Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
File: mmCuS92dbvum6hHGBzfLoC3PHmA.mft (raw, json)
Hash identifier: A75PZWuGlbpHhNWx6nW84ns7Mxs4BYy7WvcL9U/U0tg=
Subject key identifier: EF:6A:04:1C:16:E2:13:A7:41:23:18:28:A0:29:60:11:DA:22:12:02
Authority key identifier: 9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
Certificate issuer: /CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Certificate serial: 019921E8014C0BA73E9D06A160B7B7F5309A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
Manifest number: 0935
Signing time: Sun 07 Sep 2025 02:01:16 +0000
Manifest this update: Sun 07 Sep 2025 02:01:16 +0000
Manifest next update: Mon 08 Sep 2025 02:01:16 +0000
Files and hashes: 1: mmCuS92dbvum6hHGBzfLoC3PHmA.crl (hash: 8AaBgGN0Assv4pFlVHmGV/KMbLrQCJbux8fBwRawaew=)
2: u1q93eogqq8ewSFI28D24ujX7vQ.roa (hash: pvm3GrE3J/VbhZBCkLiKY82QF1T8mhNfTTlLlGr7usY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e8:01:4c:0b:a7:3e:9d:06:a1:60:b7:b7:f5:30:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a60ae4bdd9d6efba6ea11c60737cba02dcf1e60
Validity
Not Before: Sep 7 02:01:16 2025 GMT
Not After : Sep 8 02:01:16 2025 GMT
Subject: CN=ef6a041c16e213a741231828a0296011da221202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e7:9d:96:bc:6c:5b:6d:4e:ff:61:d8:32:53:
b9:21:71:8b:31:68:5a:1d:38:34:6d:29:83:95:8c:
79:58:92:09:c1:7f:58:2b:82:c8:01:dc:14:bd:b1:
0d:33:6b:f3:2e:37:04:42:c9:4c:ca:34:cf:f8:a1:
a6:5b:aa:95:bc:37:5d:7b:d9:f5:74:12:34:b1:30:
b8:65:6b:ff:a5:26:8d:c8:7c:38:a2:ea:55:c0:eb:
89:20:7b:a6:00:84:07:78:0a:ff:94:f8:33:ea:fa:
b8:fc:bf:2a:ef:35:f1:b1:3a:cb:24:cb:94:ef:90:
25:24:84:03:9e:6b:12:2b:45:54:3d:15:0f:c3:85:
6b:12:38:9a:a0:b3:be:3b:77:23:4e:d9:ea:64:9e:
bc:ea:3b:5a:f2:83:89:98:81:fa:c8:95:19:95:5b:
48:82:ff:26:a9:a9:0b:57:96:32:d7:33:3f:88:e1:
4b:a6:d2:5e:f2:21:89:5a:de:5c:09:0d:2b:95:25:
4c:7b:a9:28:1b:7f:19:27:c8:71:5a:4a:7b:a6:b7:
5b:a4:f3:7c:7d:5b:84:c4:e0:95:66:b1:ce:1b:0f:
14:4e:e9:3b:dd:8f:c0:a0:c0:93:01:d0:44:97:99:
3a:8e:6d:ae:30:2d:4e:eb:f8:b9:94:25:a1:69:db:
99:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6A:04:1C:16:E2:13:A7:41:23:18:28:A0:29:60:11:DA:22:12:02
X509v3 Authority Key Identifier:
keyid:9A:60:AE:4B:DD:9D:6E:FB:A6:EA:11:C6:07:37:CB:A0:2D:CF:1E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmCuS92dbvum6hHGBzfLoC3PHmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0616e0-9cbb-430a-8244-edcc52e17a94/1/mmCuS92dbvum6hHGBzfLoC3PHmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:41:a0:9b:3e:b2:d0:7c:d6:a9:0d:c1:22:31:5a:03:35:43:
bb:12:b0:ba:d8:65:46:d4:2f:63:a2:aa:65:e0:83:2b:45:4f:
7e:64:b2:2c:f1:77:61:01:12:79:ea:31:b9:7d:02:44:e7:4d:
eb:e6:86:a6:fa:14:64:c7:eb:3e:b0:76:75:c9:69:64:6c:82:
46:a4:a0:86:6d:31:8a:d0:81:e3:cd:8e:f1:f9:13:d4:58:13:
63:87:63:d5:37:6e:a5:5f:9c:fd:1e:f2:0b:77:8e:9c:4f:cc:
67:5d:6e:17:44:11:87:8f:3b:16:a8:21:d9:1d:e5:80:d3:9d:
3a:6e:01:da:c6:4e:ad:84:39:be:77:d6:28:42:06:1d:c3:1b:
0f:bf:c3:20:a1:aa:fb:03:d1:9c:a1:09:cb:c2:d0:6a:64:0a:
e0:b1:28:16:42:68:49:e4:7b:41:23:fb:d5:56:9d:ea:07:3d:
59:60:5b:ff:74:d4:a8:32:3c:4b:be:38:7d:7e:f8:7e:8a:8e:
fd:c8:93:e8:88:d5:3b:0e:df:ec:0a:0c:cd:48:81:eb:de:45:
9b:2f:b4:64:ab:35:d6:b8:79:59:c6:a8:8b:bc:a9:a5:98:76:
ca:ef:a9:38:94:b8:28:23:fe:38:4a:96:72:b9:42:34:3f:59:
cf:20:e8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:58 2025 by rpki-client