Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
File: cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft (raw, json)
Hash identifier: s2tiSdW+2mYOPhJeaVgqlTY59prXYHZLxzzak23wdzw=
Subject key identifier: 6D:6F:78:3F:05:67:C8:98:0D:83:85:F9:FC:9E:3A:BB:B5:43:32:B5
Authority key identifier: 70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
Certificate issuer: /CN=70c12309ee98d442ec8a7650127eb0e621894df1
Certificate serial: 0197C838EE26441CFE8AF9F9E5069A064768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
Manifest number: 15BE
Signing time: Tue 01 Jul 2025 23:01:03 +0000
Manifest this update: Tue 01 Jul 2025 23:01:03 +0000
Manifest next update: Wed 02 Jul 2025 23:01:03 +0000
Files and hashes: 1: 8Lh_EZUjo4d8T-WMsVc5_oid1Mo.roa (hash: cbyV06wf44D7SymSNRd5DeNmzcspVDJoD1qFeH8lxNU=)
2: cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl (hash: RrmqViJRQ0y06KAuA7LSPEpIn9/+c4sO2xkCWocDH58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:38:ee:26:44:1c:fe:8a:f9:f9:e5:06:9a:06:47:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70c12309ee98d442ec8a7650127eb0e621894df1
Validity
Not Before: Jul 1 23:01:03 2025 GMT
Not After : Jul 2 23:01:03 2025 GMT
Subject: CN=6d6f783f0567c8980d8385f9fc9e3abbb54332b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:0f:d2:11:e8:e0:41:52:22:43:a9:78:c6:
29:df:de:d9:18:fc:5f:8c:01:fe:52:95:85:d1:ad:
55:ba:fd:db:2e:ea:c3:67:a1:e6:2c:7b:f7:c3:c7:
d7:b3:4d:0d:46:f3:a1:9c:6f:04:a5:15:53:e8:a9:
7d:ca:42:ac:66:3a:5d:84:f0:d7:2f:9e:cf:5a:eb:
3a:8b:1d:dd:02:72:17:79:f2:cf:ad:bb:c1:53:70:
4c:bd:13:e6:c8:9f:5a:a1:f3:35:64:ae:eb:3c:4f:
8a:58:cd:ec:53:5d:bd:86:52:9a:56:14:04:10:5e:
a8:80:7d:86:1d:5e:c9:6f:86:9f:f1:29:3b:c3:f5:
e9:49:7b:4c:2a:6c:d8:53:26:f4:e5:42:72:b5:08:
44:51:31:31:7b:61:5e:d4:f9:95:cd:b7:9f:02:d6:
57:e9:cd:9f:f9:e4:b8:82:06:28:6e:1c:89:6b:b2:
ce:ac:4d:43:f7:8f:2d:aa:2b:f6:d4:a8:c5:ef:c8:
36:f2:1c:de:13:e8:c2:90:2f:40:36:9f:14:8a:ed:
82:1b:9d:20:30:e9:a1:46:e5:77:4b:16:8b:8b:02:
a5:de:10:a5:6e:f2:0e:5b:65:e4:ff:48:52:6a:57:
a7:0b:30:af:6d:33:6e:a4:ec:cb:cb:86:1b:53:03:
11:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6F:78:3F:05:67:C8:98:0D:83:85:F9:FC:9E:3A:BB:B5:43:32:B5
X509v3 Authority Key Identifier:
keyid:70:C1:23:09:EE:98:D4:42:EC:8A:76:50:12:7E:B0:E6:21:89:4D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMEjCe6Y1ELsinZQEn6w5iGJTfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/69b290-d375-4e89-8fb5-fb235dba7b18/1/cMEjCe6Y1ELsinZQEn6w5iGJTfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:43:a5:ee:27:17:7a:98:24:ac:04:40:7d:27:f9:95:ee:02:
f7:7f:fc:84:f8:6e:36:6d:9c:2a:79:00:a5:cc:39:59:4c:d2:
b8:b3:88:77:50:b3:8e:15:4b:53:99:fb:63:7e:e9:4a:54:eb:
a7:bd:90:8f:83:7e:93:7e:5c:e2:c3:9b:9e:6e:d7:3f:34:0c:
9f:d0:a3:d1:64:cc:46:a3:d2:d4:0b:74:18:86:8a:3f:b0:57:
6f:b0:56:b1:d3:e7:60:91:a6:19:7b:39:06:4c:02:21:63:16:
2c:16:0e:d7:d4:3a:fe:01:2f:74:c8:5b:30:27:c9:cc:0c:24:
d0:8c:48:64:63:96:55:24:fb:82:96:83:90:71:73:b2:e0:b3:
13:ca:4a:5f:c2:be:b9:18:86:ec:aa:50:7b:64:78:23:10:ef:
fe:9c:6b:80:0b:48:58:df:92:29:e4:17:96:89:69:2d:f0:c3:
2b:c9:a5:d5:14:4b:7f:0e:06:3a:56:cf:da:5d:c3:bb:21:28:
d9:04:ea:59:2a:f1:35:58:3d:3e:ed:49:ec:22:78:27:d4:9e:
ed:e8:27:40:a1:5a:1a:4b:dc:db:cf:1b:e6:a0:bb:f7:55:ee:
1b:29:e3:58:87:32:01:d2:3d:85:ce:92:c3:48:96:5f:90:f8:
b6:c8:89:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:04:12 2025 by rpki-client