7e:a6:69:54:26:44:c2:27:6a:
85:78:80:61:ed:ea:6d:80:5c:e0:d8:d5:75:3a:e6:4d:9b:ce:
b1:16:a1:80:9e:9c:2e:c4:68:51:02:d6:98:51:fd:3f:2c:f3:
09:b0:30:55:6e:7a:6a:d7:25:82:75:cf:8c:72:40:74:4e:a3:
81:16:34:c1:a2:77:42:07:61:89:27:00:bf:e1:a4:36:54:e1:
7e:ae:1c:aa:19:e7:cc:8d:c1:9e:21:e4:f9:8d:38:06:97:c7:
4b:2e:1a:56:f1:49:8c:93:0d:e1:18:29:cf:7a:9a:5e:a6:7e:
cf:8f:4b:b5:f8:63:60:9f:ce:8f:f1:26:a0:85:0e:36:c7:1d:
17:8b:95:70:43:c8:d8:4f:30:c5:ba:b8:c2:6a:ff:6c:61:7a:
a7:6f:22:9c:7f:5a:ed:15:3f:c2:b9:b5:ab:c8:e9:17:c5:a2:
52:18:74:da:49:80:d4:ca:02:9b:81:cc:aa:56:57:4a:54:06:
4f:ec:41:cc:86:c4:e7:3f:52:c4:ac:79:ec:40:91:b3:b8:02:
90:41:54:e8:7e:9a:3b:d4:be:37:e2:5b:fe:e6:a7:26:c2:f2:
0e:91:24:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jtAH1NRT+J053oeX1g9lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNjliMzliMDhmM2Y2MmNlM2UwODNiYmM4YWVlY2VhZGM0
OThiNjkwHhcNMjUwNjI4MjIwMDU2WhcNMjUwNjI5MjIwMDU2WjAzMTEwLwYDVQQD
EyhkZDRkZjllZjAwYjE4Mzc0M2I2YWFhNDAyZmI0MmZiOTVhNDk5M2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzff5l9xOljbwSAENUchQ1pZ2BGEI
0dJiQ+u7k2+1BzW5CiO13fRULRAIIzTRqnbFZQYVItmu+QYwTBpg5dj3VnxPqzqo
M3LPziAqTyIT/LpB34V6mIppGp1cQ7o8bI3AGOxrn1hks24NUjyP65/AOUSpvm6h
/U/cRvNOkL7HxjkQZ0qvRP5yKPasgBZ6cVPtUjYmPbAdGK3sIKs/BYCbVm3RrVGO
US2koCdiePUTpnfyQleMOwNvL8Xvlqs5Km9eNVn7RkoQMa3ZNNTuC07DhKzgIKKH
ANOuzkRbpQTaJiJfW5zk+JuqO5cGJKBGWSXKzfGMyON9thPIK/0+I1jjWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1N+e8AsYN0O2qqQC+0L7laSZPDMB8GA1UdIwQY
MBaAFApps5sI8/Ys4+CDu8iu7OrcSYtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAt
YzA5YWZhMDBjYjg0LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8yZjMyNDUtMmIzNi00Y2Y1LTllNjAtYzA5YWZhMDBjYjg0
LzEvQ21tem13ano5aXpqNElPN3lLN3M2dHhKaTJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATyOCD5CO
N9vuJgc42gvL8wl6mZLz+M91oRrmfqZpVCZEwidqhXiAYe3qbYBc4NjVdTrmTZvO
sRahgJ6cLsRoUQLWmFH9PyzzCbAwVW56atclgnXPjHJAdE6jgRY0waJ3QgdhiScA
v+GkNlThfq4cqhnnzI3BniHk+Y04BpfHSy4aVvFJjJMN4Rgpz3qaXqZ+z49Ltfhj
YJ/Oj/EmoIUONscdF4uVcEPI2E8wxbq4wmr/bGF6p28inH9a7RU/wrm1q8jpF8Wi
Uhh02kmA1MoCm4HMqlZXSlQGT+xBzIbE5z9SxKx57ECRs7gCkEFU6H6aO9S+N+Jb
/uanJsLyDpEkGQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:21:10 2025 by rpki-client