Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
File: mmzb9HURP5bKeKB6-9RFjIiIB3E.mft (raw, json)
Hash identifier: Y4YQroMUWPjpP7gOeykY2gAdncU5iPk7UGPAAoKeK2k=
Subject key identifier: 29:ED:B4:B1:AC:E6:EF:CB:CD:C8:04:B1:E4:42:E0:4B:0D:7C:7E:1F
Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Certificate serial: 01992255D4B5EB3761ED14E1A413913E1D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
Manifest number: 0538
Signing time: Sun 07 Sep 2025 04:01:14 +0000
Manifest this update: Sun 07 Sep 2025 04:01:14 +0000
Manifest next update: Mon 08 Sep 2025 04:01:14 +0000
Files and hashes: 1: j_X8tJ2h9OHGJHosgdoOoXcoQic.roa (hash: +g3waCGUvWC6G9wCV2Zz7i7n4x4ui8ded+3mDQgQ1Kc=)
2: mmzb9HURP5bKeKB6-9RFjIiIB3E.crl (hash: bphjGTeBqAccKrvyaJi4H7aN+SffpDLBN86LMkRXPl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:d4:b5:eb:37:61:ed:14:e1:a4:13:91:3e:1d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Validity
Not Before: Sep 7 04:01:14 2025 GMT
Not After : Sep 8 04:01:14 2025 GMT
Subject: CN=29edb4b1ace6efcbcdc804b1e442e04b0d7c7e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:2e:12:33:cd:70:7e:bb:e9:27:e6:34:5d:
61:e4:f3:2e:9d:65:63:7f:6d:36:05:a6:31:47:45:
98:58:e0:3d:ed:6d:f4:b9:0b:c0:4b:a7:1c:46:9c:
6f:82:b8:d5:1b:12:de:fa:bb:23:99:55:fa:41:15:
01:fe:15:63:e1:eb:68:b9:59:2f:c7:fb:70:d4:09:
9e:0d:2c:a8:23:cc:59:a7:23:9b:89:f3:ff:e9:d4:
59:3f:4b:04:c9:82:e5:dd:6d:f8:08:e5:f3:bc:a0:
06:ce:2a:ab:cd:df:41:04:03:87:20:49:1d:c9:5b:
7e:b3:bb:ea:fc:9b:4e:4a:c7:70:79:8d:eb:f0:36:
12:30:58:eb:45:49:5a:9d:6f:77:2d:02:4e:ad:af:
0c:c0:cb:c8:3f:60:38:d2:72:43:0d:69:4c:72:a7:
21:9a:99:3a:c9:c0:00:e6:f3:42:10:3b:0b:16:92:
1d:d3:6f:ab:e8:34:2c:4f:01:f7:2d:30:4b:19:e1:
75:30:35:e7:96:b0:41:d6:05:74:ef:6a:03:72:54:
e0:15:30:ac:aa:da:c4:05:af:26:9f:77:1e:21:fc:
9d:d4:15:c0:80:a1:73:d9:a1:b2:91:be:d9:a2:07:
1d:59:73:9a:71:bb:b0:bf:7b:62:ba:d3:40:be:df:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:ED:B4:B1:AC:E6:EF:CB:CD:C8:04:B1:E4:42:E0:4B:0D:7C:7E:1F
X509v3 Authority Key Identifier:
keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1c:f7:f6:f0:d4:a3:74:93:63:da:2d:ee:46:9f:89:57:d2:
4d:2c:b5:0a:eb:21:26:e3:08:d6:79:e2:cd:ef:4b:48:79:e1:
16:7e:49:a6:b4:e7:ba:56:62:82:6c:b6:5f:55:28:66:31:dd:
e7:2a:0a:36:5e:b1:52:3c:cc:22:fc:fa:d5:f3:1c:1b:61:78:
cb:bd:74:88:62:f2:ac:23:dd:f0:b0:4a:c0:c9:73:ae:15:e9:
02:dd:70:4b:c7:89:e3:ce:35:cc:8d:81:33:a0:cd:ae:a9:85:
b7:b5:d4:60:ee:28:d5:e4:6e:1d:3a:c1:6b:85:48:cc:b7:d6:
d5:fc:f2:a3:0a:ba:53:f4:45:fa:3e:e3:95:14:18:09:d9:ab:
93:19:04:7f:49:9a:3e:f8:81:3e:bd:30:71:db:e6:7c:e0:b6:
07:7c:bb:e4:56:8f:2d:ce:b2:4a:03:30:cb:b8:c3:af:e5:5d:
5b:ea:8c:ca:f7:53:d8:d3:85:2f:cf:3e:60:ca:29:0d:9d:fe:
c3:68:c4:7b:aa:6d:1a:71:fd:02:92:d1:c2:26:49:13:8c:13:
9d:e7:60:cc:b7:c8:63:4a:ba:a1:e1:5b:7a:1d:21:5f:8d:a1:
91:c8:41:31:e4:e0:1f:ed:1f:c4:e9:c6:79:7a:6e:28:29:60:
06:de:e7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:09 2025 by rpki-client