Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
File: mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft (raw, json)
Hash identifier: bfTXTPXIe/Zhd82pEko4eVW3hMm73aqdX4InS9VEkkA=
Subject key identifier: 67:C5:C1:F9:AB:7D:04:A6:EF:B9:5F:49:BD:11:54:7C:C1:92:DF:64
Authority key identifier: 9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
Certificate issuer: /CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Certificate serial: 0199240D23F58AA45CF02CA09DAA01030E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
Manifest number: 0ABF
Signing time: Sun 07 Sep 2025 12:01:04 +0000
Manifest this update: Sun 07 Sep 2025 12:01:04 +0000
Manifest next update: Mon 08 Sep 2025 12:01:04 +0000
Files and hashes: 1: mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl (hash: 9PzcNB4ClNg58vK8yDxLdlYBrk7aG5Im6j3rqeOsYUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:23:f5:8a:a4:5c:f0:2c:a0:9d:aa:01:03:0e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb
Validity
Not Before: Sep 7 12:01:04 2025 GMT
Not After : Sep 8 12:01:04 2025 GMT
Subject: CN=67c5c1f9ab7d04a6efb95f49bd11547cc192df64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:d7:7d:ae:2f:49:db:0c:5d:3a:e3:5f:29:
93:84:66:95:3e:c1:70:10:c8:4c:3b:55:2f:42:aa:
dd:82:2c:70:9f:68:8e:96:7c:60:ef:ff:3f:df:f3:
b2:06:3d:5c:4b:22:a6:01:f2:ef:df:9a:69:84:94:
e8:0b:4d:c9:89:80:34:65:35:ae:d7:ca:29:47:b0:
96:74:fa:e9:e1:d5:88:2c:ba:13:fb:cf:66:6c:9c:
e1:6c:d5:c5:88:f5:43:98:09:4b:ca:29:ba:2f:30:
2c:fd:64:4a:9d:63:18:ae:2f:03:f3:ce:4c:f9:18:
5b:e6:e1:07:c5:4d:8a:b9:13:5e:c9:75:df:bc:57:
57:90:ab:b7:5a:c5:51:f4:4c:a0:59:81:c4:ca:b5:
7f:48:ac:7f:08:af:7b:81:68:d2:dd:4e:b8:d6:54:
7a:f9:5e:bb:3f:dc:1f:81:4d:38:80:ec:97:60:81:
36:ec:c5:1a:02:af:72:1a:86:19:e7:0b:7a:31:bb:
b2:29:1f:03:5a:20:28:0e:78:41:b2:b8:21:72:01:
04:5b:ca:d1:28:46:de:3c:19:a8:a8:c8:a0:6f:5d:
00:ac:6c:e7:f4:16:db:21:b9:26:9d:9a:ec:ea:7a:
3a:27:9c:ef:40:b3:73:b3:4e:42:0d:9c:f9:ee:cd:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C5:C1:F9:AB:7D:04:A6:EF:B9:5F:49:BD:11:54:7C:C1:92:DF:64
X509v3 Authority Key Identifier:
keyid:9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:9a:9a:09:5f:b7:53:33:0f:d6:82:0b:3e:76:6e:f4:10:72:
36:20:ec:1a:f6:5d:34:fe:5c:11:ba:e4:b3:dc:ce:f2:73:27:
f9:f4:88:ad:b2:a8:42:9a:02:15:e1:df:86:19:5b:09:75:c5:
ab:d2:a9:04:a1:99:e6:a0:2c:d0:f1:ce:59:57:fb:73:d6:19:
78:a5:8e:a5:16:8a:31:c2:a1:b1:93:2f:3c:b0:45:15:7f:5f:
85:a5:f6:04:d0:7d:e9:39:c7:76:ae:93:19:62:0d:34:ec:a9:
bc:9a:02:c0:52:c6:39:36:22:b9:ca:32:fc:ac:14:ff:da:ee:
7a:40:ae:bf:9b:f5:10:d3:8f:58:a8:26:4b:02:78:6d:99:2a:
bd:45:c1:b1:6a:9d:f6:10:75:88:13:e5:65:27:ad:ee:bf:6e:
df:9c:5e:d4:d2:e5:6f:d2:bb:18:65:39:0f:ce:8c:81:d6:84:
d4:2d:ac:3d:16:e6:c6:90:da:c2:20:0d:1a:e6:27:74:af:5f:
22:60:57:63:01:74:df:f9:a6:d6:6e:41:0e:9e:80:5f:39:46:
42:16:1c:3b:56:b4:9f:fa:4a:91:23:32:12:85:bf:f4:67:09:
80:33:fe:97:97:d2:de:ce:93:25:ca:6e:da:d0:31:81:f8:81:
39:ce:dc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:48 2025 by rpki-client