Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
File: me-7KxZTQig3k33SfeNU5o-eAaM.mft (raw, json)
Hash identifier: okBfu/AdsU/QtmjY7t0Qr6DdYo9cQu9WUTUkivKqX1k=
Subject key identifier: 38:28:0B:EA:E8:B8:BA:30:C2:41:66:A4:40:66:5D:E2:4C:9B:DD:B7
Authority key identifier: 99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
Certificate issuer: /CN=99efbb2b1653422837937dd27de354e68f9e01a3
Certificate serial: 0199FB4591BC9D3773BF529A4C67192363DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 07:01:04 +0000
Manifest this update: Sun 19 Oct 2025 07:01:04 +0000
Manifest next update: Mon 20 Oct 2025 07:01:04 +0000
Files and hashes: 1: me-7KxZTQig3k33SfeNU5o-eAaM.crl (hash: 07u/6xFDOURnWP3nZZ7iMElKWOS2vW1UWbP3CjqIP4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:91:bc:9d:37:73:bf:52:9a:4c:67:19:23:63:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99efbb2b1653422837937dd27de354e68f9e01a3
Validity
Not Before: Oct 19 07:01:04 2025 GMT
Not After : Oct 20 07:01:04 2025 GMT
Subject: CN=38280beae8b8ba30c24166a440665de24c9bddb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d9:51:07:43:03:f9:b5:10:de:f2:ce:0b:57:
c5:99:15:83:61:5a:91:98:21:73:86:c4:74:0b:9c:
54:24:ae:ca:eb:e8:65:5d:f4:ca:5d:bf:72:20:6c:
36:1b:6e:7e:fb:33:d8:cb:68:89:6c:77:19:fd:cd:
5f:eb:45:c0:6e:ca:43:5a:a3:cd:48:ea:5a:4f:0d:
51:6c:00:79:98:c8:ad:b2:5d:ca:a2:c2:a6:bc:ff:
f9:f4:e1:80:aa:f0:6c:dd:08:a1:85:c1:7a:3d:6e:
87:45:86:aa:c6:c5:3d:19:69:b5:15:90:e4:d2:46:
b1:a5:0c:0f:5d:43:96:9d:03:84:bd:9d:94:85:81:
60:ca:2e:30:13:ca:d0:fd:39:0b:1d:b6:47:26:5f:
dc:bd:15:4a:d4:ea:ad:88:3a:1a:2e:e1:3f:e3:fb:
ef:60:93:fc:ae:50:f1:75:bd:6b:18:d1:a9:d0:9b:
b7:23:bb:53:77:cb:04:b8:e5:f7:ad:a8:e2:0a:83:
93:a7:d7:7f:3b:95:62:b6:ca:ed:2c:77:7e:37:9f:
50:a9:78:37:05:bd:28:fb:0f:cc:f1:e3:b7:d4:36:
34:61:1d:73:70:22:b1:ce:a6:be:62:6e:7e:08:dd:
9e:6a:a7:b8:02:bd:aa:dc:4e:ed:e5:64:5a:f0:b9:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:28:0B:EA:E8:B8:BA:30:C2:41:66:A4:40:66:5D:E2:4C:9B:DD:B7
X509v3 Authority Key Identifier:
keyid:99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:22:2d:f8:3e:18:e9:d2:4c:b2:c8:51:62:87:5c:0a:e3:e7:
3c:69:02:db:14:41:63:d3:ae:11:8a:6e:48:65:6d:6e:8b:29:
4d:49:75:2a:43:e7:c4:a5:bc:ce:ef:6c:67:85:c3:a0:3a:64:
1b:9a:83:97:fd:c2:b9:28:c7:0a:f2:04:80:59:4d:74:27:ce:
8d:28:f3:23:fb:5c:1d:c4:c6:59:7d:ee:25:88:8c:27:c8:f1:
af:08:55:59:23:a5:8c:09:60:75:d1:c2:c1:4c:83:82:bd:cf:
d3:30:e1:8c:09:8f:a0:d0:c5:ec:0f:85:8c:df:86:d9:f3:21:
44:d0:cd:94:b2:af:10:c7:d8:0e:ef:9c:81:4d:64:1b:40:91:
e2:f5:ca:1e:2d:df:6c:25:11:8b:5b:c3:8e:e5:cb:45:0c:8b:
4b:17:96:1d:fe:39:db:ea:4f:9c:fc:13:30:10:d4:b7:73:2a:
c7:9c:5c:4c:9b:53:15:39:e6:ff:77:12:36:aa:35:80:31:e4:
40:9e:9e:14:3a:7a:c4:e8:f6:bc:82:06:6f:64:14:8d:49:72:
82:8c:ef:6c:2f:95:26:72:fa:b2:c6:a5:28:c2:0c:a1:59:2c:
c2:10:78:b3:f7:e3:cb:d6:69:75:e2:6d:c7:ea:e0:02:63:77:
93:03:c3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:03 2025 by rpki-client