Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft
File: _Me2AVe1RTWEdeJXCMbizAbbres.mft (raw, json)
Hash identifier: 6fW1CePKU4b+Q6WUuqY8PXvpNsVMj3dwQNRKvPIcwR0=
Subject key identifier: 70:19:6E:29:17:05:92:F4:E7:D1:C6:1D:FF:70:DD:16:D3:29:52:F0
Authority key identifier: FC:C7:B6:01:57:B5:45:35:84:75:E2:57:08:C6:E2:CC:06:DB:AD:EB
Certificate issuer: /CN=fcc7b60157b545358475e25708c6e2cc06dbadeb
Certificate serial: 0198D65F3DF42B5FD6D5C1B6E6DE287D46E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Me2AVe1RTWEdeJXCMbizAbbres.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft
Manifest number: 02D1
Signing time: Sat 23 Aug 2025 10:00:22 +0000
Manifest this update: Sat 23 Aug 2025 10:00:22 +0000
Manifest next update: Sun 24 Aug 2025 10:00:22 +0000
Files and hashes: 1: _Me2AVe1RTWEdeJXCMbizAbbres.crl (hash: V4gXVTMXvmNq67qNcB/V3dn6CX0SSV/duuKjSRBooSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Me2AVe1RTWEdeJXCMbizAbbres.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:3d:f4:2b:5f:d6:d5:c1:b6:e6:de:28:7d:46:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcc7b60157b545358475e25708c6e2cc06dbadeb
Validity
Not Before: Aug 23 10:00:22 2025 GMT
Not After : Aug 24 10:00:22 2025 GMT
Subject: CN=70196e29170592f4e7d1c61dff70dd16d32952f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3f:14:93:b6:84:72:9f:28:92:3e:a6:d6:8a:
71:c5:ad:ff:2e:14:c5:9e:a5:73:af:ad:9c:e0:2a:
5c:13:f3:cf:a6:29:82:25:ee:8f:b8:99:df:b6:19:
4c:77:1f:b8:87:9e:c5:73:f3:78:7f:0e:0a:6b:e9:
1f:b6:31:cb:01:6e:fb:85:d0:d8:e2:68:eb:60:29:
4f:55:8a:4c:82:81:05:87:b6:47:3a:ac:47:3d:17:
fe:39:33:0c:14:95:1e:12:e6:f3:58:60:83:c1:f7:
2e:10:e8:9b:71:a2:82:bf:27:20:cf:55:18:cc:55:
f2:3d:86:a4:74:12:31:ed:91:1f:44:c9:d3:fe:b3:
c2:cf:57:f2:6f:77:3e:51:52:5a:fd:b0:55:88:22:
c5:b0:59:fa:5b:cb:1e:e0:ff:f6:83:a6:93:7d:1d:
7e:3e:be:c8:a1:fa:5b:fc:43:c3:9e:77:f0:5b:c5:
26:77:39:c5:f2:93:28:37:92:0a:ba:19:87:1c:f6:
58:de:db:2f:86:6d:8b:39:ea:a1:cf:07:ff:b4:47:
e7:37:14:2b:88:01:5a:65:61:e7:11:ca:0c:8d:9c:
6d:dc:d7:67:e7:b7:56:97:c7:5f:cd:d3:70:1d:ab:
34:70:74:70:29:85:42:dc:ed:ab:42:f5:f9:29:32:
31:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:19:6E:29:17:05:92:F4:E7:D1:C6:1D:FF:70:DD:16:D3:29:52:F0
X509v3 Authority Key Identifier:
keyid:FC:C7:B6:01:57:B5:45:35:84:75:E2:57:08:C6:E2:CC:06:DB:AD:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Me2AVe1RTWEdeJXCMbizAbbres.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/90229f-9882-4659-aff4-29482c1ed580/1/_Me2AVe1RTWEdeJXCMbizAbbres.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:10:b5:89:9b:65:7e:63:83:d0:cb:33:80:59:c4:7e:d4:0d:
92:7a:5d:00:19:3b:c2:3e:d6:92:f7:df:b4:e6:a6:8c:25:0f:
0f:a4:6e:93:13:9a:6c:b3:ad:24:ee:7b:d3:4d:10:c5:69:4d:
53:63:84:41:52:95:48:04:6e:ed:a7:52:c8:46:90:71:9b:c1:
97:e0:c5:08:f4:a0:84:ba:71:16:d5:0f:e5:d3:1b:23:29:68:
20:34:41:e1:f7:b2:f7:1e:a0:f6:ff:8a:1d:bc:1c:4d:9b:c7:
80:da:38:33:ed:4c:29:46:5e:a3:6c:9b:b7:5c:18:97:da:32:
20:a7:f5:9d:9f:9d:17:3e:8b:e3:70:68:c0:c9:4b:2b:1e:df:
fc:9d:ad:ff:19:2b:7b:27:5b:7c:06:79:22:11:6a:bf:2b:f6:
50:5f:03:57:63:81:40:44:31:2f:5e:4b:22:c6:c5:c1:53:4a:
c5:4d:01:d9:9b:01:8a:4d:de:55:f7:0e:e4:f9:a4:5f:ae:0e:
ef:fc:8f:5f:40:ee:f5:d5:e9:49:93:b1:2a:0e:38:13:06:18:
05:58:06:16:f6:17:9f:09:e5:f3:78:82:1d:65:fb:f3:5a:12:
0d:28:ab:6b:8f:1c:d5:4a:24:e0:4c:44:93:ae:14:60:6e:71:
5f:a3:30:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:36:25 2025 by rpki-client