Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
File: mmzb9HURP5bKeKB6-9RFjIiIB3E.mft (raw, json)
Hash identifier: o0JUtPAyuVLRIEWjxMA6P4S1Ix/eZEtGVSHraYXbk3A=
Subject key identifier: 85:15:AC:82:FB:12:96:2F:97:CC:93:16:AB:19:F0:07:91:19:32:BF
Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Certificate serial: 019A725CD1CF288CBC1EF93B979397EA5D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
Manifest number: 05E6
Signing time: Tue 11 Nov 2025 10:01:16 +0000
Manifest this update: Tue 11 Nov 2025 10:01:16 +0000
Manifest next update: Wed 12 Nov 2025 10:01:16 +0000
Files and hashes: 1: j_X8tJ2h9OHGJHosgdoOoXcoQic.roa (hash: +g3waCGUvWC6G9wCV2Zz7i7n4x4ui8ded+3mDQgQ1Kc=)
2: mmzb9HURP5bKeKB6-9RFjIiIB3E.crl (hash: 2nk+o0c5o9NOiWD3hn34ZdcqFp2kVlgxKmyOqUwINS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d1:cf:28:8c:bc:1e:f9:3b:97:93:97:ea:5d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Validity
Not Before: Nov 11 10:01:16 2025 GMT
Not After : Nov 12 10:01:16 2025 GMT
Subject: CN=8515ac82fb12962f97cc9316ab19f007911932bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:73:79:5b:37:e6:e3:9d:6a:af:12:c8:ea:24:
3f:c3:cd:e5:6a:6f:32:58:5e:4c:9d:3c:2c:83:16:
59:3b:41:b3:da:88:a2:b1:f0:41:6f:a6:fc:2f:72:
ec:66:91:b0:8b:b7:ae:3b:74:cd:12:b8:5e:d2:4c:
94:2f:89:dc:28:ae:62:28:52:91:7a:57:47:49:59:
01:55:93:4f:4c:d4:e8:22:19:93:40:cd:ab:6a:14:
b6:e1:49:2c:5f:84:a4:bd:27:14:33:47:97:cf:ea:
09:75:f7:33:b2:4d:15:45:2f:36:d0:b9:ee:ac:ca:
e7:c9:af:08:25:3a:31:e0:e8:59:20:05:f7:6d:89:
ec:da:5c:0e:b0:7f:3a:9a:48:f6:1f:0f:cf:14:4a:
d3:0b:22:a1:2a:dc:38:75:01:0d:30:43:ce:4b:3c:
21:f0:12:73:85:75:25:9a:a2:6e:fe:81:a0:18:60:
32:9f:de:4f:36:e2:ec:f1:7a:ab:9a:9b:0a:b9:cd:
c7:18:bc:a7:dc:85:a8:6a:c6:88:94:5f:ba:a7:42:
77:b6:70:95:ae:55:2a:16:ee:50:13:da:58:f2:aa:
8e:aa:06:0d:2e:f4:43:f0:44:c2:fd:95:ed:cf:39:
eb:75:61:75:3c:5c:20:77:a2:0f:5e:6d:3c:6f:14:
47:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:15:AC:82:FB:12:96:2F:97:CC:93:16:AB:19:F0:07:91:19:32:BF
X509v3 Authority Key Identifier:
keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:96:d1:30:0d:80:49:d2:1c:a3:aa:09:34:4b:47:4f:f0:74:
7e:c3:8f:a1:e5:c1:db:ac:05:ab:1b:c1:7f:f4:2e:d8:28:43:
d4:31:c1:d9:f5:d1:cd:cb:6f:86:a5:89:85:72:34:c3:40:3d:
e1:6a:56:32:a0:02:ca:4a:41:8d:03:ff:7a:b7:72:8e:76:fd:
39:f5:57:71:60:69:59:d4:82:41:d5:40:7d:c5:5a:a6:d6:bd:
a2:06:63:16:4b:f2:27:ff:9b:ff:46:43:11:c4:0d:75:4d:a3:
7b:88:54:24:1c:ae:92:f6:b3:13:b7:2a:4a:ab:a8:e5:78:5a:
8a:28:8c:14:83:67:4b:bc:1c:b5:ec:6c:02:d5:4e:8e:fd:26:
e9:d8:30:53:7b:ac:81:ff:96:9a:ee:82:55:6c:8f:df:40:0c:
e0:58:65:92:05:39:bc:a4:1a:a8:fb:ed:38:e3:4e:73:16:6f:
2c:f6:11:a5:ad:9a:4a:a9:6f:b7:97:98:08:4e:f5:8c:88:ee:
0f:47:aa:b4:b2:16:10:80:3f:36:39:58:87:fb:4d:fe:27:23:
54:49:70:d0:72:f1:b4:70:72:ec:80:d1:d0:1d:ee:8e:57:a1:
a5:70:3b:29:b6:35:59:12:3b:40:bb:84:e9:aa:e0:76:ad:d4:
ee:a4:e9:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXNHPKIy8Hvk7l5OX6l2NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNmNkYmY0NzUxMTNmOTZjYTc4YTA3YWZiZDQ0NThjODg4
ODA3NzEwHhcNMjUxMTExMTAwMTE2WhcNMjUxMTEyMTAwMTE2WjAzMTEwLwYDVQQD
Eyg4NTE1YWM4MmZiMTI5NjJmOTdjYzkzMTZhYjE5ZjAwNzkxMTkzMmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHN5Wzfm451qrxLI6iQ/w83lam8y
WF5MnTwsgxZZO0Gz2oiisfBBb6b8L3LsZpGwi7euO3TNErhe0kyUL4ncKK5iKFKR
eldHSVkBVZNPTNToIhmTQM2rahS24UksX4SkvScUM0eXz+oJdfczsk0VRS820Lnu
rMrnya8IJTox4OhZIAX3bYns2lwOsH86mkj2Hw/PFErTCyKhKtw4dQENMEPOSzwh
8BJzhXUlmqJu/oGgGGAyn95PNuLs8XqrmpsKuc3HGLyn3IWoasaIlF+6p0J3tnCV
rlUqFu5QE9pY8qqOqgYNLvRD8ETC/ZXtzznrdWF1PFwgd6IPXm08bxRHuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUVrIL7EpYvl8yTFqsZ8AeRGTK/MB8GA1UdIwQY
MBaAFJps2/R1ET+WynigevvURYyIiAdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUt
ZGMyZmVhYzM3ODI5LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUtZGMyZmVhYzM3ODI5
LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJbRMA2A
SdIco6oJNEtHT/B0fsOPoeXB26wFqxvBf/Qu2ChD1DHB2fXRzctvhqWJhXI0w0A9
4WpWMqACykpBjQP/erdyjnb9OfVXcWBpWdSCQdVAfcVapta9ogZjFkvyJ/+b/0ZD
EcQNdU2je4hUJByukvazE7cqSquo5XhaiiiMFINnS7wctexsAtVOjv0m6dgwU3us
gf+Wmu6CVWyP30AM4FhlkgU5vKQaqPvtOONOcxZvLPYRpa2aSqlvt5eYCE71jIju
D0eqtLIWEIA/NjlYh/tN/icjVElw0HLxtHBy7IDR0B3ujlehpXA7KbY1WRI7QLuE
6argdq3U7qTphg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:33:02 2025 by rpki-client