Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
File: MEEPXtOG-HkgPLRCil-V_ciZtZE.mft (raw, json)
Hash identifier: 6BV0R75y2eCS6YQRU4D8KS1MDjPc8PaR4ejJsEz8y9Y=
Subject key identifier: BF:1D:57:B4:5E:B5:58:93:15:A2:B3:81:2E:2D:E4:A8:7A:A8:F4:8D
Authority key identifier: 30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
Certificate issuer: /CN=30410f5ed386f879203cb4428a5f95fdc899b591
Certificate serial: 0196BB92264DD5F56E222359B5D497F2B086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
Manifest number: 04F0
Signing time: Sat 10 May 2025 19:00:39 +0000
Manifest this update: Sat 10 May 2025 19:00:39 +0000
Manifest next update: Sun 11 May 2025 19:00:39 +0000
Files and hashes: 1: MEEPXtOG-HkgPLRCil-V_ciZtZE.crl (hash: KoUXq5hH2IH6aWzpjUDMFqf/LND53yWHOtyCR8NcA4Q=)
2: VKnNvbVsRqF6coqOLVNx3je3CD4.roa (hash: SfCYWwwunVdh83nhVwYfX1uU9K1UYabADUPAPwp/I2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:26:4d:d5:f5:6e:22:23:59:b5:d4:97:f2:b0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30410f5ed386f879203cb4428a5f95fdc899b591
Validity
Not Before: May 10 19:00:39 2025 GMT
Not After : May 11 19:00:39 2025 GMT
Subject: CN=bf1d57b45eb5589315a2b3812e2de4a87aa8f48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:70:e4:6c:5e:6f:61:05:80:f2:a7:1e:7f:56:
6a:04:e1:d8:a1:87:2b:5d:b4:0b:70:e8:93:c7:a7:
70:a5:5f:f0:34:b8:88:77:b5:d3:d5:c3:22:53:bd:
56:0e:f8:08:71:e9:d7:00:35:66:00:81:99:72:3d:
db:04:ba:2e:85:b2:b5:5b:5e:06:7f:36:2b:9c:76:
bb:eb:bf:50:d2:d0:23:f8:d5:c0:5c:be:51:08:fa:
81:04:6a:e2:64:83:4a:3e:2d:0f:a4:45:c7:27:c0:
44:fd:f7:0c:95:da:ec:47:60:d5:a5:ca:ba:2f:c9:
d7:8a:4a:76:5c:a0:dc:43:ef:4a:fa:15:58:07:55:
24:20:d0:a4:0b:d9:3d:86:92:d6:92:10:ca:7e:28:
ee:14:93:41:d7:db:4b:d1:28:bb:9c:8c:87:56:8d:
91:de:f3:ec:46:76:63:12:86:6a:17:fd:18:fd:04:
db:1c:83:b6:40:ce:e3:2c:ea:0f:d7:37:85:09:cf:
b7:2d:80:df:ae:48:38:84:cc:2d:f9:ac:7b:62:26:
68:20:c9:e5:97:85:ea:d3:6c:1d:67:d4:af:8e:a1:
b6:dd:4c:0e:d6:26:e5:23:ee:3e:4b:fa:2f:eb:e2:
30:9f:e7:aa:7e:cc:a8:03:ec:99:75:2c:33:8c:94:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1D:57:B4:5E:B5:58:93:15:A2:B3:81:2E:2D:E4:A8:7A:A8:F4:8D
X509v3 Authority Key Identifier:
keyid:30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:fb:a1:6c:99:bd:39:6c:55:6b:72:8c:46:40:fd:fe:0e:10:
16:03:cd:ef:25:55:2b:d3:8d:12:62:88:02:6b:84:56:7d:b8:
52:c7:04:56:75:6b:9c:62:e9:87:24:af:1f:77:fd:7c:80:5e:
09:93:f9:4f:c2:4e:61:a7:d9:13:e0:75:9d:20:51:39:b0:ed:
42:ab:d1:06:dd:09:41:8d:61:8a:82:07:eb:4e:3c:f2:76:09:
36:a5:43:8a:20:a8:2e:0e:fd:b6:d7:4c:e8:80:1a:33:68:c4:
a8:8f:0e:76:ca:2a:1e:2c:69:be:ad:6a:5e:27:ee:21:35:0f:
3b:cc:b9:ad:64:ae:10:b9:e5:b9:aa:9a:98:ad:42:c8:f5:c6:
b2:c7:fb:59:89:45:a5:f7:02:2a:db:5b:9d:ec:4b:00:60:a7:
99:6a:d8:dc:06:86:74:24:13:02:7f:ff:d9:9c:e3:94:5a:61:
39:8c:7f:ec:00:0e:57:cf:ec:c0:9c:a9:5b:88:34:af:f4:f8:
23:a0:73:a6:a8:1b:1a:8e:41:cf:62:50:94:67:cc:8a:ce:98:
a6:dd:b0:2a:e3:0e:be:47:fe:e0:99:79:99:94:27:5c:ee:12:
6c:5a:b0:0b:0a:08:ce:2e:62:a7:33:76:5a:91:6c:aa:8f:1a:
ca:eb:aa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 20:39:20 2025 by rpki-client