Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
File: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft (raw, json)
Hash identifier: Pz1wNvJCRsCQ0BpeOEo+eUfkIGWEKylJE7KB8go3DQ4=
Subject key identifier: 86:5A:4C:33:2C:E1:2B:29:64:6A:D3:26:2F:C8:E4:51:58:26:60:7D
Authority key identifier: 9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
Certificate issuer: /CN=9ab33743a654906143399f903704801682638e7c
Certificate serial: 019748FA898664F2E183E3B65C096F37A51F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
Manifest number: 056F
Signing time: Sat 07 Jun 2025 06:01:07 +0000
Manifest this update: Sat 07 Jun 2025 06:01:07 +0000
Manifest next update: Sun 08 Jun 2025 06:01:07 +0000
Files and hashes: 1: 3VmfP8KA-NBUgCmN_EBLD_bkrJM.roa (hash: zeljN5weUyK9rltGdxQOysVkNhdNKTjMQQFNwn07hgw=)
2: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl (hash: rxKi+nJxcIQfb48bhYLaia04dU9Wh6zDjWYbY5wrL+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:89:86:64:f2:e1:83:e3:b6:5c:09:6f:37:a5:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab33743a654906143399f903704801682638e7c
Validity
Not Before: Jun 7 06:01:07 2025 GMT
Not After : Jun 8 06:01:07 2025 GMT
Subject: CN=865a4c332ce12b29646ad3262fc8e4515826607d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:78:5d:1c:f8:ba:51:47:4c:9d:f7:fb:d2:1f:
1c:8b:75:ed:3c:a3:5e:bf:a7:0e:e7:19:b0:c8:ed:
f9:27:70:35:f5:c2:30:bb:c9:97:32:d6:3f:45:79:
03:31:01:7c:bb:7e:fe:2e:5f:4f:92:e5:2c:e5:db:
67:29:4f:da:d1:cf:d8:b1:b2:0e:77:66:77:03:b1:
a6:3d:c5:2a:22:f3:5d:1f:e9:a1:d0:44:18:4c:96:
a9:be:76:ec:7e:10:fd:95:f9:d9:c4:39:bd:5e:43:
0d:aa:de:6c:d4:19:20:1e:d2:a3:18:f6:04:39:28:
ed:c7:d6:90:7d:3f:4c:a1:7f:40:b9:cf:ec:3f:44:
93:cb:6f:d2:89:82:69:30:13:00:a4:76:82:2b:e9:
ce:e7:b8:dc:0c:78:fc:e9:01:7a:c9:43:f4:bd:ec:
8f:a1:e4:f1:14:c8:96:88:12:79:25:96:96:b4:92:
3a:e6:72:56:20:34:37:f3:ad:7b:5f:75:ec:96:b8:
d9:ed:a6:87:45:46:7c:ba:02:88:e5:1c:57:20:e8:
e6:60:98:0a:da:72:29:28:92:03:6f:fd:d5:28:24:
08:75:74:65:86:d7:d3:bc:64:57:09:ad:ea:f4:63:
b5:d5:a8:dc:6e:41:ad:55:19:68:ec:39:50:09:41:
5b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5A:4C:33:2C:E1:2B:29:64:6A:D3:26:2F:C8:E4:51:58:26:60:7D
X509v3 Authority Key Identifier:
keyid:9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f2:10:bb:6e:5f:9d:23:0e:ef:bc:a0:4d:33:ac:23:d5:c2:
7b:60:a5:7d:3b:92:3a:94:b4:43:53:0b:56:32:cc:e2:18:2d:
f3:66:01:3e:58:e3:c3:2c:e9:88:5d:2d:5e:a1:f1:7f:f5:3d:
43:37:ce:db:66:5c:90:79:e8:90:0b:a7:ab:4d:67:5e:2d:9d:
77:cc:8a:d4:44:e3:0a:bc:bd:76:08:6a:bc:fa:f7:d7:77:a7:
12:93:7b:5c:ce:bd:6e:e3:01:64:04:e4:39:70:11:32:19:f9:
19:21:35:c4:84:92:a6:01:5c:51:b3:1d:8e:d9:ca:e9:53:49:
ca:9e:b6:34:02:56:77:53:55:f1:7c:87:ee:88:05:d2:e5:b5:
c8:43:62:e5:33:42:54:59:a5:ee:1f:a5:7d:ad:86:32:16:86:
80:f1:28:8f:3f:87:8e:e6:61:78:fe:33:a4:62:82:f4:a8:c1:
47:83:e9:57:41:e6:9b:08:21:9b:0b:e6:96:8d:36:56:ba:4e:
06:9c:25:49:7d:8e:44:50:f6:a5:8d:b3:9f:79:fc:2e:e6:ef:
ff:bb:3e:5e:42:f6:c7:25:05:76:c9:a3:bb:d1:a5:92:74:2b:
e1:ef:9f:3e:22:48:ee:3f:ed:67:4e:0f:ff:06:48:53:ac:0e:
f0:2f:08:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:35:40 2025 by rpki-client