Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft
File: 1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft (raw, json)
Hash identifier: OSTX4XKaZf1aWRHw4fT9mfOgzIYa/lEV1ciok7d/ptI=
Subject key identifier: C2:4D:9D:1C:30:E1:CB:0F:90:30:66:27:69:59:D0:94:32:3B:4C:5E
Authority key identifier: F8:C1:1E:87:E1:A9:53:12:B6:C5:9A:5F:CB:D8:97:64:6B:4A:4F:81
Certificate issuer: /CN=f8c11e87e1a95312b6c59a5fcbd897646b4a4f81
Certificate serial: 0198D4E08E611F44620E415BBB692E5E8584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft
Manifest number: A4
Signing time: Sat 23 Aug 2025 03:02:22 +0000
Manifest this update: Sat 23 Aug 2025 03:02:22 +0000
Manifest next update: Sun 24 Aug 2025 03:02:22 +0000
Files and hashes: 1: 1-MEeh-GpUxK2xZpfy9iXZGtKT4E.crl (hash: ggD7O4S6BiNsgMueYzIw/uapTBNn7umfSGqs7eH+1No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:8e:61:1f:44:62:0e:41:5b:bb:69:2e:5e:85:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c11e87e1a95312b6c59a5fcbd897646b4a4f81
Validity
Not Before: Aug 23 03:02:22 2025 GMT
Not After : Aug 24 03:02:22 2025 GMT
Subject: CN=c24d9d1c30e1cb0f903066276959d094323b4c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:43:76:73:29:a6:f4:ca:33:d6:8b:7d:4e:
50:96:64:b8:07:0c:11:cb:72:ea:dd:c5:84:8e:5f:
ab:15:e3:ba:f4:ed:37:3b:5c:ff:0f:af:ab:bd:48:
28:66:36:ac:81:11:a8:0f:24:40:4c:9f:3e:4e:33:
69:61:20:b3:04:f4:d3:29:86:d6:0d:49:e0:59:db:
e7:16:6e:39:65:61:7f:88:0b:22:0d:ab:20:1c:8c:
36:54:63:c7:45:10:e1:35:3f:0a:7f:db:83:73:63:
d1:54:59:99:ba:59:a8:c0:02:d6:e7:64:29:d8:0a:
27:2f:ef:7c:1b:83:fd:52:9a:d8:58:bb:0f:a1:55:
16:08:81:a9:fe:e1:dd:69:14:cf:13:3e:35:4d:f3:
78:ec:7b:1f:8d:32:1f:e7:e3:72:09:9c:d5:07:41:
f7:49:3f:17:c7:a6:b8:2c:29:39:9c:f6:8e:c6:f5:
44:55:12:35:d2:29:31:04:95:79:c8:01:83:2a:b6:
b1:f7:20:d5:15:42:4e:a8:b1:5a:8a:7d:70:28:62:
22:ee:f1:c6:db:4e:71:dd:8b:d1:b1:29:21:07:8a:
d1:c9:fd:db:e0:1a:78:d7:96:be:09:3e:8c:ca:b1:
b4:f7:aa:8a:1e:fe:03:55:16:70:64:0d:89:f2:a4:
5f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4D:9D:1C:30:E1:CB:0F:90:30:66:27:69:59:D0:94:32:3B:4C:5E
X509v3 Authority Key Identifier:
keyid:F8:C1:1E:87:E1:A9:53:12:B6:C5:9A:5F:CB:D8:97:64:6B:4A:4F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f2:9e:01:2f:84:8c:8f:b3:ae:a3:fd:5f:44:40:06:94:6c:
ac:01:f1:cc:b6:00:22:6b:16:ed:35:98:c2:26:74:fb:c0:33:
4d:16:8b:7a:45:d3:ba:94:fc:d2:ef:42:ad:3e:36:11:bd:a5:
69:ae:dc:0c:d0:fb:ce:fa:ae:83:3b:d2:17:a2:76:53:71:2a:
19:8f:5b:66:a2:ff:37:ab:f6:fb:2e:27:34:78:05:db:40:21:
8c:48:35:d2:3f:cf:4a:1d:70:62:68:a6:56:8a:f4:f4:03:80:
85:b6:19:c9:d4:00:a7:2c:d1:3a:24:a1:e5:c1:26:e0:6a:3e:
d9:f4:db:fe:64:6f:f4:78:4e:08:29:8e:1c:95:6b:70:8b:62:
77:97:c2:c1:d7:5b:1b:48:b1:de:26:db:f4:e1:ac:1b:6d:87:
13:af:e1:f3:95:f6:ba:35:ea:bb:d0:36:99:97:ec:e1:95:7a:
02:01:f4:d2:07:dc:9b:76:6d:84:83:ae:b3:d3:fd:2a:1e:e8:
1d:63:e3:00:86:c7:71:e6:e2:a0:ec:d3:b7:3a:dd:bb:bf:00:
61:a0:41:4f:31:2f:9c:72:db:39:7f:80:ca:36:0a:ce:cc:5f:
3a:aa:c0:71:5e:09:e8:a4:56:64:a1:3b:74:a1:ac:2a:55:67:
61:37:b7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:30 2025 by rpki-client