Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
File: m-CmEeBni40ynuVQMSskbg3PRpg.mft (raw, json)
Hash identifier: ttio+/JbN1alQ9IV0cTId5NaBn85FStjd7uQ+3pyP50=
Subject key identifier: 3C:70:61:47:E9:38:8A:11:91:5D:C2:3B:C6:E2:92:E0:9E:67:30:E7
Authority key identifier: 9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
Certificate issuer: /CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Certificate serial: 0199FDD97E24392777DECF0736F485A37BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:53 +0000
Manifest this update: Sun 19 Oct 2025 19:01:53 +0000
Manifest next update: Mon 20 Oct 2025 19:01:53 +0000
Files and hashes: 1: m-CmEeBni40ynuVQMSskbg3PRpg.crl (hash: McSLZT/ts5J93Gm27DYNBGw0DKQ5V13tMzZZWbn/nLM=)
2: r7gX59Qqj2m8tkfxKOifStnrTtw.roa (hash: NQ9wPPqnM3aQNBwThdDuKiLJ5LhU3Tk2rpFlfHyhTPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:7e:24:39:27:77:de:cf:07:36:f4:85:a3:7b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Validity
Not Before: Oct 19 19:01:53 2025 GMT
Not After : Oct 20 19:01:53 2025 GMT
Subject: CN=3c706147e9388a11915dc23bc6e292e09e6730e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:7e:78:48:98:b7:51:05:26:ef:99:bb:9e:
33:46:39:b2:e3:3c:b0:07:7f:4a:be:15:20:96:e8:
60:ef:df:c2:72:bb:b8:0d:a0:24:a9:c1:5b:75:ee:
51:d8:8e:10:11:07:91:f2:c6:cb:2d:74:0a:39:7a:
e5:d8:e8:c0:10:20:db:eb:1f:5d:dd:9a:be:89:ff:
93:20:24:b6:df:cb:ec:a5:69:30:b5:d6:ea:d6:c1:
54:b2:19:95:08:3a:0d:af:bf:3f:43:36:33:81:ca:
16:df:9d:6e:6b:26:f7:aa:67:34:19:9b:f2:6d:86:
da:85:73:3b:e3:01:3a:29:ce:11:ec:f4:fb:f0:87:
aa:88:1c:26:f0:11:aa:fb:cd:78:4f:e2:ba:8c:a8:
f4:34:fb:2e:2a:45:51:62:e4:b8:02:63:fc:32:a2:
cf:44:c9:3b:a0:5d:d6:7e:60:50:69:2a:91:ae:f4:
47:48:03:61:59:83:bc:6e:2e:f1:47:51:09:d9:04:
ab:ec:0d:f9:65:19:aa:c9:2e:cb:4c:e4:c5:79:3b:
20:8d:bc:1f:22:d9:b6:68:a6:25:eb:1b:70:ea:68:
34:60:b5:0f:39:6d:28:8f:6a:ef:1a:41:99:1a:0e:
70:af:c6:64:f5:83:a6:7b:19:c7:b0:3e:b0:7b:08:
12:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:70:61:47:E9:38:8A:11:91:5D:C2:3B:C6:E2:92:E0:9E:67:30:E7
X509v3 Authority Key Identifier:
keyid:9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c0:bc:d0:d3:e4:2b:2a:14:56:27:a9:c5:ef:08:36:21:a1:
42:9e:49:02:c6:5c:1b:2a:6e:01:83:00:8b:fa:b9:51:a3:b7:
5f:d8:a1:8d:55:62:7a:69:cd:38:e1:05:ca:5e:af:3c:c0:ae:
22:8d:1d:a9:9f:25:13:5c:3a:cf:56:ce:0d:8f:93:b0:54:5a:
24:ab:a3:24:ab:7e:ee:77:f0:eb:e6:42:f9:47:aa:39:a1:b4:
19:cb:84:20:55:aa:80:94:26:98:51:80:41:b9:21:40:1b:8b:
34:c1:10:65:48:9e:3c:00:a2:97:cf:9b:ab:8a:87:7f:7a:da:
26:ce:90:c8:ce:87:57:7a:3b:91:b8:e3:fd:61:1e:9f:49:db:
44:33:33:5b:36:37:d6:a3:4b:4a:c7:d5:44:ed:ab:36:06:2d:
9d:1e:ce:ab:df:64:78:2e:25:1a:f4:c2:98:a6:64:5a:4c:02:
83:12:1b:3c:4a:fb:14:11:c8:d7:3b:23:fd:01:49:48:ce:5b:
7c:75:c0:76:a0:37:6e:49:cf:f7:67:67:2a:bf:36:62:0b:75:
b2:05:2c:7c:42:10:0b:4b:51:d8:ac:ae:da:2f:5f:c6:f5:16:
06:94:9d:a1:48:aa:a7:12:6b:da:89:14:c6:ce:78:fa:14:8e:
ba:01:c7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:53 2025 by rpki-client