Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
File: meKI93yZhWTyY056Lh0AnfLviH8.mft (raw, json)
Hash identifier: T1kL8GRJu5Y3JFYqE8YxnnOJgWRaojIQRNaHYT44MgE=
Subject key identifier: FA:00:ED:49:49:74:3D:F9:C0:85:1A:29:68:0B:33:33:29:76:E7:AC
Authority key identifier: 99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
Certificate issuer: /CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Certificate serial: 0198D4726E6C723B3DBB114E932D9D3542A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
Manifest number: 0E8B
Signing time: Sat 23 Aug 2025 01:02:05 +0000
Manifest this update: Sat 23 Aug 2025 01:02:05 +0000
Manifest next update: Sun 24 Aug 2025 01:02:05 +0000
Files and hashes: 1: meKI93yZhWTyY056Lh0AnfLviH8.crl (hash: CzrinLQL0+GELhycd+0Loo9kd90ZUEhYshpLFvaeyrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:6e:6c:72:3b:3d:bb:11:4e:93:2d:9d:35:42:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Validity
Not Before: Aug 23 01:02:05 2025 GMT
Not After : Aug 24 01:02:05 2025 GMT
Subject: CN=fa00ed4949743df9c0851a29680b33332976e7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c7:c1:95:bc:35:a6:c1:e0:40:96:2e:43:f0:
16:f3:34:cd:00:01:64:d6:45:1b:f8:51:42:a2:fd:
18:db:78:17:2e:af:34:24:a8:3f:8c:2e:2c:61:ab:
f8:df:97:d7:48:b1:55:cb:d4:d0:5b:fd:5d:c7:84:
25:5f:fb:c9:21:08:92:1d:a5:57:58:2c:25:07:88:
ed:fe:c3:e5:27:f2:7a:f8:43:a6:c6:d0:5f:fa:0e:
a3:d9:8d:7f:d8:cd:f9:8b:a4:17:28:18:f1:3f:9c:
07:64:c0:57:77:9a:c3:ea:11:18:e7:46:f5:63:4d:
9f:12:ee:55:3e:83:24:1d:54:b3:41:f5:60:3c:c4:
7f:d5:b0:72:0c:a0:53:44:d8:73:80:10:49:8f:0d:
88:5d:b6:97:41:66:00:43:cc:11:c8:f3:90:64:8e:
e4:f5:9c:c1:6d:37:76:d1:36:2a:a4:e9:05:3d:91:
d0:a0:ff:5c:17:7c:7c:82:2c:68:cd:03:85:3f:db:
3c:1e:23:65:5e:88:6a:c6:84:c8:ea:5c:ae:bf:d5:
3f:7a:eb:10:12:a0:3e:87:06:d7:e8:6d:a7:cc:d2:
4e:ad:fb:ae:5f:01:b5:06:5b:d8:8d:f7:78:a5:e8:
79:4b:ea:02:e2:28:c3:f7:6c:a6:59:d0:84:f1:f5:
3d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:00:ED:49:49:74:3D:F9:C0:85:1A:29:68:0B:33:33:29:76:E7:AC
X509v3 Authority Key Identifier:
keyid:99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c0:23:2d:b0:80:2d:56:bd:72:71:54:aa:56:8d:8d:48:5d:
19:77:cf:8c:0a:69:93:91:b6:9d:6b:36:33:48:08:5d:cd:dc:
76:dd:24:bf:3b:61:8a:45:ff:cc:5f:ba:1c:84:fc:17:14:de:
d8:3a:b8:d7:49:9e:10:67:71:d7:b7:03:ce:7c:2e:09:78:21:
bd:ab:d6:d6:24:61:44:ef:6d:ea:c6:d3:f6:fd:8c:8c:ba:a0:
27:f9:6f:be:87:dc:a3:62:38:8a:20:05:cd:d7:85:2c:8e:5b:
82:31:33:a7:fe:12:ce:12:c0:a2:bc:66:9d:6b:b6:06:66:3e:
a6:c1:03:8c:77:50:e2:2f:15:7a:36:f8:79:91:55:3e:97:8b:
7f:a6:30:37:f1:da:30:b0:b3:c1:98:64:3a:3d:e8:e1:92:35:
70:a3:88:f0:c0:aa:5f:de:85:d8:6f:fc:b5:75:40:86:26:b2:
a0:23:d0:f0:18:bc:1d:0d:90:f4:52:67:bd:f8:ce:28:56:32:
ed:05:2c:00:47:28:ff:b3:a0:d6:d0:23:59:c5:cd:dc:82:df:
02:7c:59:b0:1e:3d:5e:21:f1:a2:1b:cc:c0:5d:72:42:30:94:
86:76:04:a2:ec:df:96:02:4a:7f:51:be:0f:36:5d:b6:bd:27:
fa:35:fe:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:18 2025 by rpki-client