Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
File: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft (raw, json)
Hash identifier: 5zlkmUOcFaspbRD3fHxu18ilpIvsrN29sObwL8/F5IA=
Subject key identifier: 03:AD:42:7F:E1:34:E5:31:2C:B6:9C:B5:0A:17:E0:DA:AC:03:2B:B4
Authority key identifier: 9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
Certificate issuer: /CN=9ab33743a654906143399f903704801682638e7c
Certificate serial: 019881D55EE38DEBF65D9B9710A7CBAD4EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
Manifest number: 0611
Signing time: Thu 07 Aug 2025 00:01:40 +0000
Manifest this update: Thu 07 Aug 2025 00:01:40 +0000
Manifest next update: Fri 08 Aug 2025 00:01:40 +0000
Files and hashes: 1: 3VmfP8KA-NBUgCmN_EBLD_bkrJM.roa (hash: zeljN5weUyK9rltGdxQOysVkNhdNKTjMQQFNwn07hgw=)
2: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl (hash: mbSJZ6W9AmbLyvrGCxT+Svrq2wzCX3qbC9w7T8mwhBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:5e:e3:8d:eb:f6:5d:9b:97:10:a7:cb:ad:4e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab33743a654906143399f903704801682638e7c
Validity
Not Before: Aug 7 00:01:40 2025 GMT
Not After : Aug 8 00:01:40 2025 GMT
Subject: CN=03ad427fe134e5312cb69cb50a17e0daac032bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:ae:5a:2a:73:cc:5b:6c:b7:b4:f3:4d:64:
4e:6d:b1:64:43:d6:32:f0:0e:ea:cc:71:0c:05:66:
70:a5:83:f3:76:58:e0:f1:9c:9e:71:26:8b:ed:d4:
53:a4:0a:e2:47:50:5e:2f:81:4f:84:bc:97:0e:8d:
1a:2c:23:65:55:50:2a:97:c4:52:86:76:e6:2c:11:
83:ba:69:aa:e0:ee:b7:ef:2f:56:6a:f4:18:c7:13:
c9:41:32:9c:e1:29:ad:77:c5:24:19:74:3e:e8:15:
dd:d8:e4:56:69:ba:63:0c:1d:12:13:42:8b:b9:e6:
2c:fe:8d:ca:fd:42:90:6f:7d:c9:79:cb:80:00:7b:
e5:4b:41:cf:20:3c:a2:61:71:e8:3d:0d:24:36:da:
ba:45:1e:38:3a:1c:28:3b:29:2a:6d:78:f2:94:05:
c3:fe:f7:b5:6a:ee:91:79:22:8b:e0:25:6e:3b:ec:
89:8d:13:30:39:d8:97:27:6a:24:37:f0:71:5a:1d:
dc:58:cf:30:e5:aa:d6:e4:3e:6f:e2:45:43:3f:f7:
16:04:13:bc:98:cb:bc:28:0c:e4:ed:3c:7a:87:f6:
09:73:48:30:ba:ff:7a:2a:dc:35:f6:27:61:3a:32:
98:1e:e3:f9:f1:95:17:a0:b4:a9:ad:ee:70:ae:e8:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AD:42:7F:E1:34:E5:31:2C:B6:9C:B5:0A:17:E0:DA:AC:03:2B:B4
X509v3 Authority Key Identifier:
keyid:9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:87:a5:8b:79:80:75:97:c1:bf:3c:20:58:2f:8b:97:a8:4c:
63:fb:11:f4:a9:77:e8:01:00:fa:dd:e5:ff:ce:7d:0a:04:b4:
98:19:b2:55:ce:05:24:a0:68:e0:af:f7:55:2f:c3:48:51:a6:
af:25:ce:eb:78:b8:31:59:99:ea:5c:af:f5:fa:6e:6e:22:f5:
f6:68:43:0e:47:22:da:b8:90:2b:27:34:12:6f:41:99:08:ee:
6d:68:60:6c:74:91:60:33:d8:97:22:c3:58:40:2f:14:fe:79:
71:77:b3:bb:04:03:82:4b:b9:7e:93:f2:8b:1d:33:a3:97:36:
58:49:9c:a7:7a:e2:b4:1c:7e:2b:37:f4:02:b0:01:0c:42:b0:
9a:52:9e:4e:aa:e3:83:6e:36:4c:75:32:1b:29:fe:b8:d7:58:
68:f0:92:21:bf:c0:94:63:3c:81:c8:b9:a5:db:4a:6a:43:3e:
50:d0:7c:cb:88:75:a0:65:55:1e:fe:9b:70:81:62:2a:97:79:
b1:e3:0f:4c:0f:c3:b5:cc:13:dc:7e:05:7f:22:80:b2:d4:d3:
6c:31:11:48:7f:0f:77:bc:54:cd:08:8a:db:c3:40:fa:5a:73:
ad:79:66:61:cd:0c:37:de:94:9b:f1:65:5f:73:b1:84:72:16:
13:f8:6f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:01:14 2025 by rpki-client