Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
File: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft (raw, json)
Hash identifier: ednWxIYYwTr5oSlouk6gNsUddd8f29AwE7+N2dH6d6U=
Subject key identifier: 0B:FD:FB:1D:5A:99:46:5E:92:32:52:EB:4A:E8:5D:36:1D:24:D0:64
Authority key identifier: 9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
Certificate issuer: /CN=9ab33743a654906143399f903704801682638e7c
Certificate serial: 019A4D3D573DEC5CCE15CFEF898FA36D2133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
Manifest number: 06FF
Signing time: Tue 04 Nov 2025 05:00:56 +0000
Manifest this update: Tue 04 Nov 2025 05:00:56 +0000
Manifest next update: Wed 05 Nov 2025 05:00:56 +0000
Files and hashes: 1: 3VmfP8KA-NBUgCmN_EBLD_bkrJM.roa (hash: zeljN5weUyK9rltGdxQOysVkNhdNKTjMQQFNwn07hgw=)
2: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl (hash: o9EEf/k2mLqjIr16c5uorC2fwMrEJzaNuuyfNY3jsTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:57:3d:ec:5c:ce:15:cf:ef:89:8f:a3:6d:21:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab33743a654906143399f903704801682638e7c
Validity
Not Before: Nov 4 05:00:56 2025 GMT
Not After : Nov 5 05:00:56 2025 GMT
Subject: CN=0bfdfb1d5a99465e923252eb4ae85d361d24d064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:fe:45:c3:e1:33:a5:bb:6c:94:c6:08:d7:
f0:1b:6a:c0:33:74:8f:fa:4a:b6:96:16:01:27:72:
8d:59:9a:f2:e4:b8:31:8b:1b:b7:90:a4:6d:9e:2f:
d0:5a:61:00:dc:28:eb:32:c1:b3:c9:ee:ef:fb:9e:
b2:34:94:1d:27:25:bd:d0:c9:85:e8:aa:7f:8f:22:
60:9a:ee:b0:89:7b:b1:0c:39:5c:74:12:c1:15:4a:
96:a4:89:29:a3:f4:98:69:54:06:7d:5c:c0:91:26:
b8:cc:75:ce:a2:ba:67:9d:cc:41:bd:b0:3d:c3:16:
71:9d:55:61:60:a1:e4:c4:85:8c:98:d6:db:35:f7:
c0:7a:85:88:7a:b2:f2:38:91:17:96:ec:fe:9c:b9:
ca:79:01:a4:49:65:86:dc:92:b9:90:98:be:0a:f6:
20:72:15:e1:bc:c1:ba:24:a5:f9:1e:86:d9:4d:58:
6d:1a:63:62:36:11:f7:2e:a4:91:e0:83:35:72:a1:
b2:13:7e:de:55:e1:7d:25:29:38:20:6a:4c:8b:a6:
ba:1e:43:c4:1e:e8:ce:d4:65:1d:ef:16:f2:eb:b2:
b4:53:26:e0:a8:8c:ee:e3:b1:0f:ee:d9:5a:1d:40:
ad:3e:15:1d:a3:76:8d:b6:07:59:98:50:37:64:15:
3b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:FD:FB:1D:5A:99:46:5E:92:32:52:EB:4A:E8:5D:36:1D:24:D0:64
X509v3 Authority Key Identifier:
keyid:9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8c:0b:b0:ff:0e:09:e1:14:ab:85:76:02:5e:58:68:5e:14:
0f:49:15:2e:db:29:45:96:09:f3:19:28:cd:b6:31:a8:f4:b6:
9d:ee:09:13:b9:e3:31:a3:de:b4:6e:8d:25:14:a6:40:b7:0d:
b3:e6:60:d8:8f:93:16:0b:fd:b6:0e:dd:3b:e3:ef:fb:2e:cf:
ff:bb:0c:c6:ac:e2:97:57:fc:d4:9d:fd:1f:19:05:95:c1:ae:
49:70:f7:83:97:0d:72:2c:2f:47:b8:da:37:15:3c:4a:cf:37:
b4:4c:6b:27:8e:27:10:11:1b:b0:55:f5:79:f1:fd:79:ea:7c:
fc:85:31:ce:35:1d:18:34:53:55:d6:20:38:d7:93:98:c6:64:
17:cd:e4:ab:b6:f5:5d:7c:09:9a:5a:7d:b1:cb:54:1e:bf:57:
fb:ac:34:a1:3e:93:6c:74:4d:a6:a3:83:8d:df:23:2e:41:1b:
58:41:76:4f:4b:15:ca:3c:3f:a4:70:c3:61:b4:28:7b:00:75:
79:4f:2c:fb:f1:a7:ba:9c:cd:fb:df:82:28:6a:3d:9a:8a:a1:
12:39:9a:39:01:4f:98:80:5d:29:ec:c1:9b:f6:83:b7:b6:47:
a9:ea:6d:64:33:2c:a6:c5:97:66:aa:b4:eb:4d:68:ab:1e:ef:
f1:94:7c:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPVc97FzOFc/viY+jbSEzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjMzNzQzYTY1NDkwNjE0MzM5OWY5MDM3MDQ4MDE2ODI2
MzhlN2MwHhcNMjUxMTA0MDUwMDU2WhcNMjUxMTA1MDUwMDU2WjAzMTEwLwYDVQQD
EygwYmZkZmIxZDVhOTk0NjVlOTIzMjUyZWI0YWU4NWQzNjFkMjRkMDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6z+RcPhM6W7bJTGCNfwG2rAM3SP
+kq2lhYBJ3KNWZry5Lgxixu3kKRtni/QWmEA3CjrMsGzye7v+56yNJQdJyW90MmF
6Kp/jyJgmu6wiXuxDDlcdBLBFUqWpIkpo/SYaVQGfVzAkSa4zHXOorpnncxBvbA9
wxZxnVVhYKHkxIWMmNbbNffAeoWIerLyOJEXluz+nLnKeQGkSWWG3JK5kJi+CvYg
chXhvMG6JKX5HobZTVhtGmNiNhH3LqSR4IM1cqGyE37eVeF9JSk4IGpMi6a6HkPE
HujO1GUd7xby67K0UybgqIzu47EP7tlaHUCtPhUdo3aNtgdZmFA3ZBU75QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAv9+x1amUZekjJS60roXTYdJNBkMB8GA1UdIwQY
MBaAFJqzN0OmVJBhQzmfkDcEgBaCY458MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJNM1E2WlVrR0ZET1otUU53U0FGb0pqam53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9iNjc5NDQtNjM4OS00MTA4LTg2Mjgt
ZDhmOTM1MzZhZjYzLzEvbXJNM1E2WlVrR0ZET1otUU53U0FGb0pqam53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9iNjc5NDQtNjM4OS00MTA4LTg2MjgtZDhmOTM1MzZhZjYz
LzEvbXJNM1E2WlVrR0ZET1otUU53U0FGb0pqam53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYwLsP8O
CeEUq4V2Al5YaF4UD0kVLtspRZYJ8xkozbYxqPS2ne4JE7njMaPetG6NJRSmQLcN
s+Zg2I+TFgv9tg7dO+Pv+y7P/7sMxqzil1f81J39HxkFlcGuSXD3g5cNciwvR7ja
NxU8Ss83tExrJ44nEBEbsFX1efH9eep8/IUxzjUdGDRTVdYgONeTmMZkF83kq7b1
XXwJmlp9sctUHr9X+6w0oT6TbHRNpqODjd8jLkEbWEF2T0sVyjw/pHDDYbQoewB1
eU8s+/GnupzN+9+CKGo9moqhEjmaOQFPmIBdKezBm/aDt7ZHqeptZDMspsWXZqq0
601oqx7v8ZR8+g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:54:58 2025 by rpki-client