Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
File: mmCuS92dbvum6hHGBzfLoC3PHmA.mft (raw, json)
Hash identifier: Uh8Os/1tqqqHNPB2vqWWZks+nWFPL/Ptn7Nl34i4hJc=
Subject key identifier: DC:57:D6:59:05:7A:FA:5A:C8:12:2B:9C:78:20:7B:D3:8F:CB:CA:1F
Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Certificate issuer: /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Certificate serial: 019A71EECB9A56B9417D5190715EBC9A03B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
Manifest number: 09E3
Signing time: Tue 11 Nov 2025 08:01:06 +0000
Manifest this update: Tue 11 Nov 2025 08:01:06 +0000
Manifest next update: Wed 12 Nov 2025 08:01:06 +0000
Files and hashes: 1: mmCuS92dbvum6hHGBzfLoC3PHmA.crl (hash: ILoWUF1pJFFwlfuDbSAiMYIKbhSusRl/qdGZlU49k7M=)
2: u1q93eogqq8ewSFI28D24ujX7vQ.roa (hash: pvm3GrE3J/VbhZBCkLiKY82QF1T8mhNfTTlLlGr7usY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:cb:9a:56:b9:41:7d:51:90:71:5e:bc:9a:03:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Validity
Not Before: Nov 11 08:01:06 2025 GMT
Not After : Nov 12 08:01:06 2025 GMT
Subject: CN=dc57d659057afa5ac8122b9c78207bd38fcbca1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:33:ac:c1:e8:20:76:9b:31:22:0d:0f:cc:
47:c4:e8:9f:7e:7d:04:28:53:c4:38:83:2f:fb:b1:
80:b8:7c:8f:55:08:d2:07:7e:d3:5b:be:84:d7:11:
ff:9b:ed:8c:da:b6:c8:15:89:db:b0:65:35:52:66:
a3:84:e4:7e:1b:de:c2:4c:ce:15:2e:d5:72:85:8f:
17:1e:1a:8d:14:60:6d:ba:45:c5:0a:5b:43:86:71:
9a:a9:70:00:63:c7:5c:82:a0:0c:0a:9d:2f:a8:5b:
87:ad:df:ae:2c:e4:2d:e5:38:9f:a9:0a:79:84:60:
45:0f:79:45:7b:e8:09:ae:48:7e:ce:b5:8d:ff:e2:
4a:5c:a0:e2:ba:e5:4a:22:85:c9:0c:09:46:e2:0f:
85:cc:d5:61:9a:cf:f8:ef:f6:20:7a:bb:cf:48:9a:
40:e9:cf:94:85:68:fb:a7:e1:ca:53:ef:26:f0:7a:
dd:e8:dd:69:57:7f:9f:de:2a:25:52:95:22:a4:30:
c8:b3:02:8d:ee:8a:eb:ae:17:d5:d6:20:20:d0:d9:
de:51:45:1f:f8:fb:4b:89:bb:51:51:d6:6b:ce:0c:
1b:ed:b3:f6:73:7c:ef:b5:59:84:0d:06:7e:ab:cd:
17:63:8e:89:30:2a:a4:d8:ad:5a:de:47:75:fe:d9:
8f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:57:D6:59:05:7A:FA:5A:C8:12:2B:9C:78:20:7B:D3:8F:CB:CA:1F
X509v3 Authority Key Identifier:
keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ef:8c:ae:50:55:ca:4a:38:f0:85:eb:c0:84:be:f8:b2:2a:
75:7c:f9:b6:ef:17:79:c2:4e:e6:5c:77:ec:20:47:4d:b7:bf:
7f:de:a0:38:af:fc:1f:b5:2c:9b:e9:58:89:4a:61:82:23:a7:
3e:78:1e:3d:7c:fb:ad:11:85:ae:b9:fd:95:88:46:5a:18:42:
9b:4a:fa:82:fc:5a:12:bd:3d:16:b4:0b:4c:9d:57:8f:ed:06:
78:34:98:ee:c3:84:9c:44:ef:20:06:d4:6d:f3:a5:e8:5b:e3:
e7:23:24:7f:2d:80:de:b9:55:f5:2f:e6:2d:21:dc:ba:f6:00:
28:8b:02:bd:11:eb:f4:6f:1f:b5:c5:25:e5:e6:5f:39:8b:3d:
88:19:1f:3c:dd:0c:f9:44:ba:d8:f7:88:d9:3d:bf:72:04:1d:
28:dd:aa:4c:cf:d2:72:66:93:00:3e:f7:e1:2d:5a:70:f7:3c:
17:10:e1:63:f2:a3:46:20:40:e3:8d:6a:8d:31:e5:7a:98:b6:
32:4d:e0:78:ef:13:94:42:11:f0:5c:8d:2f:76:58:5e:4d:fa:
cb:54:bf:42:d3:c7:d1:dd:07:5c:f7:68:50:4c:92:31:f7:61:
c4:f7:5b:77:15:07:8a:ad:95:1d:07:8d:9d:f1:40:3e:5b:77:
2b:48:42:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:11 2025 by rpki-client