Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
File: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft (raw, json)
Hash identifier: urxb0tHE9/zL+S48JNLOxVjE78drtGYgqWE8d/kAMTc=
Subject key identifier: 94:C5:EA:C7:D5:6B:E5:1F:99:3E:21:31:DF:4D:27:13:46:B9:60:25
Authority key identifier: 9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
Certificate issuer: /CN=9ab33743a654906143399f903704801682638e7c
Certificate serial: 0198D6CD87A18C5F155E65E5566B66B4726D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
Manifest number: 063D
Signing time: Sat 23 Aug 2025 12:00:50 +0000
Manifest this update: Sat 23 Aug 2025 12:00:50 +0000
Manifest next update: Sun 24 Aug 2025 12:00:50 +0000
Files and hashes: 1: 3VmfP8KA-NBUgCmN_EBLD_bkrJM.roa (hash: zeljN5weUyK9rltGdxQOysVkNhdNKTjMQQFNwn07hgw=)
2: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl (hash: lr5PAnAk0OsHeX1BxgxJfUKM+YSLdgnYxPg6zrra0dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:87:a1:8c:5f:15:5e:65:e5:56:6b:66:b4:72:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab33743a654906143399f903704801682638e7c
Validity
Not Before: Aug 23 12:00:50 2025 GMT
Not After : Aug 24 12:00:50 2025 GMT
Subject: CN=94c5eac7d56be51f993e2131df4d271346b96025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:85:c2:b3:7b:98:03:44:14:a6:80:f1:96:
3e:00:4e:3a:ce:ba:de:c3:2b:85:7a:f9:a7:62:69:
68:bf:62:3b:a1:5e:be:39:83:5c:9e:78:37:43:cd:
aa:80:10:24:2b:1e:14:0e:22:56:18:70:8c:33:d9:
8e:35:95:2c:85:e2:c5:0a:f6:ac:17:4a:2f:b7:5b:
5f:18:b7:e6:b0:d3:d2:37:be:d9:a8:20:ce:04:fd:
fc:0d:c7:64:4a:09:fb:7f:9b:8f:79:f9:c5:39:e4:
b6:80:81:aa:df:50:cd:8d:96:c3:94:e6:f3:4d:97:
7a:b2:e1:d1:1b:8c:2c:ed:5d:8d:50:ed:b8:00:6f:
34:d5:55:e8:e3:45:c5:f6:a1:23:e9:bf:0c:38:73:
63:9b:92:49:ac:5c:32:91:d9:3b:26:13:9d:96:94:
4a:34:11:d2:ff:56:d1:af:f7:27:83:dd:bf:d0:8e:
78:37:ec:3c:37:1e:2f:36:4e:02:49:7d:a4:e0:59:
6f:22:6b:2b:64:49:f1:e4:c2:1e:be:45:10:03:af:
e5:5d:75:00:02:9f:4e:4e:0f:1f:ed:04:b7:e3:65:
4b:8e:4f:10:22:f2:e6:55:45:e9:21:f0:07:8d:5a:
dd:1a:7e:f6:c4:03:95:12:e2:68:8d:e9:ca:9a:04:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C5:EA:C7:D5:6B:E5:1F:99:3E:21:31:DF:4D:27:13:46:B9:60:25
X509v3 Authority Key Identifier:
keyid:9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:50:6b:3b:6f:f1:d0:ba:d5:44:37:5d:e0:d9:ad:61:0b:f8:
b2:1f:d6:bb:3d:57:a2:2e:55:e9:c0:66:85:5e:de:d5:d9:ad:
e9:09:11:9e:94:2b:56:2d:b3:18:38:ce:64:88:2a:3b:78:4a:
3d:a7:ec:e0:6d:4f:d4:58:43:d3:0f:b5:fa:b9:74:ce:59:59:
74:8c:3c:64:f1:cd:1e:1f:be:6b:b0:e0:3d:29:5b:3c:07:ca:
2d:03:77:27:5e:59:c6:3b:9d:0a:c0:ff:5d:79:7e:f3:89:84:
aa:5a:ba:83:db:ee:0e:2d:70:32:01:9e:ce:ab:3c:6b:84:4c:
e3:ce:83:51:79:35:28:24:b3:89:8b:eb:de:ab:ac:84:3b:1b:
99:b7:e8:9d:4c:03:4b:aa:44:f8:9a:04:14:81:5c:d3:d3:fd:
cf:07:c8:cb:85:ba:80:4f:54:1a:bc:04:6e:4c:49:23:7f:c9:
08:48:a7:dd:f4:4f:4a:bf:c5:7c:dd:ce:36:9a:0e:c0:24:d0:
ae:88:31:b7:b6:3e:10:78:ef:56:85:1b:c7:99:6a:d8:19:c4:
ac:ab:73:2e:bb:74:d2:55:7a:83:f3:f1:a8:7a:13:00:e0:19:
d9:1d:ed:c9:cc:fd:26:6d:54:90:14:8d:c0:16:23:1a:4e:7c:
04:a1:15:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzYehjF8VXmXlVmtmtHJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjMzNzQzYTY1NDkwNjE0MzM5OWY5MDM3MDQ4MDE2ODI2
MzhlN2MwHhcNMjUwODIzMTIwMDUwWhcNMjUwODI0MTIwMDUwWjAzMTEwLwYDVQQD
Eyg5NGM1ZWFjN2Q1NmJlNTFmOTkzZTIxMzFkZjRkMjcxMzQ2Yjk2MDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiaFwrN7mANEFKaA8ZY+AE46zrre
wyuFevmnYmlov2I7oV6+OYNcnng3Q82qgBAkKx4UDiJWGHCMM9mONZUsheLFCvas
F0ovt1tfGLfmsNPSN77ZqCDOBP38DcdkSgn7f5uPefnFOeS2gIGq31DNjZbDlObz
TZd6suHRG4ws7V2NUO24AG801VXo40XF9qEj6b8MOHNjm5JJrFwykdk7JhOdlpRK
NBHS/1bRr/cng92/0I54N+w8Nx4vNk4CSX2k4FlvImsrZEnx5MIevkUQA6/lXXUA
Ap9OTg8f7QS342VLjk8QIvLmVUXpIfAHjVrdGn72xAOVEuJojenKmgTqYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTF6sfVa+UfmT4hMd9NJxNGuWAlMB8GA1UdIwQY
MBaAFJqzN0OmVJBhQzmfkDcEgBaCY458MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJNM1E2WlVrR0ZET1otUU53U0FGb0pqam53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9iNjc5NDQtNjM4OS00MTA4LTg2Mjgt
ZDhmOTM1MzZhZjYzLzEvbXJNM1E2WlVrR0ZET1otUU53U0FGb0pqam53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9iNjc5NDQtNjM4OS00MTA4LTg2MjgtZDhmOTM1MzZhZjYz
LzEvbXJNM1E2WlVrR0ZET1otUU53U0FGb0pqam53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1BrO2/x
0LrVRDdd4NmtYQv4sh/Wuz1Xoi5V6cBmhV7e1dmt6QkRnpQrVi2zGDjOZIgqO3hK
Pafs4G1P1FhD0w+1+rl0zllZdIw8ZPHNHh++a7DgPSlbPAfKLQN3J15ZxjudCsD/
XXl+84mEqlq6g9vuDi1wMgGezqs8a4RM486DUXk1KCSziYvr3qushDsbmbfonUwD
S6pE+JoEFIFc09P9zwfIy4W6gE9UGrwEbkxJI3/JCEin3fRPSr/FfN3ONpoOwCTQ
rogxt7Y+EHjvVoUbx5lq2BnErKtzLrt00lV6g/PxqHoTAOAZ2R3tycz9Jm1UkBSN
wBYjGk58BKEVQQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:56:56 2025 by rpki-client