Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
File: mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft (raw, json)
Hash identifier: gVWb7iSOYO5aNwHfIG0Mq1sPAxRr/D/54c/v299RXuk=
Subject key identifier: E5:9B:7E:15:FC:F5:43:3A:66:E6:C4:B1:AF:96:0E:EE:43:44:C0:B4
Authority key identifier: 9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
Certificate issuer: /CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Certificate serial: 019A722653BC8C589CF8AEC18568402CCE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
Manifest number: 0B6C
Signing time: Tue 11 Nov 2025 09:01:45 +0000
Manifest this update: Tue 11 Nov 2025 09:01:45 +0000
Manifest next update: Wed 12 Nov 2025 09:01:45 +0000
Files and hashes: 1: mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl (hash: MV/2sdzA1E/dTSlAoC+v9Mc3eK7CknN7+ieKmulSZGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:53:bc:8c:58:9c:f8:ae:c1:85:68:40:2c:ce:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Validity
Not Before: Nov 11 09:01:45 2025 GMT
Not After : Nov 12 09:01:45 2025 GMT
Subject: CN=e59b7e15fcf5433a66e6c4b1af960eee4344c0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:d9:ef:2b:6e:5f:f4:5b:94:62:ff:a7:18:
e2:90:7a:e1:fd:8f:26:f6:42:83:b8:97:b0:ca:dc:
90:f5:fc:94:65:e5:24:4b:52:1d:ed:ba:78:59:2e:
43:c2:71:df:e9:13:df:ab:1f:5a:a9:5d:e9:76:cb:
32:47:78:a8:f6:af:20:19:08:4f:cb:cc:c6:9a:36:
ce:8b:a7:8d:31:3d:68:63:2d:d9:e9:5c:46:ed:6e:
72:4c:9b:1e:06:2d:14:97:57:34:ae:77:c4:29:ef:
a1:2a:13:2c:94:cb:55:15:fa:64:59:2c:17:f5:e0:
fd:be:69:5e:5d:27:18:f8:ad:10:61:b3:68:cf:04:
01:54:a8:c2:03:09:4b:ae:2a:2b:ea:63:fd:28:6a:
c1:27:cd:fc:29:34:87:ca:e1:c8:17:9c:86:9c:7e:
c3:78:ce:33:ba:9a:20:34:77:01:b3:61:38:0f:a7:
3b:58:29:8e:44:0f:cc:4b:a6:5d:30:23:84:29:b6:
c6:c9:a4:bf:6c:7c:df:14:46:75:fb:81:a7:d9:a2:
01:69:3b:26:71:dc:3b:66:ff:47:d9:ab:09:e5:ed:
d8:18:f0:a7:5a:fa:2d:3d:48:95:6a:e0:b4:42:84:
2c:6b:3f:b7:d5:34:7b:90:41:f5:b4:0d:ff:5f:0d:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9B:7E:15:FC:F5:43:3A:66:E6:C4:B1:AF:96:0E:EE:43:44:C0:B4
X509v3 Authority Key Identifier:
keyid:9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2d:bb:f4:97:30:a4:24:3c:26:4d:8b:cc:e5:c5:fb:63:72:
b1:d6:32:64:9b:09:03:78:b4:d3:1f:70:96:3d:90:77:a5:01:
94:b3:b8:c8:1f:0f:2d:6f:4e:2b:f3:08:07:a8:87:f0:55:11:
0d:de:a7:fa:a1:99:c4:96:52:4a:9c:04:99:7e:6e:86:94:df:
05:f4:e8:bb:2f:e0:15:0e:f1:19:59:f3:43:fe:93:9f:62:b5:
47:1d:e9:a7:f4:61:9e:3e:02:45:a3:fd:aa:d9:cc:df:66:e7:
c1:f8:98:61:ff:22:b8:aa:7a:67:04:ba:5a:2f:8f:06:09:78:
56:f9:9f:cc:9b:60:14:ec:6f:10:c7:da:d9:a5:c7:bc:fe:0f:
d5:4f:0b:49:13:7f:f6:08:8f:6c:6b:5d:cb:52:30:3d:91:4a:
d9:63:f6:40:b7:2d:e5:0c:e1:89:a7:48:8d:da:b7:b5:6a:6a:
bd:43:0d:47:5f:82:de:f1:18:ee:60:a4:a0:6a:cd:ab:cc:1e:
53:d5:0e:57:1e:b9:0c:d9:47:9f:89:cc:6a:63:d5:5d:74:d1:
54:04:81:a1:81:0d:e6:63:54:05:d5:4e:d5:9b:6e:3e:b9:87:
5f:95:5d:93:6e:18:ab:01:75:be:37:86:17:38:79:72:5a:19:
35:70:fa:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJlO8jFic+K7BhWhALM4GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNmNjNTRiMzNjZjFmMTJlNTQwNmYwNjUyOWM1NGRkYzZl
ZmNmYmIwHhcNMjUxMTExMDkwMTQ1WhcNMjUxMTEyMDkwMTQ1WjAzMTEwLwYDVQQD
EyhlNTliN2UxNWZjZjU0MzNhNjZlNmM0YjFhZjk2MGVlZTQzNDRjMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplXZ7ytuX/RblGL/pxjikHrh/Y8m
9kKDuJewytyQ9fyUZeUkS1Id7bp4WS5DwnHf6RPfqx9aqV3pdssyR3io9q8gGQhP
y8zGmjbOi6eNMT1oYy3Z6VxG7W5yTJseBi0Ul1c0rnfEKe+hKhMslMtVFfpkWSwX
9eD9vmleXScY+K0QYbNozwQBVKjCAwlLrior6mP9KGrBJ838KTSHyuHIF5yGnH7D
eM4zupogNHcBs2E4D6c7WCmORA/MS6ZdMCOEKbbGyaS/bHzfFEZ1+4Gn2aIBaTsm
cdw7Zv9H2asJ5e3YGPCnWvotPUiVauC0QoQsaz+31TR7kEH1tA3/Xw0PbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWbfhX89UM6ZubEsa+WDu5DRMC0MB8GA1UdIwQY
MBaAFJpsxUszzx8S5UBvBlKcVN3G78+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW16RlN6UFBIeExsUUc4R1VweFUzY2J2ejdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MTJhZmYtYmY2Yy00MmJlLTgwODAt
ZjdkZjYyYTY4ZDkyLzEvbW16RlN6UFBIeExsUUc4R1VweFUzY2J2ejdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83MTJhZmYtYmY2Yy00MmJlLTgwODAtZjdkZjYyYTY4ZDky
LzEvbW16RlN6UFBIeExsUUc4R1VweFUzY2J2ejdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAri279Jcw
pCQ8Jk2LzOXF+2NysdYyZJsJA3i00x9wlj2Qd6UBlLO4yB8PLW9OK/MIB6iH8FUR
Dd6n+qGZxJZSSpwEmX5uhpTfBfTouy/gFQ7xGVnzQ/6Tn2K1Rx3pp/Rhnj4CRaP9
qtnM32bnwfiYYf8iuKp6ZwS6Wi+PBgl4VvmfzJtgFOxvEMfa2aXHvP4P1U8LSRN/
9giPbGtdy1IwPZFK2WP2QLct5QzhiadIjdq3tWpqvUMNR1+C3vEY7mCkoGrNq8we
U9UOVx65DNlHn4nMamPVXXTRVASBoYEN5mNUBdVO1ZtuPrmHX5Vdk24YqwF1vjeG
Fzh5cloZNXD6UQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:17 2025 by rpki-client