Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: JKg/Cdfu5A0kuHsbqJz8OcG7auwa507x3nb+njzc9Ec=
Subject key identifier: 8F:11:04:26:F3:C5:BD:26:0D:66:85:02:B9:8B:C3:84:DC:B4:BC:D0
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 01987CE59D3E7717713C19283815140834C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 0C49
Signing time: Wed 06 Aug 2025 01:01:19 +0000
Manifest this update: Wed 06 Aug 2025 01:01:19 +0000
Manifest next update: Thu 07 Aug 2025 01:01:19 +0000
Files and hashes: 1: bm8ink1EnYeZoE7eF0O4NwMqDE8.roa (hash: ybm88hkKSlN5zUNNYgkBe2I5P6bnL+MMj8/tMIJfo60=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: iSQpwtTM6EY4dmt2FZqEf4c+OEtE3akPuyorvWHRti8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:9d:3e:77:17:71:3c:19:28:38:15:14:08:34:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Aug 6 01:01:19 2025 GMT
Not After : Aug 7 01:01:19 2025 GMT
Subject: CN=8f110426f3c5bd260d668502b98bc384dcb4bcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:13:a9:2c:28:8c:39:65:55:15:ca:f0:7e:f7:
6a:2a:fe:1a:a1:7d:36:76:88:8b:b1:3f:35:04:06:
21:23:7e:c2:94:af:86:3b:d9:27:e2:e9:71:d1:14:
39:f5:b3:6e:88:35:12:8e:a1:56:f1:22:06:09:81:
3a:94:c4:e3:e3:9c:80:f6:3e:70:87:79:a3:e8:bc:
bf:92:5e:a0:7c:bb:8a:10:71:11:c6:e8:93:8b:55:
77:db:b1:0a:4a:d9:d3:3f:8e:02:1c:15:19:d5:7e:
49:db:dd:c6:2d:9c:bb:97:87:70:ba:ed:29:34:7f:
0c:5a:6d:27:ae:b9:6b:1d:22:c8:cb:cc:fe:d9:6e:
77:25:50:d7:ee:0c:aa:6d:f8:6d:cc:80:ad:89:d5:
cf:b8:73:cf:3b:d2:1c:c2:7f:55:ed:81:b7:fc:8a:
02:4c:a5:b8:f7:bc:55:76:f8:85:26:67:8d:e4:1e:
b6:bb:bb:fa:e8:3b:18:14:10:29:53:73:f7:08:36:
37:08:11:d9:29:2a:ea:22:c0:a4:61:a5:4f:86:22:
5f:18:0e:06:69:ee:cf:ee:10:8e:44:13:dc:6f:73:
d0:0c:79:1a:b5:4d:d5:88:61:c7:1f:91:fb:10:b3:
da:1e:7f:03:61:79:0c:f1:2b:a6:0d:d7:35:88:c2:
6a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:11:04:26:F3:C5:BD:26:0D:66:85:02:B9:8B:C3:84:DC:B4:BC:D0
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6c:78:6e:21:e2:19:46:5e:eb:27:b7:e9:d6:9a:6a:12:1e:
a8:ce:7c:73:d0:79:01:6f:a9:18:be:0f:8f:b6:7a:63:6d:38:
64:9e:4b:f3:b1:dd:1e:48:d8:7b:fc:8d:db:d8:bf:4c:6c:a8:
85:f3:d9:f2:cd:40:73:37:c3:d9:b8:d0:5c:da:90:bf:6c:dc:
35:7f:92:20:cc:c1:dd:27:fd:16:07:2d:1e:7b:27:03:81:ce:
48:33:17:7a:32:49:53:76:02:12:6a:27:25:69:88:a8:92:4e:
58:f2:c9:0a:9d:27:63:1e:27:07:46:d6:40:23:4a:a1:c6:27:
1b:33:fe:ff:9d:f4:44:2d:04:3e:91:ce:ef:d2:8e:4a:ca:ea:
d2:9c:54:a4:4d:5f:99:63:50:3d:52:5d:ad:e0:5c:9f:cb:b2:
a7:5b:d4:60:5e:2e:2a:d2:94:4a:0e:d7:7e:62:21:0a:71:49:
70:02:4f:49:de:a7:4d:b7:2d:72:4e:7d:06:07:fd:fa:76:3f:
7d:1e:5b:15:cf:e8:8a:93:a9:10:e0:4d:bd:bf:c5:e7:0c:2c:
d7:1d:2d:da:34:0c:07:00:3c:84:6b:e6:6b:9d:6f:a0:5c:fd:
ea:90:c6:6e:9b:fe:af:90:87:8f:ba:a0:ea:12:63:d0:e9:e7:
59:b0:4a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:17:31 2025 by rpki-client