Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
File: cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft (raw, json)
Hash identifier: 3gqAGvpg3p+IC3YzOdAuR7A1pcuh3XlJIZB+X1Nwujo=
Subject key identifier: 73:23:B0:D9:66:55:88:B1:CC:FE:76:97:AA:7B:09:51:D6:45:B3:8B
Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
Certificate issuer: /CN=70c12309ee98d442ec8a7650127eb0e621894df1
Certificate serial: 019923D5DE59EACFEDC94E59B038AB672074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 11:00:42 +0000
Manifest this update: Sun 07 Sep 2025 11:00:42 +0000
Manifest next update: Mon 08 Sep 2025 11:00:42 +0000
Files and hashes: 1: 8Lh_EZUjo4d8T-WMsVc5_oid1Mo.roa (hash: cbyV06wf44D7SymSNRd5DeNmzcspVDJoD1qFeH8lxNU=)
2: cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl (hash: j1le+Te+BYtBm9DHUAs9ioyA75Rto9z4AYGLpNwmSbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:de:59:ea:cf:ed:c9:4e:59:b0:38:ab:67:20:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1
Validity
Not Before: Sep 7 11:00:42 2025 GMT
Not After : Sep 8 11:00:42 2025 GMT
Subject: CN=7323b0d9665588b1ccfe7697aa7b0951d645b38b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:4a:6a:fd:59:6e:81:e3:84:e2:0a:66:7d:
16:38:14:1c:43:d8:b6:38:7b:9e:9e:7a:50:36:da:
27:f8:0c:d8:64:50:83:ab:90:4a:1d:85:70:d3:9d:
72:b8:36:75:4b:b3:bb:2c:89:a3:11:e2:6a:78:6f:
8e:b1:32:38:27:49:10:d0:9f:4b:82:0d:06:9a:44:
1a:50:3a:f2:82:37:37:21:bb:b2:ff:48:7d:bd:d8:
18:0a:71:62:33:2c:7f:57:6e:31:dc:d0:5f:54:76:
52:79:93:1d:0a:dc:19:1f:fe:33:57:ee:dc:a6:c8:
32:08:86:1e:b3:5a:ed:34:39:21:84:fe:7e:59:fd:
f5:16:4e:5d:28:52:e1:83:ca:fc:5c:d4:b0:2c:a2:
15:e2:0d:6b:25:5d:f0:35:f0:19:fd:2e:30:a7:10:
8d:be:89:dd:f0:ea:ce:95:2f:dd:85:37:34:98:f7:
e7:59:7c:a8:cd:38:b7:2a:fe:56:11:71:d7:c7:0c:
85:3a:25:24:8d:8e:5a:b4:d2:8b:15:b4:15:0a:53:
42:cf:f2:da:18:18:7b:7a:96:bd:e0:14:53:24:85:
d4:81:5d:1e:f8:5a:f5:ae:4a:bf:81:39:50:55:65:
49:c8:90:e5:a9:d6:8c:11:b8:ae:f6:41:bd:4c:60:
c3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:23:B0:D9:66:55:88:B1:CC:FE:76:97:AA:7B:09:51:D6:45:B3:8B
X509v3 Authority Key Identifier:
keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ce:f2:f3:bf:da:09:65:bc:e1:65:36:7a:50:83:d2:de:c9:
1b:b9:e1:ef:67:2c:ef:f5:42:30:bb:99:97:79:c2:fc:bc:ac:
5e:80:38:d6:54:8f:61:72:94:da:f6:25:15:15:97:b2:51:d3:
14:db:a4:27:fd:72:3a:5b:cd:61:66:b9:6f:c9:6e:59:d2:58:
61:0c:c3:23:04:bf:be:44:8f:bf:d3:07:c6:19:d5:6c:e3:a8:
57:e3:47:46:88:5b:a8:09:7b:5b:f7:41:2d:51:f0:df:14:b5:
41:88:a9:0d:c6:08:73:64:21:c0:c7:60:e6:00:27:a4:b5:4e:
eb:7c:61:74:01:19:74:60:67:5e:6d:ab:52:cf:1d:6b:2d:3a:
98:b9:67:1b:97:23:bc:35:bf:e5:18:bc:f0:8d:1c:d5:d4:43:
16:d3:a8:a5:81:6a:fc:59:ae:8a:c5:3f:5b:b2:90:9f:af:a5:
80:4e:5b:be:8d:41:6c:a6:a7:8a:f7:23:fc:25:a1:4b:3a:a1:
51:28:ec:7e:19:a8:5e:d2:bb:1c:a1:da:52:14:c6:ba:91:3f:
09:bd:ea:27:72:9a:d8:fc:7a:3d:c4:88:58:5a:13:e2:fa:2b:
52:00:e2:80:00:e8:8d:57:6a:74:2b:75:bf:85:8f:60:ae:bb:
78:2b:87:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:18 2025 by rpki-client