Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
File: cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft (raw, json)
Hash identifier: 8MMT+E2fbtczd1N3XclxG+/Gbe36H91g4PpUDQiThfM=
Subject key identifier: A1:9B:E6:BF:B6:ED:4E:C8:95:3E:CC:A5:1B:63:4C:78:43:CE:5C:EB
Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
Certificate issuer: /CN=70c12309ee98d442ec8a7650127eb0e621894df1
Certificate serial: 019746D502A00B2931EBFBAB59302410B325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 20:00:54 +0000
Manifest this update: Fri 06 Jun 2025 20:00:54 +0000
Manifest next update: Sat 07 Jun 2025 20:00:54 +0000
Files and hashes: 1: 8Lh_EZUjo4d8T-WMsVc5_oid1Mo.roa (hash: cbyV06wf44D7SymSNRd5DeNmzcspVDJoD1qFeH8lxNU=)
2: cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl (hash: NjhAUoF0RYTcltjGSWCR4oo26bHhC+zrQZd6E7bnrQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d5:02:a0:0b:29:31:eb:fb:ab:59:30:24:10:b3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1
Validity
Not Before: Jun 6 20:00:54 2025 GMT
Not After : Jun 7 20:00:54 2025 GMT
Subject: CN=a19be6bfb6ed4ec8953ecca51b634c7843ce5ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:fb:89:cc:f2:f8:73:88:ee:61:aa:55:92:
7f:73:ab:71:d6:13:2b:81:07:9f:05:52:f0:30:9d:
00:60:a0:96:20:47:58:5e:a6:2d:7b:95:d8:a4:a0:
fe:32:0a:29:4f:f5:88:26:f3:6c:3e:c1:4c:13:6e:
6d:b7:88:74:fa:ea:b6:6f:4b:63:c0:9b:b5:c0:46:
56:27:6b:33:9f:14:d5:52:c1:58:f0:50:bf:5d:54:
47:1c:d3:e3:f3:44:da:bc:03:c0:77:65:4a:85:8f:
1c:06:be:24:dc:d2:eb:f2:54:d9:d6:c1:a9:e1:35:
46:ab:88:36:24:f8:c0:ff:20:99:16:21:bb:d3:17:
44:fd:31:8e:b3:ac:1d:60:33:7b:be:6a:85:dc:42:
0d:f8:bd:dc:53:ac:44:4f:9c:8c:0b:f1:a5:b0:15:
98:05:7e:a5:e2:50:8c:67:20:e2:01:78:a1:ff:04:
04:28:38:ef:61:26:0c:be:74:31:ce:ab:ea:63:92:
ef:46:03:6e:a4:2e:02:60:82:67:8a:06:e8:4d:f1:
ab:b5:ce:57:a8:c2:f3:8c:44:59:9d:9f:fd:ec:a2:
4e:c5:56:d1:e2:1e:36:05:b8:cd:88:de:b0:50:79:
bb:bc:72:3b:ce:5f:6e:b7:07:6b:a8:7e:f5:44:6d:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9B:E6:BF:B6:ED:4E:C8:95:3E:CC:A5:1B:63:4C:78:43:CE:5C:EB
X509v3 Authority Key Identifier:
keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:dc:08:b6:52:04:b7:59:25:e7:a1:84:ba:70:7b:4a:54:4d:
8e:72:a2:f7:08:bd:76:5d:67:11:cb:87:a0:43:49:0d:91:ab:
73:a9:c9:e4:5f:63:a2:67:1e:6a:7e:08:ee:a9:27:13:7c:d1:
eb:e2:aa:85:cd:32:44:e8:04:c7:76:c6:fa:5b:f1:6f:10:27:
17:76:b7:07:65:e2:01:3e:19:1a:cc:05:08:d0:2d:a9:5b:78:
22:6b:1d:dc:fb:46:14:3d:97:f4:90:6e:8e:ee:39:24:1f:a4:
1b:d0:d9:88:63:30:47:d2:de:f8:cd:db:a9:3b:2f:1e:d8:9e:
7f:d2:02:ec:2d:7c:98:28:a7:b8:e2:8e:bc:30:40:2a:b2:0b:
11:d5:4e:25:63:78:bf:80:fd:c2:6c:ca:4f:7d:ce:0d:30:88:
9f:40:80:95:9c:21:f9:06:9d:ce:9f:13:2b:5c:61:c6:2f:bf:
38:f6:05:58:6f:b5:8d:5a:db:77:66:fa:45:76:1c:21:fa:72:
a7:da:95:39:54:29:bc:76:87:e3:bd:50:10:b1:8b:39:12:53:
80:5d:ad:df:65:34:c8:bd:74:72:59:34:d1:78:e2:ef:6f:48:
0a:b8:f9:a3:6d:c3:2f:68:4c:6a:f1:5b:2c:6d:e5:15:3d:2f:
43:f6:d0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:35:56 2025 by rpki-client