Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
File: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft (raw, json)
Hash identifier: VG2aHzWIWuiq3HVevAS3FASFERwOsiXF78sU51cBJvY=
Subject key identifier: D0:9B:E8:44:EA:E3:B8:EF:91:72:60:0F:59:50:55:8A:40:ED:6C:9B
Authority key identifier: 9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
Certificate issuer: /CN=9ab33743a654906143399f903704801682638e7c
Certificate serial: 0197B70E820D37E320EEE5F8C28C5A05E047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
Manifest number: 05A8
Signing time: Sat 28 Jun 2025 15:01:10 +0000
Manifest this update: Sat 28 Jun 2025 15:01:10 +0000
Manifest next update: Sun 29 Jun 2025 15:01:10 +0000
Files and hashes: 1: 3VmfP8KA-NBUgCmN_EBLD_bkrJM.roa (hash: zeljN5weUyK9rltGdxQOysVkNhdNKTjMQQFNwn07hgw=)
2: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl (hash: XV4/m3CKTtd9VgcfGzTmOGfKtJIoUNCYofotq1ljsgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:82:0d:37:e3:20:ee:e5:f8:c2:8c:5a:05:e0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab33743a654906143399f903704801682638e7c
Validity
Not Before: Jun 28 15:01:10 2025 GMT
Not After : Jun 29 15:01:10 2025 GMT
Subject: CN=d09be844eae3b8ef9172600f5950558a40ed6c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:a5:f3:19:d5:33:73:e4:18:30:fc:01:7a:
11:92:fd:6d:dc:9e:bc:e6:9a:1a:df:87:88:61:4e:
d1:f3:65:90:86:9d:a8:06:9f:35:b2:63:fc:90:44:
b6:f4:4d:3b:a7:33:68:33:9c:0a:84:99:f2:0a:72:
54:51:9f:ce:12:45:b8:f0:3d:38:14:a0:7b:1e:f3:
a2:f5:03:8d:ef:85:11:cc:82:fe:b5:20:2e:1a:ea:
f0:26:6a:1d:8f:79:f5:74:5c:98:bb:2b:d9:c6:4b:
a7:43:71:29:c9:fc:cb:25:7d:63:32:c3:48:22:6c:
05:db:55:8c:10:fc:40:34:3e:f0:69:9b:1c:1c:67:
49:4b:a4:89:7d:bb:77:df:21:70:26:01:38:c7:20:
96:3e:3e:07:8a:00:39:8f:f7:42:a1:c9:2b:ed:ee:
f4:06:2d:14:56:1f:01:d5:f8:8a:29:43:4c:36:72:
b0:27:f7:e2:b3:85:15:c2:2a:58:61:70:48:9f:77:
ed:7c:39:a8:22:a0:2f:a1:5d:50:6e:2f:5e:04:72:
27:de:b6:78:35:d2:a8:88:b3:a0:45:38:d1:be:88:
99:ed:c7:af:04:f7:0d:dd:46:e3:24:7b:4e:5a:3c:
16:53:8c:b3:ca:90:df:83:a0:b2:4b:96:25:45:9f:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9B:E8:44:EA:E3:B8:EF:91:72:60:0F:59:50:55:8A:40:ED:6C:9B
X509v3 Authority Key Identifier:
keyid:9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:70:df:b0:1f:0c:c0:09:11:cd:6c:aa:79:00:44:0c:bf:d4:
dc:fb:c0:06:d9:87:02:d5:3e:e5:f4:5a:d9:64:00:0e:c8:c3:
d4:59:33:a0:48:38:87:6c:7e:c2:26:2d:7e:e8:40:ca:e8:60:
d2:53:49:ad:2a:d6:26:7e:5a:ce:8c:79:11:63:bc:2b:37:9f:
ee:d0:74:a5:48:08:55:70:70:7f:03:6e:f5:94:bf:60:9e:0d:
e7:28:60:b9:4f:6a:40:70:b2:28:7f:11:32:85:34:5a:f3:88:
04:fe:f2:df:5e:f3:fc:7a:cb:ce:10:fc:68:31:d5:c6:a8:67:
d9:10:10:a5:e1:90:86:7d:c4:1d:e7:9a:1d:a8:ba:b1:26:13:
a9:d2:a9:eb:c6:a8:a7:6c:b7:c7:bf:9c:dd:e0:70:bb:e0:8f:
26:04:e9:98:89:15:c8:64:53:46:d9:80:17:25:63:3f:fa:a9:
ef:35:b9:c6:3a:2c:6c:bf:54:00:ff:a1:d5:de:db:75:35:25:
34:4f:08:ed:b3:a4:11:41:4e:e6:ad:db:ad:67:2c:8e:d6:e9:
31:99:18:dc:32:d0:1b:b2:d9:10:51:93:0b:e1:0a:aa:98:74:
1c:d1:2c:bc:51:0b:34:9d:87:0c:8d:bc:cc:ea:5f:b2:1f:8b:
d3:90:2a:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DoINN+Mg7uX4woxaBeBHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYjMzNzQzYTY1NDkwNjE0MzM5OWY5MDM3MDQ4MDE2ODI2
MzhlN2MwHhcNMjUwNjI4MTUwMTEwWhcNMjUwNjI5MTUwMTEwWjAzMTEwLwYDVQQD
EyhkMDliZTg0NGVhZTNiOGVmOTE3MjYwMGY1OTUwNTU4YTQwZWQ2YzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshql8xnVM3PkGDD8AXoRkv1t3J68
5poa34eIYU7R82WQhp2oBp81smP8kES29E07pzNoM5wKhJnyCnJUUZ/OEkW48D04
FKB7HvOi9QON74URzIL+tSAuGurwJmodj3n1dFyYuyvZxkunQ3EpyfzLJX1jMsNI
ImwF21WMEPxAND7waZscHGdJS6SJfbt33yFwJgE4xyCWPj4HigA5j/dCockr7e70
Bi0UVh8B1fiKKUNMNnKwJ/fis4UVwipYYXBIn3ftfDmoIqAvoV1Qbi9eBHIn3rZ4
NdKoiLOgRTjRvoiZ7cevBPcN3UbjJHtOWjwWU4yzypDfg6CyS5YlRZ9PwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCb6ETq47jvkXJgD1lQVYpA7WybMB8GA1UdIwQY
MBaAFJqzN0OmVJBhQzmfkDcEgBaCY458MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXJNM1E2WlVrR0ZET1otUU53U0FGb0pqam53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9iNjc5NDQtNjM4OS00MTA4LTg2Mjgt
ZDhmOTM1MzZhZjYzLzEvbXJNM1E2WlVrR0ZET1otUU53U0FGb0pqam53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9iNjc5NDQtNjM4OS00MTA4LTg2MjgtZDhmOTM1MzZhZjYz
LzEvbXJNM1E2WlVrR0ZET1otUU53U0FGb0pqam53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXDfsB8M
wAkRzWyqeQBEDL/U3PvABtmHAtU+5fRa2WQADsjD1FkzoEg4h2x+wiYtfuhAyuhg
0lNJrSrWJn5azox5EWO8Kzef7tB0pUgIVXBwfwNu9ZS/YJ4N5yhguU9qQHCyKH8R
MoU0WvOIBP7y317z/HrLzhD8aDHVxqhn2RAQpeGQhn3EHeeaHai6sSYTqdKp68ao
p2y3x7+c3eBwu+CPJgTpmIkVyGRTRtmAFyVjP/qp7zW5xjosbL9UAP+h1d7bdTUl
NE8I7bOkEUFO5q3brWcsjtbpMZkY3DLQG7LZEFGTC+EKqph0HNEsvFELNJ2HDI28
zOpfsh+L05Aq9w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:32 2025 by rpki-client