Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
File: MEEPXtOG-HkgPLRCil-V_ciZtZE.mft (raw, json)
Hash identifier: 9L+28ggQhk+kie5ehlcj5FaaU4lerlgXLXNnC/bOmGg=
Subject key identifier: 3D:01:8C:A8:90:9B:52:F8:F8:51:1A:0F:4F:EB:FF:DA:B2:A0:D5:00
Authority key identifier: 30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
Certificate issuer: /CN=30410f5ed386f879203cb4428a5f95fdc899b591
Certificate serial: 0199FBEAC1108FEAA41BFAFB6EDDC9AEC053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
Manifest number: 069F
Signing time: Sun 19 Oct 2025 10:01:30 +0000
Manifest this update: Sun 19 Oct 2025 10:01:30 +0000
Manifest next update: Mon 20 Oct 2025 10:01:30 +0000
Files and hashes: 1: MEEPXtOG-HkgPLRCil-V_ciZtZE.crl (hash: nS4hbkPuK1wTtV3I+E/JBvSyEMSxbaDxHom+T5b4MOQ=)
2: VKnNvbVsRqF6coqOLVNx3je3CD4.roa (hash: SfCYWwwunVdh83nhVwYfX1uU9K1UYabADUPAPwp/I2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c1:10:8f:ea:a4:1b:fa:fb:6e:dd:c9:ae:c0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30410f5ed386f879203cb4428a5f95fdc899b591
Validity
Not Before: Oct 19 10:01:30 2025 GMT
Not After : Oct 20 10:01:30 2025 GMT
Subject: CN=3d018ca8909b52f8f8511a0f4febffdab2a0d500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:2f:f4:df:dd:2c:7f:b0:84:10:d5:13:b8:
3c:1a:9d:a0:f6:a2:77:b4:9b:95:c1:8e:b8:91:da:
7d:e4:66:27:20:3a:e1:76:04:a7:01:8d:3b:b6:8a:
93:18:fd:d0:07:1e:a8:dd:c8:f3:36:9d:f0:d0:4b:
2b:60:9b:97:df:9f:c3:91:59:7a:b9:4f:95:b1:5e:
a7:28:2b:0f:1a:7a:70:3d:7e:8a:b7:de:87:4e:c1:
0c:09:40:d3:e1:ac:43:71:4b:8c:f6:45:fc:82:ed:
2c:78:10:60:5e:8d:77:a8:ec:f1:41:83:fb:bf:70:
f3:0c:54:1f:1e:dc:a1:7f:6e:62:93:72:39:8d:f0:
a0:6d:be:c4:5c:ca:84:ed:26:64:44:76:87:60:6d:
94:35:0f:02:a9:b4:77:41:30:e5:d7:3b:50:eb:e1:
b8:e3:1f:c8:3e:fc:a5:89:10:07:4c:0a:b7:36:54:
a2:79:d3:a9:a8:f6:48:75:92:23:ff:1f:eb:20:1f:
a4:e0:cf:eb:28:33:d8:1d:fe:32:7b:ec:1d:7f:06:
9e:ae:53:02:5d:15:08:88:d5:f1:5a:0e:19:8f:fe:
a5:9d:35:64:da:5b:21:03:3a:36:89:a9:d2:f9:dd:
54:89:dd:19:54:7e:36:dd:06:7c:22:51:da:99:cf:
73:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:01:8C:A8:90:9B:52:F8:F8:51:1A:0F:4F:EB:FF:DA:B2:A0:D5:00
X509v3 Authority Key Identifier:
keyid:30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:6c:aa:fe:72:2a:27:97:8b:63:e6:5a:c2:ab:37:3d:d1:eb:
b0:6f:f1:91:58:d0:81:82:93:6f:f7:34:1b:5a:60:2b:56:b8:
77:a8:14:03:4a:ce:05:92:d6:6e:54:28:e5:ef:a1:c7:22:d2:
f8:51:c7:bc:09:f9:f2:4b:e2:5c:7c:55:e4:31:ff:d9:50:c4:
55:e4:30:10:bc:a8:70:66:aa:96:b8:9d:29:e5:dc:38:ec:a6:
ea:6f:a2:5e:92:de:89:aa:00:0f:27:fe:e0:ff:0d:36:df:4f:
21:db:85:0f:f5:e0:2c:12:0e:db:0d:8b:03:09:6e:f6:ef:75:
20:9b:26:a8:63:2e:35:76:75:1b:e9:9d:8e:03:a1:e5:ec:6f:
bb:9c:ae:f3:47:a1:17:68:1b:29:17:6a:f4:79:c6:32:66:41:
ba:bb:ae:4f:b6:33:14:eb:24:bb:82:a8:da:59:59:8e:b3:eb:
df:8a:bd:65:a7:bb:ab:3c:39:71:2c:06:28:70:3b:cd:47:8f:
43:b8:6e:03:3e:f6:23:d5:15:32:5c:05:8e:0b:4b:6e:4c:30:
e1:e6:39:75:4f:8d:71:28:95:85:92:e3:c9:27:f7:f6:33:eb:
21:2e:b2:c9:16:83:e2:f1:22:16:58:57:5d:ff:a3:d9:93:e6:
e9:86:b9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:09 2025 by rpki-client