Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
File: mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft (raw, json)
Hash identifier: rbahC0Pg85UkjLbNC4gmmDkQuQ+CNqrGUciNscquS5g=
Subject key identifier: A6:C1:4B:E7:BE:76:48:ED:75:F2:2A:65:33:96:1C:33:98:73:F9:50
Authority key identifier: 9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
Certificate issuer: /CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Certificate serial: 019922FAFF854BC5C020DB8EC25FFA8C1993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
Manifest number: 0C9F
Signing time: Sun 07 Sep 2025 07:01:38 +0000
Manifest this update: Sun 07 Sep 2025 07:01:38 +0000
Manifest next update: Mon 08 Sep 2025 07:01:38 +0000
Files and hashes: 1: bm8ink1EnYeZoE7eF0O4NwMqDE8.roa (hash: ybm88hkKSlN5zUNNYgkBe2I5P6bnL+MMj8/tMIJfo60=)
2: mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl (hash: ibU8Yw8xlaTNO8iTUEMrbQNDfWsHcqPcuhcPxigwa4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:ff:85:4b:c5:c0:20:db:8e:c2:5f:fa:8c:19:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab6e9b933bd0cc90c5992446f8ac84726916b1a
Validity
Not Before: Sep 7 07:01:38 2025 GMT
Not After : Sep 8 07:01:38 2025 GMT
Subject: CN=a6c14be7be7648ed75f22a6533961c339873f950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:11:42:f8:1b:68:85:58:c6:ae:57:91:8f:24:
6f:3c:02:93:be:f6:f3:40:a0:49:5a:a1:f8:29:c3:
26:b8:07:1a:f7:2d:fd:e5:00:11:93:7c:77:f6:85:
19:74:26:73:d5:87:d9:13:e5:cf:13:02:c3:9e:bb:
2c:59:db:36:1c:08:9c:fd:ec:43:4e:7b:2b:51:3b:
1b:a7:96:cd:3e:1b:97:21:82:ae:86:27:9d:13:eb:
c6:46:03:c3:b7:88:05:3e:79:52:a2:31:35:c0:24:
13:93:21:52:c4:86:28:98:3a:76:64:a5:e3:46:80:
39:89:5f:09:0c:6f:88:e4:45:de:01:3f:69:19:8f:
a5:8c:5f:bd:05:5f:73:11:72:7e:3e:e9:26:da:b7:
d7:f4:66:44:31:58:57:02:7b:68:f6:00:74:ed:24:
2b:1d:57:2c:55:0f:61:31:19:93:2b:19:14:aa:09:
4a:cd:ad:1b:d2:82:c5:ee:0a:d4:59:89:27:d5:4a:
7e:3f:6e:fc:08:d3:49:67:b6:13:f4:ec:a2:2b:34:
99:77:33:58:c5:f3:bd:49:5c:81:fe:00:6d:09:af:
b3:af:6f:85:c1:5d:8b:0c:a8:e6:0f:73:3d:c0:ed:
8a:c7:31:76:81:0d:cb:5e:ac:3a:da:23:0d:fa:4a:
b1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C1:4B:E7:BE:76:48:ED:75:F2:2A:65:33:96:1C:33:98:73:F9:50
X509v3 Authority Key Identifier:
keyid:9A:B6:E9:B9:33:BD:0C:C9:0C:59:92:44:6F:8A:C8:47:26:91:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrbpuTO9DMkMWZJEb4rIRyaRaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a4447c-4cf2-41ca-8851-41ace195803a/1/mrbpuTO9DMkMWZJEb4rIRyaRaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:75:e8:e9:66:b3:29:a5:c1:fd:7f:1f:87:e1:2f:06:4d:b1:
a8:11:e0:9c:32:6f:73:a9:d9:ab:a9:60:e4:ec:5a:d9:fc:cb:
17:a5:c0:62:2f:9e:28:e5:e5:97:65:04:e3:41:f0:a4:d3:f5:
6f:a0:ce:6b:3f:2d:c3:c9:22:ff:9c:2c:75:66:04:7d:3d:8a:
77:c7:06:44:e4:6c:3d:82:4c:38:53:c3:ed:0b:ad:9c:2b:76:
c8:d8:15:33:ca:7a:c3:ce:e6:76:64:b4:98:d7:a8:d7:de:96:
04:3d:bb:d2:3c:5c:e5:96:47:4c:e2:70:b1:4d:76:93:99:78:
80:bf:bd:d4:d2:d7:bd:71:65:19:bb:85:84:58:e7:6a:c8:c4:
83:e6:b5:4c:eb:70:6e:2f:38:56:a0:c2:e8:21:f8:9e:30:31:
e4:40:a2:c7:de:38:4a:fc:74:2f:a4:98:46:f6:a3:d3:e2:80:
78:a7:9c:0d:7b:15:bf:63:4a:d5:7d:2d:3c:cf:2a:e5:f4:89:
c7:43:11:2a:20:cb:e7:34:c6:42:ee:ec:c0:c0:3b:b8:7b:7d:
83:64:b0:3e:bf:3d:91:d0:55:23:bc:fa:e9:de:fd:56:03:3c:
a1:d0:76:4d:8b:ab:7b:83:d4:ab:8c:a7:14:20:d3:fa:26:be:
44:da:95:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:04 2025 by rpki-client