Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
File: METmC7lxMuqEmlP8VUu7xjlIsBY.mft (raw, json)
Hash identifier: gteUWIRYMvLGLBFHq/xp60pnLJOMJCFnv1DkJSyv5sk=
Subject key identifier: 16:BD:90:D6:17:F8:DF:0D:84:24:D0:0D:84:04:70:F0:8D:14:0D:01
Authority key identifier: 30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16
Certificate issuer: /CN=3044e60bb97132ea849a53fc554bbbc63948b016
Certificate serial: 0198D65F4C57D33957C7FB9EF1A20DA83CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
Manifest number: 10CD
Signing time: Sat 23 Aug 2025 10:00:26 +0000
Manifest this update: Sat 23 Aug 2025 10:00:26 +0000
Manifest next update: Sun 24 Aug 2025 10:00:26 +0000
Files and hashes: 1: METmC7lxMuqEmlP8VUu7xjlIsBY.crl (hash: b6Vjlz6NpijTBm1x4rHkVTkezW3aLNcX1WQQF2wBawM=)
2: iSTM7V9FE-bUzbrQTSi6w3GvF8M.roa (hash: YbbyUOZzyme9AkFEQT1yyfiS1x2+GwCoOxsJ23F9SW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:4c:57:d3:39:57:c7:fb:9e:f1:a2:0d:a8:3c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3044e60bb97132ea849a53fc554bbbc63948b016
Validity
Not Before: Aug 23 10:00:26 2025 GMT
Not After : Aug 24 10:00:26 2025 GMT
Subject: CN=16bd90d617f8df0d8424d00d840470f08d140d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:12:af:04:2b:c1:29:3c:13:a6:3f:d2:71:29:
08:34:f3:6d:71:59:f3:a9:e2:dc:ba:c7:b5:a3:92:
15:40:fc:c8:6b:21:bd:4b:07:5e:61:77:e0:8d:ed:
2c:b2:1c:b0:86:3b:80:f9:07:85:e0:ca:06:48:ad:
62:8a:2d:d6:6c:03:b3:05:65:5c:03:47:4b:ab:b2:
89:f8:e7:38:29:14:ff:81:94:8e:f5:dc:52:1c:48:
3a:69:e4:46:50:94:0d:86:4e:47:42:cc:6e:ee:21:
d9:a2:b7:ab:8e:b9:ff:20:f7:06:34:10:73:83:e7:
b7:7c:c2:72:ed:e8:71:26:15:bb:25:df:e4:4c:08:
c3:5d:b3:7b:70:10:f2:41:b9:b0:8e:72:5e:00:21:
e4:13:87:af:5e:b2:9b:08:90:2b:ef:e8:35:73:6b:
20:34:91:c6:94:36:38:69:3e:c7:5e:16:bc:0c:d2:
fd:1a:ca:15:80:46:b8:cc:bd:54:5a:e8:22:03:07:
a4:31:28:13:a7:d9:a4:2e:64:04:5e:bf:41:89:3b:
ae:5d:87:eb:67:b6:68:2c:be:a8:4e:26:24:4f:21:
22:e3:8e:e4:b2:33:35:4c:80:4d:17:14:8e:e5:90:
99:32:a1:1a:0b:72:8a:80:7c:a8:13:9f:57:6f:68:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BD:90:D6:17:F8:DF:0D:84:24:D0:0D:84:04:70:F0:8D:14:0D:01
X509v3 Authority Key Identifier:
keyid:30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f8:cc:f6:e7:f5:75:cd:55:49:a9:99:66:53:00:a2:ef:91:
32:90:ed:02:2e:d3:f8:f1:1a:40:d8:a1:1a:81:fb:41:5e:bc:
7c:fa:5b:c0:ae:bb:d3:8c:a0:58:98:df:6b:eb:31:32:95:03:
ca:2c:0a:fc:e7:2b:23:1c:fb:7c:91:2b:24:61:49:e4:90:d3:
1f:28:62:93:47:36:eb:91:94:e7:c9:8c:5d:a6:60:d0:94:2b:
4f:0c:0c:b7:cc:23:78:54:25:b5:d8:7c:cf:8b:9f:23:14:9a:
41:92:3c:cf:07:ea:36:6d:a6:9c:c5:b7:7f:86:28:a1:9c:13:
69:d5:45:d3:22:cf:48:af:db:1b:be:ba:08:97:06:7d:05:84:
1d:ff:2c:76:14:b6:29:f8:86:29:53:0c:41:b4:6b:97:8f:40:
4a:ea:93:d1:03:de:6d:53:dd:56:91:b4:ec:33:bc:a7:26:d0:
51:14:94:46:b1:db:e8:d4:67:b4:6f:81:6b:94:5b:cc:3f:9d:
4e:41:f4:b7:2c:d9:1b:10:24:28:8d:4d:40:e5:39:7f:e6:f6:
92:8b:53:2e:d4:71:41:0f:93:a9:d7:d2:f5:da:6c:48:b0:a5:
3e:d8:8b:62:dd:6e:b9:24:7b:e7:bb:32:c6:51:dc:1a:b3:80:
84:b9:64:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:19 2025 by rpki-client