Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
File: MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json)
Hash identifier: mlF1qk2i8ssPwhYXX3g6WjS7lYug44teH+Ki4Tdhji4=
Subject key identifier: 0B:BD:D4:22:96:43:D8:B3:A6:40:D8:AF:48:E2:94:E9:B6:26:69:97
Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Certificate serial: 0199225555D80EFB8DC127E3B279D65C1296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
Manifest number: 1603
Signing time: Sun 07 Sep 2025 04:00:41 +0000
Manifest this update: Sun 07 Sep 2025 04:00:41 +0000
Manifest next update: Mon 08 Sep 2025 04:00:41 +0000
Files and hashes: 1: 8FKyt8eDnO1kLTJD9dF4kktBbnk.roa (hash: 9mNmQ05G/Q2P4wE3xyuelgcW7lRtN/p4eyiaB9oB3rE=)
2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: ELiBKxX2L737oqljPvvI2XluCBdLSXUP7cPXc5SQZhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:55:d8:0e:fb:8d:c1:27:e3:b2:79:d6:5c:12:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd
Validity
Not Before: Sep 7 04:00:41 2025 GMT
Not After : Sep 8 04:00:41 2025 GMT
Subject: CN=0bbdd4229643d8b3a640d8af48e294e9b6266997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:48:a9:be:15:fd:25:7c:0a:4f:28:06:5d:
1b:d6:b3:f8:13:5a:9e:1f:f3:25:84:6d:77:0d:7e:
5f:16:70:c3:31:9a:b3:a6:f9:11:69:cc:27:77:ed:
59:45:81:34:d8:44:6f:c8:50:42:6d:ab:8c:a3:2a:
bf:75:e5:05:90:70:51:8a:43:a5:c0:aa:28:e3:60:
fe:c4:25:56:2e:25:e7:97:f4:36:b1:e9:92:56:31:
ee:f2:93:3d:cb:6e:fa:fb:a4:51:88:c5:13:2f:5c:
f3:a8:e1:ec:3b:94:96:0e:84:15:e7:21:57:99:e1:
09:18:38:70:63:50:3d:4e:45:2d:25:8f:a8:0b:26:
9c:71:42:94:51:9c:54:17:b3:0e:12:0e:b7:d6:29:
39:c6:77:36:59:49:02:71:b6:1e:be:54:0e:f2:1c:
41:d3:c1:5f:d8:7c:33:df:fd:08:e3:37:6a:7d:a2:
fa:0f:2b:e3:c2:0b:d9:e3:95:5c:14:8a:ca:42:e5:
11:12:37:d1:c4:7e:14:a7:e6:a5:4f:d8:bf:7e:0e:
41:e4:c7:d8:c0:6a:21:55:5c:39:5d:7d:3d:c2:62:
2f:d7:de:b4:97:f7:f9:17:5b:6b:65:26:db:32:65:
d9:1c:5f:db:f5:4d:be:8c:98:cb:63:73:6a:be:ca:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BD:D4:22:96:43:D8:B3:A6:40:D8:AF:48:E2:94:E9:B6:26:69:97
X509v3 Authority Key Identifier:
keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:9e:2a:e3:fe:22:ba:f9:2d:b8:7c:3b:e1:03:b8:7b:9e:69:
4e:dd:bd:e0:e1:c8:7e:da:d7:d3:e0:37:5c:98:63:d5:33:59:
23:fa:ac:9f:ec:43:de:5d:ea:8e:58:cc:21:2b:fc:c2:80:d7:
15:ba:b2:fe:ae:9d:fd:49:74:05:1c:c8:5c:33:a0:24:15:7d:
64:75:a7:b7:f2:e8:c4:28:96:64:73:16:7b:74:45:b2:2c:b4:
53:98:ba:da:03:bd:68:e6:c9:60:91:d7:43:96:d0:bb:a4:8e:
bc:7c:c9:86:f8:b0:20:d5:ca:eb:8b:b1:30:b4:cd:6b:0f:56:
9d:b4:4e:46:39:0f:e4:ce:8a:0c:c8:66:4d:96:00:12:db:56:
be:d4:9c:03:0b:b2:25:17:6b:90:8b:fb:f6:c2:8c:4b:54:3f:
f5:d7:37:68:5d:06:00:4a:fc:6a:89:ae:44:35:f5:58:90:3e:
e0:5e:aa:22:9b:7f:10:b0:ff:ef:f4:6c:a6:ef:41:55:09:54:
3b:7d:4e:bd:b4:59:23:16:84:b0:c3:c4:34:4f:bf:5d:9c:5f:
0d:6a:5e:46:5a:b6:a3:ca:e1:8c:e5:02:c4:40:f5:50:f1:b7:
ee:b7:39:40:17:09:dc:b9:50:5f:45:3b:50:89:1e:e5:59:59:
96:85:d7:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVVXYDvuNwSfjsnnWXBKWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMTdmZDIyN2U5ZGNlOTc4MDVjMDNlNWYzMzAwMmFlYTE4
YzM3ZGQwHhcNMjUwOTA3MDQwMDQxWhcNMjUwOTA4MDQwMDQxWjAzMTEwLwYDVQQD
EygwYmJkZDQyMjk2NDNkOGIzYTY0MGQ4YWY0OGUyOTRlOWI2MjY2OTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQlIqb4V/SV8Ck8oBl0b1rP4E1qe
H/MlhG13DX5fFnDDMZqzpvkRacwnd+1ZRYE02ERvyFBCbauMoyq/deUFkHBRikOl
wKoo42D+xCVWLiXnl/Q2semSVjHu8pM9y276+6RRiMUTL1zzqOHsO5SWDoQV5yFX
meEJGDhwY1A9TkUtJY+oCyaccUKUUZxUF7MOEg631ik5xnc2WUkCcbYevlQO8hxB
08Ff2Hwz3/0I4zdqfaL6DyvjwgvZ45VcFIrKQuUREjfRxH4Up+alT9i/fg5B5MfY
wGohVVw5XX09wmIv1960l/f5F1trZSbbMmXZHF/b9U2+jJjLY3NqvspDZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAu91CKWQ9izpkDYr0jilOm2JmmXMB8GA1UdIwQY
MBaAFDEX/SJ+nc6XgFwD5fMwAq6hjDfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVJmOUluNmR6cGVBWEFQbDh6QUNycUdNTjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85ZjYyMzMtNzgyYS00MTQwLWI1MDAt
OTk3MTkwN2E5NWE3LzEvTVJmOUluNmR6cGVBWEFQbDh6QUNycUdNTjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS85ZjYyMzMtNzgyYS00MTQwLWI1MDAtOTk3MTkwN2E5NWE3
LzEvTVJmOUluNmR6cGVBWEFQbDh6QUNycUdNTjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhp4q4/4i
uvktuHw74QO4e55pTt294OHIftrX0+A3XJhj1TNZI/qsn+xD3l3qjljMISv8woDX
Fbqy/q6d/Ul0BRzIXDOgJBV9ZHWnt/LoxCiWZHMWe3RFsiy0U5i62gO9aObJYJHX
Q5bQu6SOvHzJhviwINXK64uxMLTNaw9WnbRORjkP5M6KDMhmTZYAEttWvtScAwuy
JRdrkIv79sKMS1Q/9dc3aF0GAEr8aomuRDX1WJA+4F6qIpt/ELD/7/Rspu9BVQlU
O31OvbRZIxaEsMPENE+/XZxfDWpeRlq2o8rhjOUCxED1UPG37rc5QBcJ3LlQX0U7
UIke5VlZloXXOA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:54 2025 by rpki-client