Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
File: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft (raw, json)
Hash identifier: xFQcBhWWjfnIGp6b2utAepvvDnw1kR2Vg1EEP4t23vI=
Subject key identifier: EE:22:B2:03:92:15:C9:BA:4B:82:9B:11:76:3A:44:36:CF:44:57:0D
Authority key identifier: 9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
Certificate issuer: /CN=9ab33743a654906143399f903704801682638e7c
Certificate serial: 0199FC21A36DFC5D0559D7ED8AA42784E543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
Manifest number: 06D5
Signing time: Sun 19 Oct 2025 11:01:26 +0000
Manifest this update: Sun 19 Oct 2025 11:01:26 +0000
Manifest next update: Mon 20 Oct 2025 11:01:26 +0000
Files and hashes: 1: 3VmfP8KA-NBUgCmN_EBLD_bkrJM.roa (hash: zeljN5weUyK9rltGdxQOysVkNhdNKTjMQQFNwn07hgw=)
2: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl (hash: RrnQkkNJb0hewWg67sWI8Zo0sjLGfivIYOPEAO78JdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a3:6d:fc:5d:05:59:d7:ed:8a:a4:27:84:e5:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab33743a654906143399f903704801682638e7c
Validity
Not Before: Oct 19 11:01:26 2025 GMT
Not After : Oct 20 11:01:26 2025 GMT
Subject: CN=ee22b2039215c9ba4b829b11763a4436cf44570d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3c:0b:04:a2:a8:09:23:35:25:e7:aa:72:b9:
ff:14:4e:44:b0:f8:36:75:fb:a8:f5:a4:9f:db:f9:
20:0f:e8:6b:ab:fb:e0:76:9c:b8:f8:ee:08:f1:dc:
62:ec:10:b4:ff:a6:1f:66:72:65:8b:ed:64:1e:51:
96:56:06:d0:c7:22:a9:8a:08:7a:c8:52:33:f3:92:
7c:86:87:79:09:a5:db:34:e4:1b:11:ce:7b:70:25:
40:f8:a0:14:1b:ae:ca:da:84:20:34:28:0d:9e:80:
f8:d3:b2:c9:57:30:93:5a:09:4e:ef:79:a1:5c:c9:
20:a9:6d:b8:35:ce:2b:88:87:41:b9:42:d1:82:76:
8e:d7:c8:be:d3:8f:90:98:7c:b2:5c:61:00:83:7b:
53:b9:d5:ff:d7:2e:24:e7:83:3e:12:b5:6b:b5:0e:
49:24:f1:5b:04:24:04:56:60:0a:90:bd:12:26:f0:
cb:ae:eb:69:17:21:49:39:a0:d7:98:f1:4e:9d:53:
51:0a:a4:3a:4d:1d:1f:a1:e5:11:ce:fd:f8:f3:20:
10:3a:d7:46:fd:fc:95:e1:2b:08:5c:29:9a:35:26:
33:ee:e0:79:63:98:5e:89:8c:45:2f:91:4b:ba:26:
97:7e:0e:55:93:b6:ff:ff:8e:e5:a5:72:87:9e:3d:
7b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:22:B2:03:92:15:C9:BA:4B:82:9B:11:76:3A:44:36:CF:44:57:0D
X509v3 Authority Key Identifier:
keyid:9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:15:cf:26:48:7a:6b:3c:2b:3e:bc:b5:81:65:7e:11:11:6e:
fe:25:d2:4e:10:97:72:7f:4f:ac:79:45:bc:74:4d:d3:fc:12:
d6:a0:08:39:5c:93:f5:6b:34:4a:d5:d5:cc:0f:be:22:e1:d5:
a9:d4:be:70:f2:3e:bd:51:f1:22:e1:8b:1d:b3:f6:23:8f:d5:
78:8a:dc:37:6a:1d:04:ea:d6:20:3e:e2:83:c6:16:9c:29:bb:
d9:dd:c3:76:3f:e3:d6:c7:77:23:9f:af:04:e9:6d:4d:5d:82:
e4:b8:ab:da:55:f2:29:bb:b8:69:47:04:54:e9:4d:7a:72:4d:
cc:0a:8f:54:d9:d8:68:6b:f5:76:07:85:f2:c9:d5:ff:09:f7:
25:01:df:03:6a:95:33:5f:3b:66:a1:23:9a:16:94:bf:ff:60:
5c:b2:76:b4:9c:e3:6c:04:41:e6:af:94:d3:94:ab:06:c5:b2:
e6:c9:21:5a:fd:16:4d:d3:18:16:e6:3b:30:b8:eb:89:7a:e4:
62:e1:f1:0c:e2:4e:cb:dc:7d:c4:20:76:4d:5c:0a:bd:e5:6f:
09:1f:c8:f1:ad:7e:eb:7a:c5:4c:82:d9:f4:06:c4:45:a0:c4:
d2:f8:ae:59:c8:dc:97:7e:e1:8f:7c:31:59:24:b7:62:cb:44:
31:44:25:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:08 2025 by rpki-client