Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
File: mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json)
Hash identifier: kzg1ezNKYByMsfPZcpuh+z95h1+gNOiTuXuPD9bVIzw=
Subject key identifier: CC:2E:43:77:67:DC:54:66:6C:2D:EE:49:7D:68:BF:A0:03:DC:7D:F5
Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
Certificate issuer: /CN=98699e00c11751d01b35e35fc0297da26eac79ea
Certificate serial: 0197B6A23278E6AD3BC01FDC39B74C2982B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
Manifest number: 035E
Signing time: Sat 28 Jun 2025 13:02:52 +0000
Manifest this update: Sat 28 Jun 2025 13:02:52 +0000
Manifest next update: Sun 29 Jun 2025 13:02:52 +0000
Files and hashes: 1: D8t9LetVYSLLb_TLh9xUmyS0_cE.roa (hash: 6STeuA04n6UbXt4NmyiolKvnu452YSYrUoVlj4sED8M=)
2: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: pFic9BEABY+YSvXA4sXeNXziCoIS/Yu81lkl/8A0Mas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:32:78:e6:ad:3b:c0:1f:dc:39:b7:4c:29:82:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea
Validity
Not Before: Jun 28 13:02:52 2025 GMT
Not After : Jun 29 13:02:52 2025 GMT
Subject: CN=cc2e437767dc54666c2dee497d68bfa003dc7df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:57:40:58:96:c0:3c:1f:b3:82:43:48:78:2a:
4d:2f:74:3e:96:eb:93:97:c5:c8:b8:da:31:97:8d:
17:ef:7c:7c:7b:96:26:a3:52:ae:a8:53:77:bf:68:
7e:9f:f3:28:a7:40:f3:9b:5c:e9:2d:18:b2:a3:20:
09:8e:2d:be:39:59:4f:9c:fc:d1:95:99:1a:e5:3e:
72:62:ba:1d:15:ce:3b:cb:47:36:48:d5:7f:54:e2:
2d:7a:93:aa:77:b0:46:7c:4c:26:e4:09:43:86:c3:
31:94:35:ab:e5:75:67:c8:f1:be:2a:da:d1:d5:de:
62:5b:93:36:d0:a4:86:1e:cb:83:29:32:8c:23:a0:
dc:ae:8c:b3:a1:32:35:7f:32:af:08:f2:ec:6d:66:
70:43:b4:16:b3:b4:13:9a:2f:1d:10:d8:06:d5:97:
d0:68:13:bb:de:c6:81:17:4d:3a:a9:e7:f5:6f:f9:
3d:10:47:36:28:79:0f:fc:9b:51:3b:51:ec:23:5b:
23:81:7e:cb:43:63:77:e2:c7:d5:75:1a:41:b0:57:
ad:68:23:4c:90:9b:94:17:61:c0:5e:b8:87:c9:39:
90:4a:df:58:55:fb:bc:ed:5a:7a:79:00:ab:d9:58:
81:d3:df:57:63:8f:89:a7:71:3d:99:34:38:ff:e0:
70:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2E:43:77:67:DC:54:66:6C:2D:EE:49:7D:68:BF:A0:03:DC:7D:F5
X509v3 Authority Key Identifier:
keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d1:aa:c6:11:d0:67:27:23:d9:53:8b:6f:83:4e:b6:b5:45:
c9:d5:b5:ca:6b:15:b6:d2:81:d3:b5:d3:a3:b3:01:80:f8:07:
af:b2:91:dc:6a:d2:55:be:a0:4e:25:15:55:19:30:44:8f:de:
c2:fe:84:09:1e:67:bf:4f:bf:a4:30:27:03:08:fe:5a:25:46:
43:a3:39:73:8d:ca:c7:25:ff:b0:16:99:32:c4:01:83:71:e7:
e8:e4:9b:87:4a:2c:75:fb:f3:9a:7c:b2:81:3d:ae:82:7f:34:
ee:da:a0:01:a9:f5:62:3d:d4:14:3c:a1:68:9c:1c:21:9a:c2:
2f:ac:c2:27:ff:f5:53:0b:ed:ca:80:98:45:fd:bc:9b:e4:a8:
13:ff:9a:67:d3:a2:4d:d0:65:30:cb:0b:24:2a:04:b8:f0:da:
01:e2:d2:04:3a:f3:99:54:d0:d8:2d:08:80:15:18:cf:a3:97:
72:f6:f6:5e:09:5c:5d:42:6b:c4:1f:41:d0:81:bd:8f:27:1a:
e2:b3:f8:ff:9f:57:6d:42:c2:92:d1:74:e1:f1:7b:b3:86:b3:
eb:49:46:ec:da:7a:f3:6a:cd:9f:41:0e:e2:3c:ff:43:3e:20:
97:c2:6c:a5:b8:49:d0:03:e8:c7:03:d5:1c:e8:67:f1:18:f9:
f8:47:da:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:36 2025 by rpki-client