Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
File: me-7KxZTQig3k33SfeNU5o-eAaM.mft (raw, json)
Hash identifier: cGaAKF2Bu0aRQpanTCMi1I5XZglR+INyLNxwtmlbn/s=
Subject key identifier: 1A:4D:3B:C4:49:C4:24:15:57:2C:30:64:F6:87:97:44:26:B5:E3:1E
Authority key identifier: 99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
Certificate issuer: /CN=99efbb2b1653422837937dd27de354e68f9e01a3
Certificate serial: 0197B7EA89D21570C4D8A0F27D1A0C7923B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 19:01:30 +0000
Manifest this update: Sat 28 Jun 2025 19:01:30 +0000
Manifest next update: Sun 29 Jun 2025 19:01:30 +0000
Files and hashes: 1: me-7KxZTQig3k33SfeNU5o-eAaM.crl (hash: tFoGs0RxnrLNALtD2qfCQ5A7rMScVG4KLQTG4yYP4Zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:89:d2:15:70:c4:d8:a0:f2:7d:1a:0c:79:23:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99efbb2b1653422837937dd27de354e68f9e01a3
Validity
Not Before: Jun 28 19:01:30 2025 GMT
Not After : Jun 29 19:01:30 2025 GMT
Subject: CN=1a4d3bc449c42415572c3064f687974426b5e31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4b:99:9a:3b:c7:48:4e:33:96:3a:9e:0c:8f:
50:d5:9d:1b:e2:5b:c8:d2:44:e3:70:9d:1d:d2:9e:
4a:58:cc:79:51:45:56:12:a9:24:3c:11:e0:bd:b9:
43:77:0b:ee:81:a9:ca:8c:7b:11:cf:99:2c:fc:2b:
98:09:fd:f8:98:d2:0b:bb:d9:55:8e:55:da:38:bf:
db:50:cf:53:f1:b8:ff:37:23:58:fe:e2:d7:e4:9e:
ba:ee:a1:6a:85:01:41:d2:19:66:f9:7e:99:ab:88:
ee:17:08:49:72:83:f4:d6:62:ca:ea:05:d6:9c:9c:
e4:82:25:21:23:41:e6:b5:43:b4:9d:d3:f7:d7:03:
44:f6:fe:4d:c8:f8:61:3c:ac:74:ca:92:8f:7b:ec:
b5:0b:3f:c2:54:da:3b:24:37:35:db:c6:42:a8:8c:
06:cb:45:b8:a0:45:24:63:af:69:21:e6:68:93:af:
72:d6:33:37:28:38:bf:4e:18:e7:cc:d9:f3:9c:37:
92:1b:ce:5a:91:77:55:b8:6f:32:bb:25:ab:82:2c:
b0:dd:a7:70:80:72:f0:77:ed:67:7c:3f:78:4e:5c:
98:ce:86:a5:b0:9f:a7:6d:24:e6:76:62:b7:2c:18:
11:78:4f:a0:21:14:f1:7d:02:e2:c0:59:96:98:63:
da:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4D:3B:C4:49:C4:24:15:57:2C:30:64:F6:87:97:44:26:B5:E3:1E
X509v3 Authority Key Identifier:
keyid:99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:47:6e:db:b7:9b:ba:ac:1b:63:a5:1c:3b:46:13:85:3a:12:
ae:47:52:46:d0:1f:bc:c0:81:48:57:24:db:8b:79:7c:5d:b5:
c4:2c:5e:fd:a7:5b:d2:44:f9:d5:81:37:24:b8:93:4e:90:53:
af:ee:f0:5e:89:60:a0:80:c2:93:14:e0:02:2a:2d:30:5d:ef:
b5:02:62:b5:15:1a:25:6c:6a:28:e9:e0:3c:48:49:69:ad:aa:
90:d0:09:18:e6:d5:fc:24:24:aa:9b:7d:01:c2:4a:74:e1:d5:
94:ac:f0:dd:8d:63:de:bd:92:2e:b1:f1:e4:f5:5c:21:9b:bf:
85:d5:6f:1e:10:6c:12:5b:44:50:ab:e9:91:81:d4:a8:c7:c5:
58:23:bc:5e:32:68:d1:6d:d9:29:8b:b7:0a:6f:6e:18:57:45:
5b:99:f5:f0:07:4f:a4:ab:7f:e1:5c:5a:b5:7d:cc:bb:d9:c3:
79:ff:fb:41:99:8e:88:b6:fc:21:7b:42:07:70:0c:f8:02:6b:
c5:78:b8:b5:80:e3:31:dc:65:9d:20:ee:2a:08:61:4f:8e:44:
14:8b:1e:87:03:9c:f4:46:ab:b2:7a:4d:1c:ac:33:e0:10:c6:
8b:38:79:0e:89:a9:68:0b:15:4e:40:6c:32:d4:d4:8c:57:cc:
42:48:a6:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:25:43 2025 by rpki-client