Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
File: cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft (raw, json)
Hash identifier: ALt5VnvQg1JTYYraaKFS/yaXWPoHZH9xj52reBS61EI=
Subject key identifier: 69:B6:1C:FB:0A:C8:EC:A5:0D:55:13:CC:98:64:77:14:F5:EA:33:A3
Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
Certificate issuer: /CN=70c12309ee98d442ec8a7650127eb0e621894df1
Certificate serial: 0199FE104F4BD0312891D66182C6AFEE72E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 20:01:45 +0000
Manifest this update: Sun 19 Oct 2025 20:01:45 +0000
Manifest next update: Mon 20 Oct 2025 20:01:45 +0000
Files and hashes: 1: 8Lh_EZUjo4d8T-WMsVc5_oid1Mo.roa (hash: cbyV06wf44D7SymSNRd5DeNmzcspVDJoD1qFeH8lxNU=)
2: cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl (hash: JskLx2Ul6wmotTEJ9L74oDOv+oqrxVJJb2Swjdc1mIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:4f:4b:d0:31:28:91:d6:61:82:c6:af:ee:72:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1
Validity
Not Before: Oct 19 20:01:45 2025 GMT
Not After : Oct 20 20:01:45 2025 GMT
Subject: CN=69b61cfb0ac8eca50d5513cc98647714f5ea33a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:93:56:be:2a:60:13:7c:95:a8:2c:14:48:7a:
51:ba:bf:29:55:58:35:b7:8c:4d:4f:d2:67:f6:ba:
15:b0:4e:6a:a2:3a:ae:64:a3:60:fe:c5:17:7f:6c:
81:bd:26:a3:7b:ec:3e:03:39:df:be:64:d8:f4:7d:
2d:92:4e:7b:72:41:a1:f8:28:67:53:08:84:45:bb:
c8:bd:3c:e7:5f:bc:9d:5a:d2:9a:75:98:eb:ab:76:
d8:52:0d:82:9b:cd:d2:48:ff:9b:e2:88:7f:51:c7:
6a:47:d4:d6:e4:b4:ec:9a:d7:dc:8d:67:f6:b7:89:
6c:a8:09:d9:4f:e6:63:d0:08:32:c5:3f:99:3f:26:
b9:dd:14:a7:1c:9b:a5:17:09:7c:e8:90:e1:e7:79:
31:0a:87:f1:91:af:71:02:68:a9:fd:75:85:ea:34:
2b:b1:76:42:d5:86:3e:da:20:b6:35:73:0d:98:fe:
31:30:97:4f:b9:f5:68:7f:ce:50:ea:56:be:11:a3:
c3:bc:1e:9b:77:d8:1b:ff:23:2f:07:1f:53:00:18:
2d:88:79:1d:33:d5:0d:ba:d0:f0:21:15:f0:9d:b9:
46:de:8b:da:25:3e:9b:0b:e2:58:35:ad:25:56:3b:
5c:49:80:45:9b:e2:5a:64:6d:de:95:a3:6e:92:52:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B6:1C:FB:0A:C8:EC:A5:0D:55:13:CC:98:64:77:14:F5:EA:33:A3
X509v3 Authority Key Identifier:
keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:33:dd:55:bd:9b:c6:94:37:fb:9b:6a:81:da:6c:ed:41:f9:
42:97:da:58:df:d4:e5:64:25:ee:04:c2:ad:3b:ec:9e:7b:cc:
11:d2:2f:f0:bb:17:07:33:7f:d6:55:71:00:c1:6c:9a:73:2d:
c1:25:68:15:01:fc:90:31:61:19:c3:9e:79:4f:81:70:76:d2:
05:2b:89:b8:6b:9d:df:d7:3e:e7:23:3e:ea:f6:e4:d1:40:88:
a3:de:16:43:71:a9:38:27:4a:d0:88:b8:c7:3d:67:98:9e:4e:
9e:03:37:34:3e:c5:67:02:4a:f8:51:17:14:fb:27:3b:e8:d6:
a4:8b:bd:75:d0:c6:6f:df:60:55:18:84:42:eb:7d:9f:dc:6d:
78:a2:6b:a8:05:0f:be:63:cd:4c:60:2d:fe:ed:d5:7f:e5:7f:
b5:f2:a1:1f:af:3b:15:56:45:05:76:98:45:f8:94:3c:47:46:
01:b6:30:7f:c9:f5:89:23:7e:d6:36:f7:a9:1a:9f:88:5d:fa:
24:ef:b1:e7:11:70:af:a8:ff:4d:7e:f0:ac:eb:9c:5c:fb:9c:
47:8e:c8:63:b7:06:c3:ba:6d:6b:15:57:17:60:b4:c3:6f:13:
80:4a:4c:a8:98:56:63:a8:eb:71:d8:01:ca:2f:4e:34:60:75:
44:49:20:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EE9L0DEokdZhgsav7nLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYzEyMzA5ZWU5OGQ0NDJlYzhhNzY1MDEyN2ViMGU2MjE4
OTRkZjEwHhcNMjUxMDE5MjAwMTQ1WhcNMjUxMDIwMjAwMTQ1WjAzMTEwLwYDVQQD
Eyg2OWI2MWNmYjBhYzhlY2E1MGQ1NTEzY2M5ODY0NzcxNGY1ZWEzM2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpNWvipgE3yVqCwUSHpRur8pVVg1
t4xNT9Jn9roVsE5qojquZKNg/sUXf2yBvSaje+w+AznfvmTY9H0tkk57ckGh+Chn
UwiERbvIvTznX7ydWtKadZjrq3bYUg2Cm83SSP+b4oh/UcdqR9TW5LTsmtfcjWf2
t4lsqAnZT+Zj0AgyxT+ZPya53RSnHJulFwl86JDh53kxCofxka9xAmip/XWF6jQr
sXZC1YY+2iC2NXMNmP4xMJdPufVof85Q6la+EaPDvB6bd9gb/yMvBx9TABgtiHkd
M9UNutDwIRXwnblG3ovaJT6bC+JYNa0lVjtcSYBFm+JaZG3elaNuklKqEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGm2HPsKyOylDVUTzJhkdxT16jOjMB8GA1UdIwQY
MBaAFHDBIwnumNRC7Ip2UBJ+sOYhiU3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82OWIyOTAtZDM3NS00ZTg5LThmYjUt
ZmIyMzVkYmE3YjE4LzEvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi82OWIyOTAtZDM3NS00ZTg5LThmYjUtZmIyMzVkYmE3YjE4
LzEvY01FakNlNlkxRUxzaW5aUUVuNnc1aUdKVGZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqjPdVb2b
xpQ3+5tqgdps7UH5QpfaWN/U5WQl7gTCrTvsnnvMEdIv8LsXBzN/1lVxAMFsmnMt
wSVoFQH8kDFhGcOeeU+BcHbSBSuJuGud39c+5yM+6vbk0UCIo94WQ3GpOCdK0Ii4
xz1nmJ5OngM3ND7FZwJK+FEXFPsnO+jWpIu9ddDGb99gVRiEQut9n9xteKJrqAUP
vmPNTGAt/u3Vf+V/tfKhH687FVZFBXaYRfiUPEdGAbYwf8n1iSN+1jb3qRqfiF36
JO+x5xFwr6j/TX7wrOucXPucR47IY7cGw7ptaxVXF2C0w28TgEpMqJhWY6jrcdgB
yi9ONGB1REkg3A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:06 2025 by rpki-client