Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
File: meh9VkzLhhHhQKeyvyYMSiIrWdY.mft (raw, json)
Hash identifier: 0c433zmhKidvjcEMrU1xba40mQ4jA9poMUr7glxbOmE=
Subject key identifier: 56:2A:81:18:D2:7F:E0:DB:EF:51:48:26:06:D7:D9:1D:2E:1C:2B:32
Authority key identifier: 99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
Certificate issuer: /CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Certificate serial: 0197B6A22898B9429683DECDA2C940798F74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
Manifest number: 05D2
Signing time: Sat 28 Jun 2025 13:02:49 +0000
Manifest this update: Sat 28 Jun 2025 13:02:49 +0000
Manifest next update: Sun 29 Jun 2025 13:02:49 +0000
Files and hashes: 1: meh9VkzLhhHhQKeyvyYMSiIrWdY.crl (hash: 1Zu1FGsMTynOcKeconetTybkKESRJDuWmDyARiMV4ug=)
2: nFnXzGX9x8WjQH0WTEkYEV58ntE.roa (hash: qp697Wbqn7eonfV2epdNmLzMoHnyKSRFdJF1JaKpdqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:28:98:b9:42:96:83:de:cd:a2:c9:40:79:8f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Validity
Not Before: Jun 28 13:02:49 2025 GMT
Not After : Jun 29 13:02:49 2025 GMT
Subject: CN=562a8118d27fe0dbef51482606d7d91d2e1c2b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d7:e4:93:ab:0c:ef:27:1f:9e:8e:cb:40:11:
d8:da:a1:96:51:c6:7a:7f:99:42:34:6b:68:1c:fc:
2d:e0:56:50:61:d0:d0:e8:f6:66:d0:5c:9d:fd:0c:
51:06:ef:45:f2:89:db:b4:e1:2c:02:99:17:bd:96:
23:68:f4:74:69:04:4a:73:d3:4c:27:f3:6b:17:70:
17:30:a2:ac:6c:98:be:4b:b9:93:7a:f4:fd:d7:92:
66:e1:51:2a:00:91:6d:a6:a9:5d:3a:12:3d:2f:9a:
1c:9f:ef:76:2d:30:5c:e6:31:a8:47:b8:33:b1:e7:
6c:41:cd:90:ad:f4:79:9f:ac:5b:a8:2b:54:b8:91:
47:1d:dc:fe:5d:df:00:7a:f6:eb:7e:8e:9c:84:71:
72:a6:09:7b:f5:9c:ca:34:0e:ec:4e:cb:6e:a0:2a:
84:7a:e0:72:61:17:c4:fb:45:cf:d9:bd:dc:be:7f:
8c:de:87:d2:29:8b:04:1c:f0:c7:bc:fa:ac:d6:2a:
1b:4c:4b:9a:ca:76:3a:f5:5d:87:ea:eb:99:49:24:
b8:47:ae:33:96:21:0b:86:f9:62:3e:14:2e:65:f7:
f5:06:00:dd:c1:8a:47:5c:ce:ab:58:bf:9c:13:da:
b6:aa:23:1b:f5:a1:9c:e3:df:6c:06:20:cc:7e:88:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2A:81:18:D2:7F:E0:DB:EF:51:48:26:06:D7:D9:1D:2E:1C:2B:32
X509v3 Authority Key Identifier:
keyid:99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:01:6b:c1:bd:af:db:93:5b:09:cc:54:71:43:5b:f6:c2:7c:
9b:f6:9f:6a:67:38:62:72:ce:3f:3d:44:b0:72:78:52:c9:2c:
12:a7:bb:27:f7:65:e3:e9:44:22:23:16:b7:2e:4b:8c:64:50:
6d:50:15:b3:c7:31:fa:c5:d2:67:17:96:df:3a:eb:e7:2a:66:
43:6b:18:b4:44:b2:2c:b7:2b:a0:a2:ec:64:95:48:9a:21:2b:
2e:0e:1d:f1:34:e5:b5:d7:2b:74:9a:88:83:ab:15:82:1b:3d:
f9:c4:10:c8:ff:b7:4f:b6:ac:e3:60:50:22:2d:c0:92:09:16:
1c:e8:d8:5e:78:91:b5:87:34:f4:a5:ba:8c:cb:8b:6a:26:8e:
7a:6a:0b:65:58:bd:a4:01:55:19:cd:88:67:b9:72:7e:6e:db:
16:7a:f6:85:41:aa:12:6b:30:6b:09:4d:09:be:f2:a0:3d:3b:
69:16:bb:66:8d:0a:7e:a0:06:b0:41:6d:7b:e0:fa:71:b2:a5:
60:a2:f2:27:30:84:8f:f4:ce:6c:d6:6d:7d:e6:09:0f:39:ce:
b5:92:dd:ed:51:54:6e:47:74:69:e9:c5:36:f6:11:f1:1c:23:
3d:22:89:7b:83:d9:0a:c5:7f:9b:28:04:78:86:3b:4c:db:0b:
3f:aa:75:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:58:01 2025 by rpki-client