
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
File: METmC7lxMuqEmlP8VUu7xjlIsBY.mft (raw, json)
Hash identifier: 8iZZSjhtmMsWRECaiMuh6kSsGV0SQwbKr9BIMyBPXfU=
Subject key identifier: 11:F4:FF:2D:81:11:D5:B8:34:BD:D8:5B:A7:7E:14:36:D7:0E:DD:7D
Authority key identifier: 30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16
Certificate issuer: /CN=3044e60bb97132ea849a53fc554bbbc63948b016
Certificate serial: 0199FBEBD57342923CA6E92C32A95B5F9D04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
Manifest number: 1165
Signing time: Sun 19 Oct 2025 10:02:40 +0000
Manifest this update: Sun 19 Oct 2025 10:02:40 +0000
Manifest next update: Mon 20 Oct 2025 10:02:40 +0000
Files and hashes: 1: METmC7lxMuqEmlP8VUu7xjlIsBY.crl (hash: sqXohiJ+oK7jp+/w5fAXuzqw/J5UbNHnWITxH0xofkk=)
2: iSTM7V9FE-bUzbrQTSi6w3GvF8M.roa (hash: YbbyUOZzyme9AkFEQT1yyfiS1x2+GwCoOxsJ23F9SW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d5:73:42:92:3c:a6:e9:2c:32:a9:5b:5f:9d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3044e60bb97132ea849a53fc554bbbc63948b016
Validity
Not Before: Oct 19 10:02:40 2025 GMT
Not After : Oct 20 10:02:40 2025 GMT
Subject: CN=11f4ff2d8111d5b834bdd85ba77e1436d70edd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:e3:b5:05:dc:04:1e:d3:11:6c:96:3a:a4:
9a:56:89:48:33:b6:12:d3:3e:9b:34:72:8d:b2:5f:
bf:98:89:74:a6:d3:52:3a:0c:b9:cc:a1:38:4d:44:
dc:10:62:12:ad:84:11:2d:ee:1c:80:7f:b1:f9:70:
c7:94:eb:e2:ad:97:dd:dd:ea:53:9c:c9:e8:94:b7:
71:6f:ed:55:81:b4:b6:f1:f6:99:16:c1:7f:dc:56:
7f:38:9b:b5:e5:ba:ad:97:d7:53:3f:a5:88:78:84:
cc:18:0a:ac:5a:6f:0a:71:f1:08:b5:f0:73:79:ea:
4a:28:13:38:1b:51:c9:fe:cf:fb:ee:81:83:1a:b5:
fe:a0:04:19:4f:37:ad:c9:d4:e1:a2:5f:cf:0a:ce:
3a:85:34:35:31:81:03:17:5c:44:7d:cd:10:ec:23:
c1:6e:88:37:a1:89:3f:f4:9d:83:5c:52:33:25:a8:
50:41:b3:ef:80:c9:81:11:78:06:f6:3b:b3:14:b4:
e1:6f:e3:84:ee:bf:3a:9b:f3:b9:a8:5c:2f:80:3c:
36:05:5a:d8:fe:85:f0:3d:09:8b:1a:7d:a3:d8:d1:
c6:a8:07:da:0a:60:37:a7:ea:ed:0e:d4:5c:37:c7:
fa:fe:d6:ab:8f:5d:5c:87:8a:1b:32:81:64:79:95:
f4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F4:FF:2D:81:11:D5:B8:34:BD:D8:5B:A7:7E:14:36:D7:0E:DD:7D
X509v3 Authority Key Identifier:
keyid:30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b2:ac:c0:3a:ca:c8:a1:26:1a:53:ea:a5:37:51:3b:ca:9d:
79:f5:2b:53:73:d9:1b:a8:67:5c:9d:6a:cc:ee:89:32:d3:bf:
fd:2d:1b:02:d9:5d:4a:95:f0:0e:bb:4f:19:2b:b9:d0:b8:79:
76:20:f6:ba:81:bf:1a:55:57:ba:9e:7b:80:ca:cc:84:69:d2:
50:07:d3:42:16:30:a5:71:42:ee:4a:5b:77:07:75:f6:6a:67:
a3:ec:82:33:8f:e7:98:a0:3a:2e:ee:c9:e5:45:e6:f1:e7:f4:
71:95:4d:1e:cf:21:61:09:2d:37:47:22:79:88:70:27:25:9c:
03:79:7c:35:49:21:a6:2f:3f:f8:65:43:0b:7c:43:0d:64:74:
c3:c8:2b:7f:f0:2c:e4:b1:74:a5:f4:34:dc:e3:25:97:b5:5f:
19:55:34:dd:33:77:5c:02:08:62:11:81:1c:ff:c6:62:07:e1:
66:90:93:42:26:b0:04:db:e3:66:c2:16:9d:6d:f5:88:08:5b:
8b:fa:77:a0:0f:68:54:d9:a1:dd:47:67:dc:69:dc:fe:03:c2:
7f:e6:ff:1f:04:44:b7:da:e4:9f:09:ad:16:c9:ba:ec:28:e6:
88:ee:10:de:7c:63:9e:2e:a5:b5:57:55:75:d5:67:2e:4e:e0:
9b:81:79:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:02 2025 by rpki-client