Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
File: m-CmEeBni40ynuVQMSskbg3PRpg.mft (raw, json)
Hash identifier: Z+keHKU8U5VLMUP8w2fsX4tlsmcGBy7KCnVd0bDx1j0=
Subject key identifier: 1A:44:D9:D0:7B:7D:81:63:49:BC:D2:C2:09:1D:DA:82:A6:1C:D4:85
Authority key identifier: 9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
Certificate issuer: /CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Certificate serial: 019921B126E6A44B450403CB76D56C622522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 01:01:21 +0000
Manifest this update: Sun 07 Sep 2025 01:01:21 +0000
Manifest next update: Mon 08 Sep 2025 01:01:21 +0000
Files and hashes: 1: m-CmEeBni40ynuVQMSskbg3PRpg.crl (hash: uEpochNJk4+FN6O0Mnyh01Fap6ByzVy/XFDlWFial9k=)
2: r7gX59Qqj2m8tkfxKOifStnrTtw.roa (hash: NQ9wPPqnM3aQNBwThdDuKiLJ5LhU3Tk2rpFlfHyhTPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:26:e6:a4:4b:45:04:03:cb:76:d5:6c:62:25:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Validity
Not Before: Sep 7 01:01:21 2025 GMT
Not After : Sep 8 01:01:21 2025 GMT
Subject: CN=1a44d9d07b7d816349bcd2c2091dda82a61cd485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:c1:65:4b:e9:8d:33:ba:ec:e7:83:a7:3a:
a0:e1:7f:43:f2:98:a8:14:7e:ce:98:37:b2:d2:fb:
2e:d0:c6:a8:5c:9b:9a:81:29:87:85:b6:7b:c2:4f:
31:33:07:54:9a:d9:13:a3:92:20:64:fc:df:9b:80:
25:5d:d2:78:c6:1a:8f:88:15:4f:70:33:9d:9e:e7:
46:ad:a3:dc:13:b4:e8:7e:73:bc:a3:ba:bd:c2:98:
78:0d:fd:d7:7d:cf:94:2a:d8:32:24:72:50:da:f9:
42:cd:12:ef:c2:39:aa:24:8a:e2:90:11:01:60:f4:
6d:b0:bd:18:b8:1e:d1:bd:61:60:94:f4:fa:83:28:
bc:9a:dd:13:10:28:41:9e:91:bd:e7:04:d6:11:5e:
8f:ca:45:27:ae:b6:6b:e8:23:23:06:c1:d1:c9:f0:
4a:84:98:9a:4a:a7:25:f7:eb:57:84:1e:26:ec:27:
ab:0b:8c:10:6f:98:06:5f:94:0a:82:b8:50:1b:9a:
b6:3a:79:12:1a:c7:32:d2:bc:72:58:4e:36:44:78:
95:c4:26:9d:e8:96:b1:2f:a5:c8:2f:44:59:38:94:
06:01:d7:d4:76:bf:83:5f:78:03:2d:87:44:03:d0:
50:1b:a3:64:a3:d9:e4:cc:6d:2b:1f:78:16:f7:46:
f2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:44:D9:D0:7B:7D:81:63:49:BC:D2:C2:09:1D:DA:82:A6:1C:D4:85
X509v3 Authority Key Identifier:
keyid:9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ca:d3:62:3f:52:c8:09:65:fe:72:5b:29:8d:75:fe:98:33:
9a:75:fb:4e:b2:ab:40:c4:72:a4:fb:e1:5e:27:4e:54:d7:a1:
7d:62:ca:19:0e:22:e9:86:59:38:e4:bd:0f:68:50:01:5c:ad:
75:94:2a:88:b4:e3:af:16:cf:bb:e3:43:a2:7d:33:33:52:45:
c2:ff:33:86:99:09:8f:f4:d0:e0:56:fe:69:6f:02:14:ea:e6:
d7:1e:aa:da:d1:93:f6:c9:a9:98:b7:33:3e:87:da:77:0c:d6:
08:9c:d3:b9:f1:49:8c:d0:e9:7d:bf:81:f2:4b:66:72:95:d2:
34:0c:f9:31:d5:f9:0f:14:1c:08:dc:d1:fa:85:48:b0:1b:5e:
dc:5e:e2:9d:2b:8e:10:f3:df:f3:58:7c:44:f5:03:f8:6e:f3:
0d:e5:71:81:cd:b9:df:89:e6:45:29:d0:f1:ed:af:74:cf:04:
c8:e3:9c:c3:f8:a5:e0:73:6e:53:05:54:ed:6e:aa:f8:48:b0:
d4:c6:52:94:96:9d:93:54:fe:c7:41:8e:a7:57:96:a9:a8:80:
20:0e:0c:f7:03:8c:24:b7:a6:77:3a:29:91:8a:bb:5e:c6:66:
35:17:d7:a4:d9:3e:b6:e4:ca:05:b9:45:67:a8:e7:42:24:7a:
c7:5d:5d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:05 2025 by rpki-client