Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
File: mGmeAMEXUdAbNeNfwCl9om6seeo.mft (raw, json)
Hash identifier: jh/M6huDq6YNkTev5FqKoL4ndbSUvlXJBxl8dk1AoDQ=
Subject key identifier: AC:0D:C3:D6:42:EA:97:59:1C:E2:A1:35:50:67:10:5D:27:64:90:C4
Authority key identifier: 98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
Certificate issuer: /CN=98699e00c11751d01b35e35fc0297da26eac79ea
Certificate serial: 019A50E3740EFA53D77BC3317569B3D9672F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
Manifest number: 04B7
Signing time: Tue 04 Nov 2025 22:01:14 +0000
Manifest this update: Tue 04 Nov 2025 22:01:14 +0000
Manifest next update: Wed 05 Nov 2025 22:01:14 +0000
Files and hashes: 1: D8t9LetVYSLLb_TLh9xUmyS0_cE.roa (hash: 6STeuA04n6UbXt4NmyiolKvnu452YSYrUoVlj4sED8M=)
2: mGmeAMEXUdAbNeNfwCl9om6seeo.crl (hash: VkS/70nCjZQGH3mi6LlFnpglICdov+fB/8nxROyouVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:74:0e:fa:53:d7:7b:c3:31:75:69:b3:d9:67:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98699e00c11751d01b35e35fc0297da26eac79ea
Validity
Not Before: Nov 4 22:01:14 2025 GMT
Not After : Nov 5 22:01:14 2025 GMT
Subject: CN=ac0dc3d642ea97591ce2a1355067105d276490c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cb:c4:cc:a2:59:44:3f:a2:e2:86:a7:c3:3b:
c0:d0:9e:7b:cb:87:08:98:df:b3:3c:33:b0:10:b9:
9e:04:21:45:2a:b6:f5:52:dc:90:b6:9f:73:57:3e:
fb:b4:61:be:7c:f2:67:42:84:80:05:30:12:9e:07:
9e:f7:20:2e:49:4b:73:43:40:13:ff:54:a8:f0:2e:
e9:b5:c2:d7:3f:35:c3:bd:1d:56:3f:b2:e2:5c:9a:
13:5a:de:ea:b3:73:ba:83:bc:4a:73:5d:c1:d9:c0:
fd:c1:1b:03:d2:d1:d0:8f:8a:35:a4:f0:bd:ec:41:
4d:64:16:f1:60:bf:0a:74:8e:ba:c3:56:a2:6f:31:
f1:a8:d9:02:4a:ff:25:ef:c0:14:59:07:ee:03:d9:
00:a3:9d:b4:d0:da:1c:bc:f5:07:67:01:fb:cf:3c:
7c:57:b8:7e:fc:fa:0c:c8:cb:b7:bd:f6:34:16:4a:
e3:16:0a:e0:88:2f:ad:6a:b0:44:ac:f7:b5:39:78:
4b:20:6a:bb:15:e9:fb:0b:91:05:7b:fc:f8:13:d1:
61:3a:a2:fa:53:ea:76:41:a3:d1:8b:5d:64:6b:2d:
f2:9a:34:0d:50:37:b8:b9:81:8f:8a:05:6d:0b:e6:
d8:23:10:e8:8f:df:a4:63:ca:55:63:fc:23:70:e5:
ea:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0D:C3:D6:42:EA:97:59:1C:E2:A1:35:50:67:10:5D:27:64:90:C4
X509v3 Authority Key Identifier:
keyid:98:69:9E:00:C1:17:51:D0:1B:35:E3:5F:C0:29:7D:A2:6E:AC:79:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGmeAMEXUdAbNeNfwCl9om6seeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/1d4596-6ae3-480e-ad16-76151bb9719d/1/mGmeAMEXUdAbNeNfwCl9om6seeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3f:1e:c5:e6:c2:cb:31:7a:91:f2:0b:46:f8:0c:95:9e:73:
cc:a0:36:d2:87:77:d2:cb:58:03:95:78:55:e5:21:91:32:14:
08:3b:ec:48:1f:5d:52:29:b6:99:a3:48:67:17:aa:42:5b:a1:
84:e7:8f:63:fc:1b:2b:2c:06:c8:e3:78:a0:9e:3a:c7:27:63:
42:d9:e9:bf:41:89:a3:c4:65:f8:63:28:f7:75:e1:c6:ef:fc:
73:85:4f:6f:9c:38:30:d7:72:d3:1a:2e:1e:45:cb:95:33:58:
95:9b:0a:19:d7:05:81:73:39:c9:78:c6:ea:47:ba:fa:0d:0c:
c6:96:40:a7:8a:5a:99:a9:42:83:58:ca:a2:5f:9d:f4:85:0e:
81:55:e6:e9:61:98:70:c6:66:b6:5d:c1:91:f3:a7:7e:16:5a:
d2:4f:d3:f8:5a:ba:46:a6:21:21:e2:51:a1:9a:6a:67:d5:44:
59:c6:97:bf:7e:b2:63:02:0f:76:3d:c7:97:f0:25:4b:40:4b:
b8:33:e7:f5:fb:69:03:2e:7e:74:43:32:ec:da:18:4c:2e:f4:
76:96:9d:fe:75:93:a3:c1:fe:b0:7a:81:a9:8c:39:b3:d4:63:
c4:64:74:70:a2:2f:ed:5e:32:07:00:43:c6:7c:b5:a1:b1:1c:
56:cf:ee:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:55 2025 by rpki-client