Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
File: Cmmzmwjz9izj4IO7yK7s6txJi2k.mft (raw, json)
Hash identifier: +vhIKOF6DUOpEfBIq9RqUPcSRct0OIsEsytf9uhJKgw=
Subject key identifier: FC:C1:16:9F:E6:B8:8E:7D:D7:19:45:A1:85:52:D0:00:5A:D8:DF:F5
Authority key identifier: 0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
Certificate issuer: /CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Certificate serial: 0199E6AD8A2188835D5F29B8AF0FCA249D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
Manifest number: 04D1
Signing time: Wed 15 Oct 2025 07:02:36 +0000
Manifest this update: Wed 15 Oct 2025 07:02:36 +0000
Manifest next update: Thu 16 Oct 2025 07:02:36 +0000
Files and hashes: 1: Cmmzmwjz9izj4IO7yK7s6txJi2k.crl (hash: wkxiEuNSdkYP89F/8APACDqlPR3vBNO2BXbn9M4ESvc=)
2: sRNeT65rt6woLISuiM8vg1rgfeg.roa (hash: U0++MMBJLtG7d5c7Me3am120THV8UBDE/53t4i8cpqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Oct 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:ad:8a:21:88:83:5d:5f:29:b8:af:0f:ca:24:9d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a69b39b08f3f62ce3e083bbc8aeeceadc498b69
Validity
Not Before: Oct 15 07:02:36 2025 GMT
Not After : Oct 16 07:02:36 2025 GMT
Subject: CN=fcc1169fe6b88e7dd71945a18552d0005ad8dff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0b:04:4e:c2:1c:ba:f9:d2:12:5c:d4:07:96:
27:07:c0:8f:39:f0:aa:59:fc:63:b0:36:79:7e:3e:
1b:77:36:1e:9e:ff:84:54:c5:71:9b:1f:62:4f:db:
92:23:f9:13:51:41:37:64:d3:eb:0f:de:1a:4c:89:
ee:c7:aa:3a:f2:8f:f5:94:45:1b:0b:5b:ad:99:8f:
fd:a3:39:9f:04:9f:d5:98:ae:bb:a6:5b:17:b8:63:
95:d9:65:63:62:9e:70:52:1d:04:88:52:03:cf:a1:
94:6b:6e:91:bd:14:9a:33:64:fa:e5:82:a3:fc:ec:
ea:9f:8a:17:76:e8:02:5c:1c:99:2d:e0:16:15:d2:
22:dd:36:c7:1c:02:bd:e1:2d:bd:a2:2f:4b:0f:3e:
4d:c5:a2:62:6c:a3:26:49:52:5f:4a:68:04:d1:0a:
c6:d0:dd:10:1b:71:e9:e2:73:ab:fe:89:fd:61:dc:
e0:c5:5c:76:31:e1:c0:3b:73:e4:03:d8:ab:51:d4:
71:91:4f:78:2b:65:33:c5:1d:70:f8:81:f9:8f:5d:
1a:f7:82:59:8b:6f:98:9c:10:a5:b7:3a:bb:5f:44:
fc:b0:fc:c5:77:c7:88:5c:b1:d2:80:09:94:d5:4f:
ef:5e:3a:e9:b8:8b:9b:58:74:51:76:a4:20:98:8a:
e8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C1:16:9F:E6:B8:8E:7D:D7:19:45:A1:85:52:D0:00:5A:D8:DF:F5
X509v3 Authority Key Identifier:
keyid:0A:69:B3:9B:08:F3:F6:2C:E3:E0:83:BB:C8:AE:EC:EA:DC:49:8B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cmmzmwjz9izj4IO7yK7s6txJi2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/2f3245-2b36-4cf5-9e60-c09afa00cb84/1/Cmmzmwjz9izj4IO7yK7s6txJi2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:00:d0:a3:09:1c:c1:4f:b1:e4:09:f0:c5:16:1a:75:9e:ad:
6f:51:fb:7b:e9:d3:3e:7d:b3:de:0d:5f:a8:88:22:4e:a9:78:
72:8b:82:ec:e9:09:86:d1:41:9f:0a:a7:33:08:40:ef:ff:54:
7a:11:76:f5:65:80:45:0c:48:22:0a:50:1d:70:27:3d:3c:30:
55:f8:e8:1e:b1:4c:5e:85:e2:04:b7:2c:53:8b:74:e3:7b:24:
83:b0:c2:30:1c:d8:32:a2:77:4b:c6:8a:d5:a8:8f:27:c9:e1:
93:63:41:ba:86:86:bf:e4:fa:54:38:88:28:cc:e5:67:e9:d1:
80:fd:64:ec:c4:53:cd:b1:46:3e:2b:d6:05:ac:04:a3:39:66:
ff:56:5e:10:db:65:40:d8:5e:d5:f6:99:2b:da:9b:8d:25:2e:
7f:d8:d9:60:a8:79:b1:c5:f6:71:8b:29:85:42:cd:21:c5:5a:
de:af:9c:b7:8b:18:0e:74:19:52:ca:b8:31:c3:39:98:51:72:
2a:3c:f4:68:52:b9:52:a0:1c:15:f9:7e:47:03:ac:91:96:a9:
6c:87:0e:25:76:10:9e:56:1d:ba:57:a8:41:68:a4:2c:aa:c6:
6d:3a:90:aa:15:7a:05:77:e1:80:ea:a1:0b:d7:d3:e9:74:99:
be:aa:49:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 10:46:47 2025 by rpki-client