Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
File: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft (raw, json)
Hash identifier: 3MXBAWJIAkxWFpi74zPe7tDamYkx0D6iMvAbYXWOVBo=
Subject key identifier: E0:20:67:1A:E7:03:1E:37:66:34:6B:E4:18:01:70:46:E5:75:2C:6F
Authority key identifier: 9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
Certificate issuer: /CN=9ab33743a654906143399f903704801682638e7c
Certificate serial: 019A1CF5820007906C0BC34F1A33392F4FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
Manifest number: 06E6
Signing time: Sat 25 Oct 2025 20:00:42 +0000
Manifest this update: Sat 25 Oct 2025 20:00:42 +0000
Manifest next update: Sun 26 Oct 2025 20:00:42 +0000
Files and hashes: 1: 3VmfP8KA-NBUgCmN_EBLD_bkrJM.roa (hash: zeljN5weUyK9rltGdxQOysVkNhdNKTjMQQFNwn07hgw=)
2: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl (hash: uKl4AkdefDTvP6SvOFxv+pnENwTD+cdpmE6aQOfgEB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:f5:82:00:07:90:6c:0b:c3:4f:1a:33:39:2f:4f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab33743a654906143399f903704801682638e7c
Validity
Not Before: Oct 25 20:00:42 2025 GMT
Not After : Oct 26 20:00:42 2025 GMT
Subject: CN=e020671ae7031e3766346be418017046e5752c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:9f:d8:be:2d:65:c3:9e:ce:6e:b8:25:2d:
3b:47:d2:65:e8:cb:9c:4b:02:23:58:ae:bb:12:e3:
b6:91:8a:22:b6:62:6b:ea:b6:2b:b6:0a:52:f0:d1:
80:8d:90:e6:2f:e6:c6:f6:41:1e:6f:8c:c1:fa:4c:
29:4b:ab:be:5e:5c:ee:91:a8:7e:71:4c:0b:05:2c:
0d:de:69:aa:8c:b0:04:54:3f:48:50:82:70:02:3d:
98:5d:26:e3:c9:3a:55:4c:6f:45:c9:61:86:de:51:
a5:75:90:b5:f5:e5:03:3f:0d:f1:fd:de:b4:10:2c:
69:2a:9a:b1:8c:50:2c:b2:a5:17:1f:34:f7:08:04:
49:03:f1:bb:b6:3b:44:92:af:19:d8:67:c5:23:42:
02:1b:e7:97:e1:8e:e9:c7:c7:34:db:c1:f8:e7:4c:
2f:d5:c3:ff:53:2c:89:df:fd:56:ee:44:ae:81:c4:
07:1c:4e:96:ca:1c:7c:92:81:0c:66:fe:78:04:c9:
ed:8b:c6:ae:0f:29:b0:10:b8:b4:b6:48:d2:83:6e:
48:1c:2b:78:10:35:50:b4:a2:f1:08:45:a6:cc:dc:
8c:11:16:6f:5f:0b:61:f6:0c:c4:b1:b6:ee:f5:3d:
79:71:8d:23:ae:f6:88:08:6b:7e:f6:12:08:6c:b6:
3e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:20:67:1A:E7:03:1E:37:66:34:6B:E4:18:01:70:46:E5:75:2C:6F
X509v3 Authority Key Identifier:
keyid:9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f3:a9:80:b4:82:c6:30:de:de:19:82:b5:a4:f4:31:b6:34:
ba:75:2d:f6:a6:ec:44:c8:68:90:3f:66:5d:14:f1:00:cf:f2:
bf:85:5d:93:59:e2:f9:89:44:d8:77:59:cf:0f:4a:ca:f7:95:
28:49:6d:9c:09:86:62:5c:e3:5c:cb:74:ff:8c:3d:bf:25:46:
1d:51:65:9a:a2:48:b3:93:ca:75:ce:d8:96:57:47:bf:5e:cc:
20:14:10:9e:13:87:85:7e:3a:8a:8b:a0:67:55:ae:be:58:d4:
2e:c7:3c:64:d5:d0:96:20:4a:75:b3:78:7a:75:26:2c:49:b2:
3e:5d:5d:72:50:0f:19:ab:3d:0b:55:7a:64:cb:97:75:e4:5d:
3a:8d:93:c6:d6:71:b5:49:5b:a9:01:6b:f3:6f:90:6c:86:fe:
48:6e:1b:3c:7a:ec:87:82:0b:2f:2d:6f:57:f7:02:24:a3:10:
c1:59:2d:7a:aa:a1:f9:97:40:c9:b2:0c:19:70:33:1e:13:dc:
50:c2:d1:0e:58:7f:00:a1:fd:30:46:ed:18:40:97:f6:61:38:
0d:5a:59:83:b2:37:81:15:36:1b:1f:1f:80:10:5c:95:40:ab:
48:e8:cf:96:ea:64:a9:4a:f4:ee:05:38:08:17:39:76:3a:20:
b6:6e:ae:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:32:29 2025 by rpki-client