Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
File: meKI93yZhWTyY056Lh0AnfLviH8.mft (raw, json)
Hash identifier: 2xlhBFytwWluqFViuy2cZ2LTyBH9FGMJRJ7vCkhycXI=
Subject key identifier: F8:74:1F:24:77:2D:C3:74:3C:C9:5D:5C:89:2A:11:88:0E:FD:64:00
Authority key identifier: 99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
Certificate issuer: /CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Certificate serial: 0197B6A143BBF05243C87742184C3E74D565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
Manifest number: 0DF7
Signing time: Sat 28 Jun 2025 13:01:51 +0000
Manifest this update: Sat 28 Jun 2025 13:01:51 +0000
Manifest next update: Sun 29 Jun 2025 13:01:51 +0000
Files and hashes: 1: meKI93yZhWTyY056Lh0AnfLviH8.crl (hash: e87BXE4raZfM3AYbZ8yg5DdRjbY8S89Tq83NORlxDN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:43:bb:f0:52:43:c8:77:42:18:4c:3e:74:d5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Validity
Not Before: Jun 28 13:01:51 2025 GMT
Not After : Jun 29 13:01:51 2025 GMT
Subject: CN=f8741f24772dc3743cc95d5c892a11880efd6400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:be:a3:c1:3c:9c:43:5a:6b:47:00:a2:ab:
26:76:99:ea:c6:7c:57:55:72:2b:78:81:39:66:b0:
25:d8:66:de:44:38:08:03:40:00:89:13:7b:63:cb:
33:9a:92:eb:61:81:76:7a:0a:57:6c:9d:74:02:ed:
40:43:66:dc:9f:c4:ad:52:fe:00:c7:e0:d4:ef:8c:
ee:98:69:20:a0:fb:41:df:7f:28:c5:dc:d8:75:f2:
d4:9c:73:ff:be:8e:b2:f9:fd:88:83:8f:bc:c1:f6:
d4:05:c6:0a:0b:d0:50:f0:13:c4:cd:52:e4:9b:5b:
63:30:33:4a:69:a0:67:68:b9:68:df:bc:a6:8f:31:
be:92:5d:d2:f8:39:2d:ce:95:fd:26:60:2c:b9:0e:
3c:ed:21:56:9f:f1:4a:af:cf:5d:f0:0d:30:99:1d:
05:99:86:10:67:8b:ad:da:2a:54:f7:3c:cb:b7:40:
d9:4f:1a:8c:2f:17:c1:d6:f0:f4:70:d1:81:27:05:
4a:1d:63:27:8d:de:1f:38:5e:4e:99:8c:22:93:98:
62:d0:68:d3:a6:32:70:06:e7:c5:da:08:2c:60:1f:
de:d8:68:df:3b:07:68:38:fe:4f:b0:c0:b9:4e:d4:
5b:45:00:ce:b0:c0:9f:d9:62:c7:d0:92:58:6c:ed:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:74:1F:24:77:2D:C3:74:3C:C9:5D:5C:89:2A:11:88:0E:FD:64:00
X509v3 Authority Key Identifier:
keyid:99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5b:87:3d:28:db:a0:33:5f:1c:e8:f9:05:0b:4e:2c:19:55:
42:34:9c:f0:86:6e:2e:8a:72:5b:46:d6:97:7a:83:40:41:99:
f4:f7:db:8c:97:f8:11:7f:8e:13:c4:75:65:0f:e4:74:64:3b:
92:4c:82:fb:99:c4:04:91:0a:a8:0a:5f:53:56:b2:fc:a1:2c:
f3:8d:f5:4d:da:47:9b:0c:4a:19:6d:dd:fd:34:67:88:72:32:
24:87:6a:b8:56:96:52:a4:1f:93:73:3a:a4:b6:a0:47:e1:09:
38:2c:78:52:eb:69:f6:6f:e1:ed:1c:61:ea:e5:f3:60:34:d0:
81:38:6b:94:06:06:a0:e4:71:03:dc:ce:fe:47:8f:51:96:94:
e4:b4:73:6a:a6:31:b1:1d:56:74:2b:1d:4a:f8:b0:7a:36:3c:
ab:e9:8a:a8:82:67:7b:50:de:0b:41:d1:22:fd:64:a6:af:34:
29:ea:c2:3a:cd:0e:4b:39:6d:a1:c9:bc:90:63:ac:f0:62:82:
be:16:99:56:82:1a:f6:aa:46:72:b7:7c:e1:16:2e:9b:76:bd:
eb:0b:dc:86:11:88:4e:1c:e6:e4:10:34:89:4b:e0:50:b3:aa:
92:03:ed:01:c4:77:25:75:6d:25:ca:46:3e:74:14:75:6e:84:
ea:2b:2d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:38:29 2025 by rpki-client