Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
File: cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft (raw, json)
Hash identifier: zu2bJd8RM/SJx6cZrqzyZcyE1giZAtpzlYUmbQN6ISg=
Subject key identifier: A5:C4:9C:F9:14:39:84:90:33:AB:4C:98:48:8A:C4:35:44:CF:DE:E9
Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
Certificate issuer: /CN=70c12309ee98d442ec8a7650127eb0e621894df1
Certificate serial: 019A71EEE41EDFC0EF1880D758DE933BF2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 08:01:12 +0000
Manifest this update: Tue 11 Nov 2025 08:01:12 +0000
Manifest next update: Wed 12 Nov 2025 08:01:12 +0000
Files and hashes: 1: 8Lh_EZUjo4d8T-WMsVc5_oid1Mo.roa (hash: cbyV06wf44D7SymSNRd5DeNmzcspVDJoD1qFeH8lxNU=)
2: cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl (hash: 4nQH6scTh/cm7dWvYGArRjw4czPVYHl+w6sXEOvadaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e4:1e:df:c0:ef:18:80:d7:58:de:93:3b:f2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1
Validity
Not Before: Nov 11 08:01:12 2025 GMT
Not After : Nov 12 08:01:12 2025 GMT
Subject: CN=a5c49cf91439849033ab4c98488ac43544cfdee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:42:6b:02:8b:8b:b3:96:89:a9:c7:3e:eb:e2:
8d:c3:47:f2:f6:f5:99:27:3e:bb:86:f0:62:fa:05:
39:42:d1:0a:25:ab:2b:b8:3a:63:ca:7c:f3:41:30:
cf:33:2e:58:d1:b7:a7:9c:00:c0:9a:7b:b3:da:29:
66:6e:bf:90:2e:7b:18:4b:93:40:a5:76:fb:b1:21:
6f:f3:37:6e:46:48:22:aa:31:d4:a9:8a:96:5a:11:
9f:0f:51:f9:f5:c0:ed:4c:10:23:09:63:ed:7e:29:
87:ab:59:cc:34:59:34:a7:bf:53:89:ad:e2:cd:56:
0e:cc:7d:ef:20:73:ad:8c:dd:03:57:ab:ee:be:ae:
9a:2c:ac:a3:08:f8:6e:74:a0:0c:bb:4b:7c:e1:fa:
b0:48:38:db:a1:c5:4f:16:ef:5e:e7:9e:5e:19:7b:
7e:36:86:79:30:99:74:6e:9a:fc:12:99:3c:6b:5a:
37:b7:93:7b:ef:cc:8e:31:4f:88:29:aa:9e:85:fe:
27:db:89:2c:89:c2:c7:86:96:cb:bd:7d:c9:47:77:
f1:77:3f:a0:d8:ec:58:98:c9:63:8c:02:cb:98:30:
f5:80:9f:c5:94:40:35:c4:a2:f1:8a:29:aa:29:89:
56:c2:eb:0f:cf:09:98:6e:6e:e9:53:ea:52:ea:55:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C4:9C:F9:14:39:84:90:33:AB:4C:98:48:8A:C4:35:44:CF:DE:E9
X509v3 Authority Key Identifier:
keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2c:d6:55:14:1c:2a:08:50:df:48:a8:98:23:56:96:06:11:
fc:22:91:61:e1:26:65:36:f3:c0:a9:72:e3:bc:7b:91:ab:9a:
38:fb:97:88:c7:ec:6a:1a:ad:c0:65:c5:7a:f8:f0:32:fc:a3:
28:cb:23:c5:59:17:10:e0:91:ed:98:8d:9c:c0:84:69:04:43:
53:16:c1:08:f2:08:08:0e:29:67:52:66:6a:7f:0c:19:56:f5:
9b:ca:0f:20:d3:d0:62:2d:c5:99:1d:80:28:d9:23:25:8f:87:
cf:da:b2:fc:2f:ac:be:41:fd:b7:d8:12:4c:0d:2c:36:e0:7d:
e7:5f:a2:a4:b3:75:d3:db:dc:99:15:46:97:6d:3a:91:bc:88:
00:42:63:a9:6c:4b:ca:ff:a6:4d:85:0d:de:76:c4:01:03:4a:
e7:5c:f8:85:db:93:42:76:54:45:1d:ba:ea:82:ef:87:31:26:
68:b7:d8:24:2e:10:1b:70:ce:fd:e7:96:3e:4a:f7:04:c3:b5:
87:cf:c6:a7:15:bc:44:d8:76:3f:70:56:79:d1:64:1b:51:16:
4e:7a:7e:29:07:85:0b:d8:59:4d:95:86:6c:37:70:47:d7:d8:
50:ab:a9:b1:8d:98:6e:fa:73:1f:b4:24:e8:ba:15:db:3a:ba:
2f:f9:82:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:12 2025 by rpki-client