Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
File: meKI93yZhWTyY056Lh0AnfLviH8.mft (raw, json)
Hash identifier: uAvdqGakADVVlqrhwaR5UnlPMxCahtSDI/C0XmjrMgQ=
Subject key identifier: 7D:FC:81:C2:87:80:E5:58:AB:B8:CA:B9:09:8D:7A:C1:37:F8:F9:D5
Authority key identifier: 99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
Certificate issuer: /CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Certificate serial: 0196BF6FBA43ED7C1917F426EB85248F0AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
Manifest number: 0D77
Signing time: Sun 11 May 2025 13:01:32 +0000
Manifest this update: Sun 11 May 2025 13:01:32 +0000
Manifest next update: Mon 12 May 2025 13:01:32 +0000
Files and hashes: 1: meKI93yZhWTyY056Lh0AnfLviH8.crl (hash: BWD9jEaTYqPv1/ESchj1TCAgpaX7vVrdcefm1RvmH2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:ba:43:ed:7c:19:17:f4:26:eb:85:24:8f:0a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Validity
Not Before: May 11 13:01:32 2025 GMT
Not After : May 12 13:01:32 2025 GMT
Subject: CN=7dfc81c28780e558abb8cab9098d7ac137f8f9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:15:1d:2c:0c:48:0e:2f:fa:6c:1a:6e:66:
6c:46:2f:4e:31:f0:50:b6:69:03:1a:45:bc:e5:d1:
33:a5:1c:0e:95:64:d2:a2:b0:ea:89:a7:bf:19:ff:
7b:46:7f:a8:6b:2e:68:18:2c:5e:8f:2c:c3:85:c4:
c9:7c:04:cf:72:7c:69:09:66:e3:66:ed:b5:7c:c8:
2e:c5:f2:eb:5c:e1:63:16:25:b3:e5:c8:50:b1:eb:
51:66:95:8a:36:df:75:1b:45:f3:3f:30:27:bc:6e:
8a:93:d9:42:50:bf:b9:10:d9:81:1c:9e:77:7f:23:
aa:30:60:e6:4f:ab:b9:55:bc:5f:43:28:3b:2c:06:
37:9a:60:1d:36:f4:b6:f9:2c:07:e2:c1:8e:e8:a3:
1c:17:5f:3c:d6:42:bc:e3:3f:c0:8d:56:0a:60:8e:
0b:28:48:e4:e7:a2:eb:de:ad:3c:90:8f:bf:6f:04:
bb:48:6f:0e:99:a2:b2:ba:da:7f:33:65:70:b2:dc:
8b:ae:9d:34:bb:79:cf:9b:46:6f:fe:3e:eb:30:2c:
96:8b:0e:5b:a0:83:cd:3b:1f:2f:c1:77:38:a8:45:
5d:5e:f3:40:2c:5d:26:d5:01:dc:ad:ae:50:70:2b:
d1:ae:1b:3a:3d:a5:e2:61:3d:a0:e4:2a:b2:ae:56:
35:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FC:81:C2:87:80:E5:58:AB:B8:CA:B9:09:8D:7A:C1:37:F8:F9:D5
X509v3 Authority Key Identifier:
keyid:99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:aa:b6:7f:13:48:2b:01:02:a7:ac:d4:07:62:35:18:0b:7b:
a6:88:f9:1f:cb:39:34:b0:e9:ef:4c:ff:f8:98:1b:a3:d7:35:
29:5f:30:d6:b6:6c:84:57:0f:81:e7:ab:b7:9b:dd:b4:9f:e2:
2d:53:f1:3a:b5:af:1a:41:f8:0f:3f:46:fc:b6:79:44:2b:8c:
64:72:33:47:f1:27:37:a1:36:64:16:40:a6:42:5d:86:22:c3:
cc:05:70:d2:8d:43:39:13:0b:25:6e:40:21:30:51:9d:59:55:
15:9f:7e:f0:e4:36:08:48:ea:ae:a6:67:be:9a:c1:14:79:80:
e5:da:1f:bc:0b:8b:ed:8c:49:0e:fd:6b:ac:ac:44:14:af:2a:
e2:3f:94:0d:27:7d:9a:cd:ad:3c:a3:27:0d:ee:2e:fe:47:f1:
49:b2:d0:6b:6b:7b:71:3c:1d:fa:e3:7b:98:3e:85:65:8d:a3:
37:3f:b0:57:1e:b9:bd:94:bb:44:5d:0b:55:60:1e:f8:02:24:
29:67:99:5b:68:a8:e0:18:10:85:61:cd:62:80:45:85:53:62:
10:34:15:53:bc:ac:12:e4:69:ec:6a:5b:08:27:29:3e:54:f0:
01:82:5b:8a:e4:3c:a4:35:cd:13:60:5a:87:8e:0c:17:c9:1d:
d5:42:b8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:57:59 2025 by rpki-client