Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
File: MEEPXtOG-HkgPLRCil-V_ciZtZE.mft (raw, json)
Hash identifier: i+Kjwdtwn/NNsHe875Pk3ggtNCrvm1+M7Y11QrMB8aA=
Subject key identifier: 4A:6A:91:A9:C8:99:D0:45:67:95:73:FC:DB:A8:E4:A4:22:B3:C2:1A
Authority key identifier: 30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
Certificate issuer: /CN=30410f5ed386f879203cb4428a5f95fdc899b591
Certificate serial: 019A71B8A6E1C803E9CC057A945AEB6223A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
Manifest number: 06DC
Signing time: Tue 11 Nov 2025 07:01:58 +0000
Manifest this update: Tue 11 Nov 2025 07:01:58 +0000
Manifest next update: Wed 12 Nov 2025 07:01:58 +0000
Files and hashes: 1: MEEPXtOG-HkgPLRCil-V_ciZtZE.crl (hash: PzVuiTZf8kvA0l8HwQy+EO1dMAuFDkV3edvWuw+mU0E=)
2: VKnNvbVsRqF6coqOLVNx3je3CD4.roa (hash: SfCYWwwunVdh83nhVwYfX1uU9K1UYabADUPAPwp/I2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a6:e1:c8:03:e9:cc:05:7a:94:5a:eb:62:23:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30410f5ed386f879203cb4428a5f95fdc899b591
Validity
Not Before: Nov 11 07:01:58 2025 GMT
Not After : Nov 12 07:01:58 2025 GMT
Subject: CN=4a6a91a9c899d045679573fcdba8e4a422b3c21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:aa:6b:67:6a:d7:1b:d9:db:e5:a1:b6:61:51:
02:69:bf:35:45:df:69:5f:67:0b:21:d2:b0:71:20:
f1:03:ab:b0:42:d9:45:54:60:28:0f:96:d9:22:70:
c2:52:19:2b:df:7b:92:fa:cd:bb:1f:13:cf:07:13:
d0:2c:b4:35:27:3a:4b:00:dc:10:15:bc:51:17:d5:
84:70:f1:65:85:54:be:33:01:de:74:6b:0c:bd:94:
52:70:62:e0:c4:16:5b:83:af:9a:49:26:72:27:51:
27:92:17:9a:fa:aa:11:75:b4:14:40:08:68:60:6d:
98:7b:27:47:ba:96:88:62:f6:b1:dc:3b:95:cc:e8:
92:a7:3c:75:c3:30:07:1b:5a:fe:af:5a:f3:5b:3d:
bc:32:b3:36:48:7d:e9:a2:5c:ee:14:a2:b3:8b:c4:
5e:e6:1f:cd:fd:f4:69:fd:97:ca:60:0a:cc:f5:a3:
f8:7a:90:e9:ee:66:e8:26:b2:12:18:e7:a3:d4:8e:
ae:b6:92:14:5e:2b:d3:3b:bd:a3:f8:2f:a4:60:df:
0e:f2:74:4f:24:37:e9:19:61:19:8e:41:32:c8:33:
ce:6a:cc:11:6b:43:79:1f:25:27:94:29:11:3f:25:
af:f3:b4:96:c5:84:c3:0f:1e:29:be:96:e3:f3:10:
d1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6A:91:A9:C8:99:D0:45:67:95:73:FC:DB:A8:E4:A4:22:B3:C2:1A
X509v3 Authority Key Identifier:
keyid:30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cb:f0:df:f0:f3:9f:44:5f:f2:12:60:56:0c:a0:59:a9:aa:
07:8c:c9:13:94:04:d5:74:a7:46:f5:9b:f4:8a:77:65:ed:d7:
ae:61:8c:11:79:e3:20:d0:c5:60:22:8a:77:b7:d7:46:ea:0e:
34:5d:19:43:ca:e6:05:fb:78:e2:ec:40:1e:70:5e:84:b0:64:
80:85:e9:f6:f0:e1:36:12:33:2a:8d:7f:f5:2e:aa:34:65:cb:
29:23:80:d8:cd:6f:02:ae:46:cf:78:86:eb:30:37:5b:ed:8a:
19:64:4a:8c:18:4e:78:17:21:61:5d:70:c7:83:f3:e7:bf:a4:
d5:58:c0:d7:48:78:52:e2:63:bd:9a:61:0b:bc:52:7c:04:7c:
fb:76:e1:e7:69:92:67:2f:50:99:7f:00:dd:f2:38:35:9d:b4:
32:b2:cc:9a:9a:75:1d:e3:68:b6:2d:29:9f:39:0d:6f:8b:c9:
82:ce:52:19:e9:3a:24:61:df:ff:e9:31:10:8b:7f:63:47:cd:
b0:e5:25:8c:6c:b3:f5:9a:95:da:41:55:37:37:72:08:d8:af:
18:a5:36:4a:45:5d:85:79:a5:1a:c4:83:ff:81:eb:88:4a:4e:
41:c2:63:d2:07:13:64:27:0f:99:e4:62:30:fd:61:01:30:3f:
76:0d:99:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:20 2025 by rpki-client