Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
File: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft (raw, json)
Hash identifier: 8TchHCqFjm1oq8lz5BMekUCNrYwevBoFPH1j4Mv44s0=
Subject key identifier: C1:AE:AA:0B:3D:25:1C:53:2F:51:92:D4:E4:B3:FC:91:57:BA:F3:14
Authority key identifier: 9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
Certificate issuer: /CN=9ab33743a654906143399f903704801682638e7c
Certificate serial: 01992BC66133A0B90FEE3D6BD8166BD9CDE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
Manifest number: 0669
Signing time: Tue 09 Sep 2025 00:00:45 +0000
Manifest this update: Tue 09 Sep 2025 00:00:45 +0000
Manifest next update: Wed 10 Sep 2025 00:00:45 +0000
Files and hashes: 1: 3VmfP8KA-NBUgCmN_EBLD_bkrJM.roa (hash: zeljN5weUyK9rltGdxQOysVkNhdNKTjMQQFNwn07hgw=)
2: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl (hash: 4wy4SEa6cgBY2yk4+jgyhNdBVTyOQ6hfCmbchC02WPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:c6:61:33:a0:b9:0f:ee:3d:6b:d8:16:6b:d9:cd:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab33743a654906143399f903704801682638e7c
Validity
Not Before: Sep 9 00:00:45 2025 GMT
Not After : Sep 10 00:00:45 2025 GMT
Subject: CN=c1aeaa0b3d251c532f5192d4e4b3fc9157baf314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6f:cb:76:ec:8b:fd:d6:78:1e:cd:c6:3f:17:
9b:b7:1a:94:f2:c4:2a:c1:83:fa:1c:94:b2:a0:ea:
4d:10:a5:b5:86:2f:5d:17:9b:af:38:b4:28:0d:19:
29:ce:3b:9f:58:e8:20:f6:84:89:36:7e:6b:14:0e:
aa:a6:ac:63:da:b7:b8:6e:5a:05:cc:3d:aa:3f:e6:
0a:2d:49:19:18:16:2b:f4:e4:c1:d8:d9:b1:bb:7b:
2c:ce:8b:9f:73:c0:44:2b:c7:a4:2a:ae:53:ff:57:
c8:75:63:83:d6:d1:07:e3:41:c8:a3:0d:f4:e8:02:
b5:60:87:bf:4b:e7:de:d0:98:93:e2:d9:3f:73:fd:
9e:35:9a:4f:85:1d:ec:51:f3:f9:1d:7e:d4:88:73:
25:65:70:92:57:87:68:99:ad:6f:81:a2:99:c5:a4:
ae:7c:89:b0:b2:e0:59:5a:7f:a9:36:01:25:5d:14:
62:67:af:d7:ab:a5:12:8e:a1:a5:4b:11:fe:b1:5a:
35:a9:f5:c3:a1:50:43:cb:a1:75:46:c1:66:37:06:
a5:4a:3e:24:fe:44:ed:7c:94:1d:22:66:df:77:c4:
47:52:6f:ad:d5:59:9e:2c:b5:a3:14:53:5f:0f:04:
2d:54:c3:2a:4f:54:88:44:c3:6d:21:e7:ef:e1:c0:
04:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AE:AA:0B:3D:25:1C:53:2F:51:92:D4:E4:B3:FC:91:57:BA:F3:14
X509v3 Authority Key Identifier:
keyid:9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a3:6a:3b:d6:9f:25:0c:55:5b:4e:ce:05:30:ba:27:15:4e:
5b:1b:2f:63:eb:59:4a:dc:ab:ba:03:ce:a8:99:46:0b:b6:cf:
0d:30:fd:bb:61:52:9a:0a:44:cf:7d:f6:2e:75:f6:7d:40:26:
48:89:d4:59:99:f8:19:ac:0b:66:f7:41:dd:c4:91:f3:10:a2:
3a:bd:e6:35:18:7b:30:f4:55:8f:a6:6d:b2:62:b0:27:63:03:
44:3c:e0:7e:79:1e:2e:27:d0:bc:fe:34:af:fc:71:96:09:8c:
d9:99:0d:c5:0c:bc:db:c1:df:ff:44:d1:a1:04:cf:7d:b5:fe:
3e:d4:03:01:f6:e8:05:25:ed:43:96:0b:4e:2b:87:7f:67:c0:
c8:4e:46:0e:13:b8:95:21:cf:17:81:e8:b5:8b:9a:8d:47:08:
bb:81:c4:07:cd:cb:f5:e2:ed:d1:98:54:d7:74:01:df:e1:4f:
17:80:5d:45:fc:ec:22:f4:46:0d:77:8d:d4:70:98:c3:81:6e:
e8:ee:be:5b:4f:b2:7f:50:60:4e:e8:24:04:d5:cc:60:7a:84:
9f:3e:28:2e:c9:7c:b5:4c:9c:54:71:f3:da:ab:2b:a5:da:e5:
8e:fe:4c:d1:58:7e:ee:5e:7b:82:20:8f:5f:87:d3:2f:6c:d7:
4d:67:30:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 04:02:46 2025 by rpki-client