Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
File: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft (raw, json)
Hash identifier: ibytsf6uE8xKD5ydTibanFx998kdXgrvUYEwdZJTMH4=
Subject key identifier: 62:F9:C5:04:A6:79:AA:1D:6D:64:EE:D0:66:49:9C:30:C1:FB:60:66
Authority key identifier: 9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
Certificate issuer: /CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Certificate serial: 0197488CE7B7EF9B9E02F0E98235ED161EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
Manifest number: 0CDD
Signing time: Sat 07 Jun 2025 04:01:23 +0000
Manifest this update: Sat 07 Jun 2025 04:01:23 +0000
Manifest next update: Sun 08 Jun 2025 04:01:23 +0000
Files and hashes: 1: 0qrwU3AHf3uhnYK1JVGdBCRu6z8.roa (hash: /kYhLDLgGmD/nuK1uy52fNBM98m/fU6G1KeanfyrJjY=)
2: mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl (hash: eWdVzy+JCBQByRSuTml+Zr5gDp/q6GkLg/kWe8+HNko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:e7:b7:ef:9b:9e:02:f0:e9:82:35:ed:16:1e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a620e691d95aaceb3262dbdfcb0ca5099ee2444
Validity
Not Before: Jun 7 04:01:23 2025 GMT
Not After : Jun 8 04:01:23 2025 GMT
Subject: CN=62f9c504a679aa1d6d64eed066499c30c1fb6066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:c3:d6:88:54:ed:51:b7:36:b6:31:af:09:
e0:82:5e:93:07:94:16:8a:91:16:c2:b8:b9:17:50:
f7:a2:d0:25:9f:07:7e:56:68:c5:75:54:e9:b0:5f:
e5:be:c4:46:8c:f3:4d:d1:4c:4e:02:d3:41:19:67:
d4:05:7d:f6:c7:e2:55:90:8d:05:83:50:2f:e0:5f:
36:4d:df:e8:1f:e3:a7:71:2d:0a:26:73:3f:22:36:
59:8d:5f:5c:fb:4c:0d:3f:c2:d1:08:84:0d:4c:5b:
2e:91:ce:fd:c7:e1:d3:ba:70:e9:73:fb:7a:51:43:
86:ff:6e:27:6c:fb:af:0f:27:ba:1c:2a:ea:90:f2:
44:a4:30:d5:68:e3:0e:93:85:02:bd:e3:1a:ca:02:
c6:0f:ca:9c:46:10:24:f5:ed:2e:4e:fe:51:b0:81:
a7:70:c1:b6:dd:00:c7:a7:b1:37:a8:b7:38:6b:d9:
4b:ed:cc:b0:7c:08:83:12:92:fe:af:38:a7:64:4a:
8c:d2:5f:ea:07:7a:f6:e9:f0:a2:7f:a2:b5:fa:82:
8d:18:7f:0d:6b:58:ee:5c:47:ed:dc:b4:4f:86:93:
e0:9e:4f:22:3d:da:1c:2f:79:37:ec:9e:6b:15:ec:
3c:90:a5:45:ed:66:77:13:57:44:8a:97:26:be:92:
a1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F9:C5:04:A6:79:AA:1D:6D:64:EE:D0:66:49:9C:30:C1:FB:60:66
X509v3 Authority Key Identifier:
keyid:9A:62:0E:69:1D:95:AA:CE:B3:26:2D:BD:FC:B0:CA:50:99:EE:24:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2854f2-82d7-42bd-acbc-d08a9cdec986/1/mmIOaR2Vqs6zJi29_LDKUJnuJEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b5:d6:6c:db:f2:4c:ed:4c:b7:bc:c5:df:a2:fd:4b:c7:17:
e6:19:fa:64:c8:e4:84:6b:02:2e:a9:ec:d4:a5:0a:ac:e8:d5:
cd:42:2a:c8:d8:55:1f:d1:85:61:78:03:7c:4a:84:a7:56:ae:
e2:f0:63:20:88:5e:13:88:29:1f:6c:63:fa:7f:3a:4d:a0:83:
33:70:5f:4a:62:19:e9:5d:80:0c:8d:ac:84:d4:fa:78:24:a2:
9e:cc:90:78:0e:04:35:32:e7:d6:cb:37:83:cf:97:57:f8:5f:
35:39:da:84:89:6d:62:b6:d2:65:ab:64:21:e8:b2:04:fc:ed:
27:4a:f4:40:48:6b:36:07:28:8c:ab:8d:c2:58:77:67:f9:09:
03:51:d5:e7:bb:a3:f5:93:12:48:67:a3:fb:5f:fb:5a:3f:60:
52:76:12:61:91:2b:50:82:5f:ec:2a:ff:8a:0f:37:73:c5:6e:
21:49:fa:a7:55:0b:fe:49:a7:4e:5f:aa:5c:25:dd:5d:5f:31:
cf:a8:81:bc:fa:ab:fc:2e:54:ef:98:f0:b5:fe:fa:97:4c:77:
7f:f0:3e:c6:02:90:79:b7:5a:50:a3:3a:41:e2:ef:7e:a2:bd:
d5:73:83:dd:8d:1a:1c:a3:a6:cd:9a:92:fb:5f:a8:c4:5d:2e:
93:62:5a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:11:19 2025 by rpki-client