Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
File: m-CmEeBni40ynuVQMSskbg3PRpg.mft (raw, json)
Hash identifier: BRwpT4aK1yuuML7P+W+K8eDX2wkl+v2UiOa8mxL6pRQ=
Subject key identifier: A5:28:14:B3:F8:A2:41:EE:B7:62:BB:02:94:BD:D4:EE:6F:06:B2:0C
Authority key identifier: 9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
Certificate issuer: /CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Certificate serial: 0198D472EC73143C03FBFAE8F88591DE0F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:02:38 +0000
Manifest this update: Sat 23 Aug 2025 01:02:38 +0000
Manifest next update: Sun 24 Aug 2025 01:02:38 +0000
Files and hashes: 1: m-CmEeBni40ynuVQMSskbg3PRpg.crl (hash: 9eHGJkcvIYwEM/p6JDy0QLpCDUx4Gamuo8dipbXgwDU=)
2: r7gX59Qqj2m8tkfxKOifStnrTtw.roa (hash: NQ9wPPqnM3aQNBwThdDuKiLJ5LhU3Tk2rpFlfHyhTPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:ec:73:14:3c:03:fb:fa:e8:f8:85:91:de:0f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Validity
Not Before: Aug 23 01:02:38 2025 GMT
Not After : Aug 24 01:02:38 2025 GMT
Subject: CN=a52814b3f8a241eeb762bb0294bdd4ee6f06b20c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:f9:78:22:9b:ca:54:48:4b:14:67:28:10:
1d:0f:68:f7:ff:1c:32:5f:55:6e:7f:00:12:5c:62:
ac:f0:21:c8:53:35:90:ed:99:d6:55:6e:1e:72:77:
15:c8:a7:8f:e9:9c:58:c9:92:80:9b:47:72:df:e0:
9a:97:cc:47:8f:26:1f:e7:a8:72:1d:46:6c:cf:7b:
03:98:2b:3c:4e:b9:cf:e1:b9:3f:cc:98:3b:45:f6:
fb:4a:31:50:3d:6f:24:e4:5b:0f:6d:a3:e3:a5:8e:
2a:5f:13:58:1d:b6:b8:fc:ed:ad:11:c1:24:ea:e6:
0a:e3:cb:53:63:bd:3d:86:bc:c1:4b:a3:11:89:54:
e8:14:a7:5c:2b:4b:98:f2:af:d0:cd:72:b1:b7:c8:
25:d5:89:4e:90:04:0f:26:b9:ce:37:7a:84:23:51:
aa:df:1d:69:09:b6:a6:36:42:b1:aa:de:d2:e2:8c:
11:94:1b:2b:59:ab:7e:62:bb:84:f2:c5:bb:62:1c:
f6:51:70:c3:85:09:e5:7a:12:10:4a:59:42:36:81:
8a:ee:f7:a9:73:8a:ae:cf:34:ea:af:e1:cd:42:b2:
3f:ca:73:ec:3d:ce:52:38:c4:82:41:0b:be:54:21:
93:1c:e2:e6:05:2c:35:5c:c8:20:0f:f1:3c:5d:c1:
3a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:28:14:B3:F8:A2:41:EE:B7:62:BB:02:94:BD:D4:EE:6F:06:B2:0C
X509v3 Authority Key Identifier:
keyid:9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2c:79:2f:5f:7a:84:26:ae:50:d6:8a:71:ad:0e:13:e4:98:
a6:7c:11:55:04:cf:f3:0a:08:cc:74:6c:ba:0c:1e:c0:be:dd:
6f:0d:d2:02:15:59:69:4f:18:47:0b:38:75:e2:7c:7c:e5:10:
5b:d5:9c:26:2e:e0:58:22:09:fc:7c:c7:2a:e4:21:87:75:25:
12:d3:54:3b:7a:9a:34:67:f8:13:e9:4e:51:55:5c:6d:9b:1d:
ec:c2:85:0a:76:30:c5:70:d8:d1:dc:5c:0f:26:77:3b:2c:39:
ee:7c:07:1c:c8:8f:2b:fe:18:9d:b9:5f:71:c4:b2:ab:b0:01:
52:99:98:75:54:c4:9c:2e:88:b2:7a:89:3d:d2:ac:2d:2e:23:
00:fb:88:9f:3c:c8:c7:15:cf:1c:0c:84:89:56:21:14:24:6b:
d5:95:7c:dd:aa:bb:a3:5b:2d:5c:ed:9a:4d:cb:11:e5:c5:7b:
4f:f1:e0:40:c4:33:50:97:ef:b2:d1:37:6f:d2:aa:38:07:a5:
37:38:a8:5d:b5:1a:55:67:a1:be:c4:07:6b:ea:9d:e4:5a:58:
1e:c0:d6:d1:34:f3:db:d5:47:45:11:69:1c:36:98:3a:7b:f6:
9f:73:97:2b:5f:c9:15:e2:b7:83:1f:49:7d:ab:46:a8:77:2a:
e5:e7:67:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:56 2025 by rpki-client