Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
File: mmCuS92dbvum6hHGBzfLoC3PHmA.mft (raw, json)
Hash identifier: cZwdhx2JjviQm7doKeBiz20hgWygPfrhu9RZwD6DfKM=
Subject key identifier: 99:7F:26:4E:32:65:6B:74:47:6C:2A:23:8E:B4:30:A6:24:FA:83:47
Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Certificate issuer: /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Certificate serial: 01974AB1A1F93765D12A75BA7EE1F93D3FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
Manifest number: 0841
Signing time: Sat 07 Jun 2025 14:00:44 +0000
Manifest this update: Sat 07 Jun 2025 14:00:44 +0000
Manifest next update: Sun 08 Jun 2025 14:00:44 +0000
Files and hashes: 1: mmCuS92dbvum6hHGBzfLoC3PHmA.crl (hash: Opodut+RX8OxI+Xp6mzia9Wov9pnZu/u2K3FPM11OcU=)
2: u1q93eogqq8ewSFI28D24ujX7vQ.roa (hash: pvm3GrE3J/VbhZBCkLiKY82QF1T8mhNfTTlLlGr7usY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:a1:f9:37:65:d1:2a:75:ba:7e:e1:f9:3d:3f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Validity
Not Before: Jun 7 14:00:44 2025 GMT
Not After : Jun 8 14:00:44 2025 GMT
Subject: CN=997f264e32656b74476c2a238eb430a624fa8347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:1c:27:c1:cf:a7:e1:a4:95:82:e5:08:b6:
3e:11:51:e6:70:23:6b:4b:6e:cd:3d:46:06:9c:d5:
42:e9:42:45:e4:2a:df:89:53:35:2b:d9:39:cb:ce:
c1:42:ca:f3:e2:d3:0a:7e:6d:5f:eb:f3:21:45:21:
33:20:27:6d:81:fa:17:84:4d:70:b0:49:7f:04:cd:
ff:50:40:64:19:7e:94:e9:4a:2b:68:a4:27:07:c4:
fe:5f:70:36:bd:3e:41:e5:79:7e:fb:6d:ba:86:64:
bb:d1:66:85:31:5b:ab:0b:d5:0c:86:30:82:ea:4e:
8b:be:f8:84:ea:eb:6a:34:50:50:8b:78:ac:d6:2d:
7e:02:f1:a4:89:24:f7:8f:54:66:82:15:c1:1a:b8:
b8:50:ad:d4:ae:a9:14:f2:8b:d0:24:93:e5:9a:79:
4e:a6:d2:49:15:05:84:22:45:2d:94:52:45:be:d1:
b9:f8:1a:ec:5f:b2:61:51:97:5c:84:3e:03:78:47:
21:b3:43:c3:87:e1:c7:b4:bb:fb:ce:0b:26:7f:2d:
5a:7b:ae:39:c8:af:e6:05:7e:f3:28:82:40:15:85:
a4:2d:1e:20:00:63:09:84:1b:43:4b:b0:45:39:45:
b4:fd:28:08:7b:bf:71:bf:28:f6:fa:19:f0:c4:fd:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7F:26:4E:32:65:6B:74:47:6C:2A:23:8E:B4:30:A6:24:FA:83:47
X509v3 Authority Key Identifier:
keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:6c:40:14:2c:b7:5d:20:30:07:80:36:58:89:ac:c6:9c:18:
11:b0:5d:51:b6:3a:39:a7:1e:90:ea:cd:25:7e:25:52:1c:89:
85:e3:00:a9:36:12:9c:31:cc:00:21:0b:ac:26:da:4d:4d:76:
7e:29:98:03:8a:e2:00:d6:38:d2:07:e7:49:10:f0:87:8e:da:
7d:64:42:00:1e:d1:8b:45:33:2a:8c:91:3a:35:b9:ab:f3:6d:
b2:63:d8:42:9a:7d:44:9b:9b:83:d4:83:a8:31:d2:01:07:2e:
56:fe:9e:c2:35:8d:f3:fd:92:3d:b4:7e:e9:79:b5:86:22:91:
85:39:55:3f:a0:79:27:b3:ac:3c:a6:61:69:94:7b:7f:52:04:
4c:6f:5c:6c:4f:b7:26:51:17:e0:82:54:e9:15:b2:99:0a:2b:
2e:18:9f:be:3f:40:e6:58:41:26:df:93:9a:f5:90:14:a2:17:
1c:12:4b:15:19:84:2f:37:89:f0:04:c7:d3:a7:8d:63:31:06:
41:89:f7:d7:8a:1b:46:3c:9d:05:fd:4a:03:26:9d:25:57:72:
9f:d1:57:99:87:70:2d:53:5c:e8:2b:9f:24:e4:9b:bb:e9:5d:
75:51:b6:a1:a3:d3:d6:fa:30:e4:0a:af:3a:28:56:df:8e:2b:
c2:77:9a:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsaH5N2XRKnW6fuH5PT/cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNjBhZTRiZGQ5ZDZlZmJhNmVhMTFjNjA3MzdjYmEwMmRj
ZjFlNjAwHhcNMjUwNjA3MTQwMDQ0WhcNMjUwNjA4MTQwMDQ0WjAzMTEwLwYDVQQD
Eyg5OTdmMjY0ZTMyNjU2Yjc0NDc2YzJhMjM4ZWI0MzBhNjI0ZmE4MzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C4cJ8HPp+GklYLlCLY+EVHmcCNr
S27NPUYGnNVC6UJF5CrfiVM1K9k5y87BQsrz4tMKfm1f6/MhRSEzICdtgfoXhE1w
sEl/BM3/UEBkGX6U6UoraKQnB8T+X3A2vT5B5Xl++226hmS70WaFMVurC9UMhjCC
6k6LvviE6utqNFBQi3is1i1+AvGkiST3j1RmghXBGri4UK3UrqkU8ovQJJPlmnlO
ptJJFQWEIkUtlFJFvtG5+BrsX7JhUZdchD4DeEchs0PDh+HHtLv7zgsmfy1ae645
yK/mBX7zKIJAFYWkLR4gAGMJhBtDS7BFOUW0/SgIe79xvyj2+hnwxP0kmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJl/Jk4yZWt0R2wqI460MKYk+oNHMB8GA1UdIwQY
MBaAFJpgrkvdnW77puoRxgc3y6Atzx5gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbW1DdVM5MmRidnVtNmhIR0J6ZkxvQzNQSG1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wNjE2ZTAtOWNiYi00MzBhLTgyNDQt
ZWRjYzUyZTE3YTk0LzEvbW1DdVM5MmRidnVtNmhIR0J6ZkxvQzNQSG1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8wNjE2ZTAtOWNiYi00MzBhLTgyNDQtZWRjYzUyZTE3YTk0
LzEvbW1DdVM5MmRidnVtNmhIR0J6ZkxvQzNQSG1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2xAFCy3
XSAwB4A2WImsxpwYEbBdUbY6OacekOrNJX4lUhyJheMAqTYSnDHMACELrCbaTU12
fimYA4riANY40gfnSRDwh47afWRCAB7Ri0UzKoyROjW5q/NtsmPYQpp9RJubg9SD
qDHSAQcuVv6ewjWN8/2SPbR+6Xm1hiKRhTlVP6B5J7OsPKZhaZR7f1IETG9cbE+3
JlEX4IJU6RWymQorLhifvj9A5lhBJt+TmvWQFKIXHBJLFRmELzeJ8ATH06eNYzEG
QYn314obRjydBf1KAyadJVdyn9FXmYdwLVNc6CufJOSbu+lddVG2oaPT1vow5Aqv
OihW344rwneaIQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:49 2025 by rpki-client