Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
File: m-CmEeBni40ynuVQMSskbg3PRpg.mft (raw, json)
Hash identifier: GZOvEphmalRQTUsAC/0C85IdXNJPrSt7wrrJhS0cUNQ=
Subject key identifier: 73:78:3A:AA:08:6E:1F:96:27:EA:79:91:FE:59:E0:92:9B:3F:E9:49
Authority key identifier: 9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
Certificate issuer: /CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Certificate serial: 01988355BEB1158DD0D68318E7F061B7A4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
Manifest number: 161F
Signing time: Thu 07 Aug 2025 07:01:31 +0000
Manifest this update: Thu 07 Aug 2025 07:01:31 +0000
Manifest next update: Fri 08 Aug 2025 07:01:31 +0000
Files and hashes: 1: m-CmEeBni40ynuVQMSskbg3PRpg.crl (hash: 4CZoOfu2wGub1+fzobfUQtQq6BgnVCqBdKXvXs4uH/g=)
2: r7gX59Qqj2m8tkfxKOifStnrTtw.roa (hash: NQ9wPPqnM3aQNBwThdDuKiLJ5LhU3Tk2rpFlfHyhTPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:be:b1:15:8d:d0:d6:83:18:e7:f0:61:b7:a4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Validity
Not Before: Aug 7 07:01:31 2025 GMT
Not After : Aug 8 07:01:31 2025 GMT
Subject: CN=73783aaa086e1f9627ea7991fe59e0929b3fe949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:84:55:ca:d6:fb:6b:c0:9f:d0:b7:fc:69:cf:
e7:3e:ab:4e:95:32:a8:80:ac:dc:cf:a1:0a:25:75:
b0:37:86:7d:8c:d1:4c:46:ea:d6:8e:d8:81:8e:28:
4f:f8:ec:ff:85:a8:8a:37:20:05:94:19:49:57:d5:
58:f5:d3:37:57:55:9d:bc:6c:a2:0f:63:1c:38:fd:
5b:4f:f4:14:f4:df:55:7f:db:f2:68:a9:5a:2c:36:
e9:9a:4e:ec:50:4d:ce:c4:e3:78:af:03:aa:f7:b6:
f1:ce:a2:7e:a1:50:c8:75:b3:ac:3c:20:75:7a:30:
03:b7:76:d6:cc:b8:f3:6b:d8:1c:48:b9:a6:7c:2d:
52:79:9d:ee:05:99:51:c7:25:f7:37:49:b4:d6:4c:
0c:b6:12:81:8b:f4:29:21:13:6f:6e:14:3d:80:4a:
d0:ff:0b:d1:aa:00:cd:d2:52:fa:5c:61:77:08:3a:
2e:c3:f5:1e:d6:0b:ed:3e:d2:47:f7:26:50:1d:eb:
28:6b:a7:0d:3d:38:68:4d:ea:66:f6:58:26:b9:97:
08:6e:b3:64:2b:4b:d1:00:0b:4d:31:ee:67:d2:55:
2c:7e:21:43:b9:b7:84:03:e2:42:05:95:c8:08:ad:
71:c5:f6:c0:05:a5:a2:04:54:4c:bc:40:4b:08:67:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:78:3A:AA:08:6E:1F:96:27:EA:79:91:FE:59:E0:92:9B:3F:E9:49
X509v3 Authority Key Identifier:
keyid:9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ac:14:41:a5:d0:e4:62:30:e1:6c:1b:2a:8e:6c:4e:3a:81:
01:6e:94:45:10:03:b1:04:c2:0e:b0:01:bb:ec:59:e2:54:5d:
e0:e6:26:f5:ba:16:9c:2f:07:a3:29:15:16:f9:d6:40:17:77:
b2:45:cd:f6:fa:e4:0c:85:d9:c1:59:5b:e4:e2:ea:f2:d2:80:
96:af:d3:bd:9d:e7:b6:ef:e9:6a:46:c9:2b:ba:64:3e:4d:5d:
87:14:4a:2c:f7:5c:6c:4e:f4:b2:3d:16:4c:d7:d5:39:b5:83:
b3:3a:e3:1b:a8:de:1f:c8:51:4e:99:7b:5c:ca:c0:23:a7:5e:
98:54:a9:f7:7a:bc:1e:3c:d8:32:e3:6b:2a:12:5b:2f:da:4f:
29:70:8e:79:d3:b4:0a:6c:ca:1b:d4:c1:83:6f:a4:6f:a5:af:
48:74:ab:f3:e0:e8:7f:57:5b:1a:c2:a6:33:32:c7:56:b4:be:
6a:58:9d:8b:59:5e:c7:22:de:04:21:dd:b9:da:35:d2:a8:cc:
52:df:e6:11:74:94:c5:09:9f:09:2b:c0:0c:54:e9:56:88:d7:
a6:35:e7:2c:66:ae:ac:2f:31:49:bd:0b:79:30:04:78:8d:2e:
8a:40:0d:84:98:07:34:09:52:8e:ae:bb:f8:ac:84:b1:41:47:
5e:57:ba:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:14:30 2025 by rpki-client