
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
File: mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json)
Hash identifier: NoZRHQ22R7ezh1L3UoREKwJs8KrfeD6RFF7K+I578C0=
Subject key identifier: 54:BB:C5:F3:34:36:F6:BF:C1:42:1D:F7:FD:82:1C:12:E1:A6:F9:B4
Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
Certificate issuer: /CN=98699e00c11751d01b35e35fc0297da26eac79ea
Certificate serial: 019923A0F7DBFCB665CDC85CE7616CADA2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
Manifest number: 041B
Signing time: Sun 07 Sep 2025 10:02:55 +0000
Manifest this update: Sun 07 Sep 2025 10:02:55 +0000
Manifest next update: Mon 08 Sep 2025 10:02:55 +0000
Files and hashes: 1: D8t9LetVYSLLb_TLh9xUmyS0_cE.roa (hash: 6STeuA04n6UbXt4NmyiolKvnu452YSYrUoVlj4sED8M=)
2: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: wccMaAcQEb5F3GOC879cxpylMthnlM/o1vZkBJ1Cxyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:f7:db:fc:b6:65:cd:c8:5c:e7:61:6c:ad:a2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea
Validity
Not Before: Sep 7 10:02:55 2025 GMT
Not After : Sep 8 10:02:55 2025 GMT
Subject: CN=54bbc5f33436f6bfc1421df7fd821c12e1a6f9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:be:4b:df:3e:10:44:6a:fc:70:e1:b5:f0:
80:13:7f:df:c6:fc:a6:92:5a:09:b8:e1:57:a2:b6:
38:af:9c:ca:c7:0e:6c:db:2a:2f:f5:d8:e8:9a:4c:
3f:1b:ef:b4:7d:e3:be:39:93:fc:17:81:ad:68:9b:
f6:c1:86:9b:a3:68:18:98:ad:d3:2d:23:95:25:68:
7f:7c:d9:ff:cc:15:3d:67:2b:14:a9:b9:c2:28:6e:
e8:47:b8:f5:c3:99:6e:5b:9e:83:6f:a8:a0:4d:c3:
e2:d2:4d:1d:db:1e:6f:80:ff:02:47:55:1d:72:15:
2c:6e:ac:12:db:e0:6c:bc:30:84:5c:3d:22:d3:d1:
ce:02:f0:29:9a:eb:0a:c3:48:5f:b7:47:29:b4:d7:
c2:1e:47:46:9f:f8:89:d9:39:01:1c:a7:9f:8e:e1:
e3:80:d7:34:b8:1e:9e:06:de:e0:08:1e:72:7d:b7:
18:58:f7:da:4b:50:82:28:47:dc:49:b8:13:4c:0f:
da:0f:15:75:1c:44:79:0c:f9:93:42:f7:58:7e:af:
c7:42:a6:9e:cc:d5:b5:23:d7:c9:7f:02:09:09:db:
78:e5:7c:b8:0d:64:a0:26:41:05:71:f0:40:20:b3:
52:14:c5:7d:d2:00:74:67:02:69:1e:85:a6:36:f6:
24:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BB:C5:F3:34:36:F6:BF:C1:42:1D:F7:FD:82:1C:12:E1:A6:F9:B4
X509v3 Authority Key Identifier:
keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c5:25:4f:ce:7d:81:16:07:eb:16:0e:6b:60:f7:50:8e:4d:
ef:64:14:f5:0d:38:0f:69:79:b9:f1:29:6d:71:7e:02:d9:85:
06:2c:bb:85:60:f7:bc:05:ce:f0:ba:ea:65:25:e9:e6:e6:14:
0a:17:ff:62:6f:95:5d:5d:c7:7d:a3:3f:1a:a2:bd:c1:c8:b0:
ff:9a:39:5d:ff:29:0b:2c:85:ef:5e:72:97:7d:6b:0a:79:08:
b2:b2:f0:f5:a8:ce:1b:68:99:fc:79:0d:84:05:08:ca:37:96:
bf:d1:96:b1:6a:be:48:59:4f:25:b2:4d:58:b1:3c:8b:68:dc:
a6:8c:fe:30:8e:af:7f:3e:58:44:7c:3d:b8:5c:7c:c5:ca:21:
e1:6f:b1:ed:9f:b7:24:0c:fc:ed:d5:5e:4e:e6:14:61:61:9a:
3d:2d:8b:6d:02:ee:47:af:c9:7c:b1:9a:4b:7b:25:97:43:fb:
17:f3:d8:b0:d3:ae:df:2b:0a:cb:f9:0c:6e:58:e4:83:30:9b:
87:c1:84:01:41:4a:d7:6d:90:42:38:7a:4b:fb:05:ab:52:d3:
9f:22:54:aa:49:62:b4:d6:d1:82:bb:60:2d:65:11:37:3f:15:
f5:14:aa:a2:a9:87:cd:fd:fe:46:cb:89:4b:da:ef:8e:a3:fa:
af:1f:d3:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoPfb/LZlzchc52FsraLJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4Njk5ZTAwYzExNzUxZDAxYjM1ZTM1ZmMwMjk3ZGEyNmVh
Yzc5ZWEwHhcNMjUwOTA3MTAwMjU1WhcNMjUwOTA4MTAwMjU1WjAzMTEwLwYDVQQD
Eyg1NGJiYzVmMzM0MzZmNmJmYzE0MjFkZjdmZDgyMWMxMmUxYTZmOWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1++S98+EERq/HDhtfCAE3/fxvym
kloJuOFXorY4r5zKxw5s2yov9djomkw/G++0feO+OZP8F4GtaJv2wYabo2gYmK3T
LSOVJWh/fNn/zBU9ZysUqbnCKG7oR7j1w5luW56Db6igTcPi0k0d2x5vgP8CR1Ud
chUsbqwS2+BsvDCEXD0i09HOAvApmusKw0hft0cptNfCHkdGn/iJ2TkBHKefjuHj
gNc0uB6eBt7gCB5yfbcYWPfaS1CCKEfcSbgTTA/aDxV1HER5DPmTQvdYfq/HQqae
zNW1I9fJfwIJCdt45Xy4DWSgJkEFcfBAILNSFMV90gB0ZwJpHoWmNvYkMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFS7xfM0Nva/wUId9/2CHBLhpvm0MB8GA1UdIwQY
MBaAFJhpngDBF1HQGzXjX8ApfaJurHnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8xZDQ1OTYtNmFlMy00ODBlLWFkMTYt
NzYxNTFiYjk3MTlkLzEvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8xZDQ1OTYtNmFlMy00ODBlLWFkMTYtNzYxNTFiYjk3MTlk
LzEvbUdtZUFNRVhVZEFiTmVOZndDbDlvbTZzZWVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMUlT859
gRYH6xYOa2D3UI5N72QU9Q04D2l5ufEpbXF+AtmFBiy7hWD3vAXO8LrqZSXp5uYU
Chf/Ym+VXV3HfaM/GqK9wciw/5o5Xf8pCyyF715yl31rCnkIsrLw9ajOG2iZ/HkN
hAUIyjeWv9GWsWq+SFlPJbJNWLE8i2jcpoz+MI6vfz5YRHw9uFx8xcoh4W+x7Z+3
JAz87dVeTuYUYWGaPS2LbQLuR6/JfLGaS3sll0P7F/PYsNOu3ysKy/kMbljkgzCb
h8GEAUFK122QQjh6S/sFq1LTnyJUqklitNbRgrtgLWURNz8V9RSqoqmHzf3+RsuJ
S9rvjqP6rx/TTw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:13 2025 by rpki-client