Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
File: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft (raw, json)
Hash identifier: UDN2yH8lsCmjBRzX29KLZwwlclXrzALVarlTOTYDZoM=
Subject key identifier: 5A:28:61:64:60:C6:AF:F1:84:1F:56:43:1D:57:A0:E2:AB:8D:38:D9
Authority key identifier: 9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
Certificate issuer: /CN=9ab33743a654906143399f903704801682638e7c
Certificate serial: 019834951C64C717FF34FB4D24D8E6DE06EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
Manifest number: 05E9
Signing time: Wed 23 Jul 2025 00:00:43 +0000
Manifest this update: Wed 23 Jul 2025 00:00:43 +0000
Manifest next update: Thu 24 Jul 2025 00:00:43 +0000
Files and hashes: 1: 3VmfP8KA-NBUgCmN_EBLD_bkrJM.roa (hash: zeljN5weUyK9rltGdxQOysVkNhdNKTjMQQFNwn07hgw=)
2: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl (hash: cTM2X7cBs0vuftrVLfExSKqLNiSeuRFi4GhKCiX4+yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 00:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:95:1c:64:c7:17:ff:34:fb:4d:24:d8:e6:de:06:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab33743a654906143399f903704801682638e7c
Validity
Not Before: Jul 23 00:00:43 2025 GMT
Not After : Jul 24 00:00:43 2025 GMT
Subject: CN=5a28616460c6aff1841f56431d57a0e2ab8d38d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6f:5a:ab:14:fc:7d:d4:bc:d9:fa:a7:88:5e:
7e:a0:70:07:47:65:0d:22:b7:a6:17:cf:22:18:84:
4b:e5:07:03:3e:f3:4e:25:57:1c:1f:c6:58:fd:8a:
52:ab:53:a1:58:d0:4f:c3:5a:a2:28:31:a9:6f:36:
c5:7f:e6:17:e4:13:5f:a8:b8:4e:1e:eb:74:25:7c:
82:64:a7:f0:ab:04:8d:4c:04:6c:9e:0c:4e:1e:82:
96:ca:d5:b9:44:20:7d:09:f9:37:3b:50:ea:b7:08:
2a:a8:37:15:9c:6a:ba:06:1f:c1:69:e6:a2:ed:a5:
56:89:fa:c1:6a:e8:77:a9:f6:d8:2e:7e:df:16:f3:
57:1a:a6:29:be:24:b1:4e:b0:bd:56:d9:8d:f4:c3:
fd:19:3a:cf:37:ab:e6:42:12:74:e6:2a:7c:aa:12:
82:08:e3:f9:5f:79:24:b9:41:db:bd:58:49:7a:dd:
94:bd:6e:b7:2c:3a:31:92:ff:5c:2e:dc:2c:d1:5a:
9d:17:fe:e2:90:c4:f1:39:f0:e5:21:7b:3b:2f:95:
3e:d2:d3:7c:38:50:97:8d:ef:85:a5:8b:95:01:bd:
33:95:e7:bf:9a:76:92:29:1a:1e:ec:0a:98:fc:c6:
52:91:8f:fe:b1:73:f5:84:fe:dc:f9:89:ec:24:3e:
66:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:28:61:64:60:C6:AF:F1:84:1F:56:43:1D:57:A0:E2:AB:8D:38:D9
X509v3 Authority Key Identifier:
keyid:9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c9:f2:a3:3e:0e:3d:77:97:b7:0e:5b:10:4f:cb:6f:0c:16:
80:f5:10:2e:ba:ee:95:87:5f:e1:d6:ba:9d:30:69:79:49:7c:
c8:44:42:f8:b0:d4:0c:25:95:1e:88:15:1e:d0:17:6a:8f:20:
54:22:ee:37:04:5c:5c:24:4d:66:ad:26:0f:3b:37:1d:f0:e3:
5e:48:da:f5:3d:e2:a2:04:12:fe:87:dc:b4:2f:51:6b:e7:77:
b8:1e:cf:2b:86:90:d1:2c:ce:f4:4c:b8:05:b9:5b:78:32:ed:
be:f5:7f:f5:79:0b:2e:75:40:fa:ff:ae:02:f7:c0:51:9d:c4:
a6:40:9a:fd:f9:38:9d:07:1c:f5:1a:a0:e3:ee:59:be:e0:2f:
c1:34:5d:e4:20:e4:aa:ce:a6:d3:44:b2:7b:1d:2f:74:25:33:
3d:5b:b5:29:0e:ca:8c:65:cd:fd:73:df:8e:16:ce:eb:f3:03:
80:84:f9:31:a8:39:c7:5b:cd:79:18:e8:d2:51:bd:61:ed:7c:
d7:8f:8f:15:15:9a:e7:1f:d7:86:01:e7:12:25:c2:10:bd:7b:
6c:d3:c5:0e:58:56:c8:27:5b:6c:c4:b0:98:ae:5b:3c:ab:be:
8d:ec:e5:62:86:65:08:d7:dc:aa:00:2d:4e:de:40:c6:26:21:
94:f7:fd:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 08:06:35 2025 by rpki-client