Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
File: meh9VkzLhhHhQKeyvyYMSiIrWdY.mft (raw, json)
Hash identifier: zEsCuRge6EKgrE7hAROFII7xaXpd0XbodpLimBcX+rU=
Subject key identifier: 9F:D4:1C:FF:33:87:F7:46:D1:AA:9F:01:01:38:5E:17:E6:CF:B6:05
Authority key identifier: 99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
Certificate issuer: /CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Certificate serial: 0198D4741E94B06005F2F50E19DDF0D1E62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
Manifest number: 0666
Signing time: Sat 23 Aug 2025 01:03:56 +0000
Manifest this update: Sat 23 Aug 2025 01:03:56 +0000
Manifest next update: Sun 24 Aug 2025 01:03:56 +0000
Files and hashes: 1: meh9VkzLhhHhQKeyvyYMSiIrWdY.crl (hash: PY/zavMVlNeDFt+0Q5regIjbIAIppjsNkMbxWm2GQt4=)
2: nFnXzGX9x8WjQH0WTEkYEV58ntE.roa (hash: qp697Wbqn7eonfV2epdNmLzMoHnyKSRFdJF1JaKpdqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:1e:94:b0:60:05:f2:f5:0e:19:dd:f0:d1:e6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Validity
Not Before: Aug 23 01:03:56 2025 GMT
Not After : Aug 24 01:03:56 2025 GMT
Subject: CN=9fd41cff3387f746d1aa9f0101385e17e6cfb605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:9f:0f:ee:2f:d8:b7:f9:b3:63:ac:4b:f2:
6b:af:c5:7f:25:e1:dc:31:55:6c:e6:7c:77:77:e2:
b2:51:02:87:29:49:32:ce:d5:f1:31:19:73:48:e1:
86:0a:67:3b:95:00:81:6b:44:07:76:8e:91:1e:dc:
bf:71:9a:b0:9f:47:a4:55:f9:12:2b:f0:47:fe:b6:
8a:80:e6:78:ac:04:29:27:75:d2:0a:11:01:39:85:
09:fe:5d:af:76:b0:51:28:96:b2:a8:d7:e3:cd:3e:
0c:35:c5:0a:78:a6:cb:b9:a6:46:96:b1:d0:33:aa:
fd:70:f2:b5:3b:1e:8d:b0:c9:df:dc:dd:dc:03:49:
57:5b:cf:f3:30:0a:42:a0:41:82:a1:e0:b3:32:7f:
49:69:2e:5e:24:48:a0:26:b8:30:83:10:27:38:61:
89:82:13:0f:8b:df:33:80:40:d5:88:dc:62:87:06:
d7:84:55:c0:60:84:61:80:e0:dc:37:13:e3:db:ca:
10:79:bf:ee:20:f0:e0:b5:2f:ef:7d:8c:5d:14:4a:
a4:b8:55:87:69:5f:d4:ff:d1:b1:9a:71:e1:22:58:
9c:34:37:ae:e3:86:4a:b1:7a:a5:b9:5c:5d:bd:a2:
0c:11:60:7b:b3:7f:71:cf:8b:92:21:ef:5d:14:49:
bc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D4:1C:FF:33:87:F7:46:D1:AA:9F:01:01:38:5E:17:E6:CF:B6:05
X509v3 Authority Key Identifier:
keyid:99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a5:bc:93:f0:f2:9c:2d:cb:ee:f9:1b:1d:ac:76:f5:7a:43:
f2:a2:13:84:6a:85:57:a1:b4:11:38:25:cc:a7:fd:12:0f:53:
7a:7d:d8:7a:75:aa:6e:47:d0:93:e9:63:74:88:33:87:5e:11:
25:b6:da:71:32:bc:13:62:37:d1:8f:9c:b4:60:8b:d2:f9:f1:
ca:94:90:df:c3:00:92:c2:39:bb:31:d7:8f:e6:df:29:e1:9e:
9c:f0:25:f0:ad:29:42:14:82:fe:db:81:13:94:bb:1e:d2:a9:
f6:7c:ef:1e:12:02:d0:3a:6f:0c:04:fc:4a:fc:4c:89:f6:f8:
cb:1a:c2:15:da:5a:7e:83:73:23:64:89:76:b7:3d:12:3a:c3:
77:8b:3b:f7:6d:2a:27:b9:f8:20:df:0c:3b:a6:50:a5:bb:de:
64:a3:d7:95:ac:89:13:98:64:6b:f4:76:2a:db:3c:12:45:a2:
02:5c:89:c0:ce:01:82:f7:05:35:94:6b:be:07:22:55:ee:e1:
14:5b:7c:93:ea:88:b2:3b:5c:45:4b:09:98:e1:f4:12:71:81:
d5:0c:e3:ae:6a:f1:18:24:3c:6b:ec:29:74:ba:62:7e:e7:be:
81:f9:f0:a2:e9:20:87:6f:f2:89:8b:df:e6:3a:be:77:7b:41:
31:13:8e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:43 2025 by rpki-client