Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
File: meKI93yZhWTyY056Lh0AnfLviH8.mft (raw, json)
Hash identifier: 4uORv/OOvG3bSaq53Qofa64szizgNkq7rlgSQGv1nhY=
Subject key identifier: 8D:78:22:0B:CA:73:AC:FA:B7:D7:25:07:D8:3A:2E:50:09:0E:31:EA
Authority key identifier: 99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
Certificate issuer: /CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Certificate serial: 0199FDD9D07E6A366560E6C313E10CFC21E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
Manifest number: 0F25
Signing time: Sun 19 Oct 2025 19:02:14 +0000
Manifest this update: Sun 19 Oct 2025 19:02:14 +0000
Manifest next update: Mon 20 Oct 2025 19:02:14 +0000
Files and hashes: 1: meKI93yZhWTyY056Lh0AnfLviH8.crl (hash: BPA1NQnujuEnruKnWRpvbAfN5Kom61ZsYg0LCrqRbXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:d0:7e:6a:36:65:60:e6:c3:13:e1:0c:fc:21:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Validity
Not Before: Oct 19 19:02:14 2025 GMT
Not After : Oct 20 19:02:14 2025 GMT
Subject: CN=8d78220bca73acfab7d72507d83a2e50090e31ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b5:a2:be:c7:d8:06:33:be:06:84:f5:73:be:
c6:86:de:b3:14:d9:38:ae:86:ed:1f:e3:19:c2:f0:
95:1a:33:5d:6a:5c:ee:c5:98:5f:a5:9c:c1:96:a0:
6e:a2:22:bd:54:83:d3:35:c4:50:7c:8e:1c:70:6d:
7e:ed:f4:d2:92:da:d4:da:eb:30:d3:66:89:cd:ee:
47:2d:9a:49:22:6e:9c:7f:c5:00:0d:d8:eb:4e:38:
66:79:de:b3:c5:dd:fe:d4:e1:f5:4f:67:23:63:4a:
62:5a:72:a3:75:f0:6e:ca:1a:cb:ea:63:26:3d:89:
8a:37:6c:74:62:cc:b0:66:1f:93:f9:66:68:ec:a7:
6a:65:ab:2a:6c:27:c9:f2:44:09:39:b6:4a:47:0d:
fd:04:09:eb:8a:71:56:dc:ed:21:02:2b:6d:f2:50:
9f:d2:c1:ad:44:a7:87:ca:76:32:a4:29:f9:30:09:
ce:d7:1b:79:68:24:52:28:1a:2e:da:6a:b2:7c:76:
7a:66:a5:4a:11:ab:2f:48:57:64:0c:41:f0:d7:77:
88:fb:7a:0f:38:fd:a9:4a:97:54:e7:88:c0:b7:2f:
26:fd:3f:d6:9a:83:f3:50:8e:cc:ad:c8:18:7c:45:
b2:1e:ae:07:3b:20:8a:06:b2:40:ef:e1:64:5e:3f:
c1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:78:22:0B:CA:73:AC:FA:B7:D7:25:07:D8:3A:2E:50:09:0E:31:EA
X509v3 Authority Key Identifier:
keyid:99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f4:59:aa:04:bd:f8:b9:bc:c5:c9:03:e3:c7:b2:ae:3f:df:
57:7f:8b:0a:65:59:19:0e:ad:3e:dd:f3:21:93:64:74:d9:56:
d3:73:03:68:13:44:1e:3f:df:c1:26:32:65:19:89:11:93:37:
b6:d5:51:dc:95:e5:f1:8c:2a:9c:ee:61:21:14:eb:97:b4:52:
f5:fd:a0:3a:99:6a:bf:a8:c5:74:ef:d2:e3:5e:0f:1d:d5:12:
68:6c:8c:42:4b:e3:a9:70:10:8f:bd:c4:eb:86:0e:eb:85:25:
01:88:08:5c:ac:25:32:ca:fa:e0:a1:50:f3:9e:bf:0c:79:48:
f1:80:d1:c3:35:66:5c:76:3d:a2:9e:a6:55:47:92:3a:be:e5:
9c:91:af:58:35:3d:c3:61:0c:8d:7d:09:41:68:72:bc:cb:87:
28:66:99:85:5b:f2:35:23:aa:7d:72:8a:d1:e5:d9:09:e7:ed:
a4:21:74:a9:09:ea:97:67:83:c6:22:58:25:50:c4:d5:30:db:
11:84:e0:fa:61:f5:41:c0:79:04:7d:06:ed:dc:b7:f7:48:5a:
b1:c2:ec:b3:aa:bd:0f:cd:2c:e9:5b:88:13:e7:8c:87:08:95:
fe:c1:ec:b9:ae:11:11:d4:f5:6a:43:da:2a:9d:e6:a8:bc:23:
01:61:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:29 2025 by rpki-client