Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
File: me-7KxZTQig3k33SfeNU5o-eAaM.mft (raw, json)
Hash identifier: g2JdFt3wSI0UUA6oGHHM4xDiP8klRPDmeg7LL9gyCxI=
Subject key identifier: 96:73:DA:E5:6F:6E:00:62:BD:83:D6:6B:F4:7A:EE:86:30:19:F4:80
Authority key identifier: 99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
Certificate issuer: /CN=99efbb2b1653422837937dd27de354e68f9e01a3
Certificate serial: 019652A4E14CA6D39A18AE5D2D1BDA083C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
Manifest number: 14FB
Signing time: Sun 20 Apr 2025 10:00:59 +0000
Manifest this update: Sun 20 Apr 2025 10:00:59 +0000
Manifest next update: Mon 21 Apr 2025 10:00:59 +0000
Files and hashes: 1: me-7KxZTQig3k33SfeNU5o-eAaM.crl (hash: V30FexiFmsHdYrq3w+qLMXDTT0l8gGJid6lI/vm50ik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:e1:4c:a6:d3:9a:18:ae:5d:2d:1b:da:08:3c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99efbb2b1653422837937dd27de354e68f9e01a3
Validity
Not Before: Apr 20 10:00:59 2025 GMT
Not After : Apr 21 10:00:59 2025 GMT
Subject: CN=9673dae56f6e0062bd83d66bf47aee863019f480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:b2:f4:10:d6:4a:f2:f5:b1:d4:88:4e:4d:
6d:ad:c3:72:9f:1c:e0:fa:9f:e7:b8:a2:c6:74:4c:
db:20:c8:59:aa:d7:b1:01:fe:94:3c:c1:d5:39:90:
33:4c:75:af:29:7e:25:f7:86:18:07:8e:c0:b4:9e:
db:d3:da:79:37:53:73:b3:d8:25:cc:77:ad:84:37:
cc:d8:89:33:ed:73:93:4d:82:21:81:0e:f7:94:26:
40:bb:60:a3:f6:15:ad:6d:be:53:ba:2f:90:85:e3:
cc:a0:5e:30:04:2f:02:bb:9a:45:87:9c:7d:2f:37:
d9:8f:e3:4d:7e:7d:8b:e8:6e:dc:7a:a6:0c:b7:00:
7a:08:2e:cd:b6:12:70:d3:65:1b:df:0c:4d:ce:b1:
7e:c2:3a:60:24:4b:b1:07:ee:e4:63:c8:36:1e:92:
6d:9a:ef:8b:97:a3:17:fb:5f:fb:98:59:bd:a1:46:
7e:37:75:0e:25:1f:95:65:db:35:a7:b5:94:56:12:
06:a8:63:49:b5:24:dc:6b:1e:79:af:c2:cf:6f:6f:
2b:44:8f:af:d5:87:81:9c:c2:b8:73:64:6e:43:41:
66:f1:d1:d2:3c:7d:0b:f6:a1:fe:08:07:4e:81:db:
f2:f9:87:8b:3d:e8:33:57:3d:6b:cb:5d:37:7c:fa:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:73:DA:E5:6F:6E:00:62:BD:83:D6:6B:F4:7A:EE:86:30:19:F4:80
X509v3 Authority Key Identifier:
keyid:99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bd:00:ec:ea:6d:2b:df:a0:c2:db:27:d7:f0:f5:ec:b9:36:
55:6d:7b:17:d7:09:fa:04:fe:04:38:1a:73:0b:4c:94:37:de:
c4:b5:47:5c:36:00:9a:4d:60:1b:03:e1:4e:9f:d7:c4:74:e5:
10:73:d2:fe:69:b0:d0:7e:7e:ff:c4:2f:ec:d5:28:79:4c:0e:
0b:eb:da:d7:ce:39:46:8e:7e:1e:e2:70:91:ad:17:1b:ac:28:
ac:fd:b9:c9:b1:85:6e:d6:8c:65:91:e4:05:b7:f0:00:ff:e7:
33:e2:1b:01:40:c6:01:dd:9b:fb:a6:48:a5:29:88:e7:c0:78:
03:dc:19:01:66:c6:fc:ea:b3:52:da:fc:b2:74:00:51:d2:a0:
48:32:a7:db:6f:96:ac:6b:59:89:58:be:c9:a0:87:3b:5a:65:
85:32:ce:9b:2c:af:ca:94:89:c5:23:2a:1e:88:82:33:47:aa:
59:f8:3a:ed:be:1e:f8:a5:50:64:45:a4:3b:e7:32:10:23:96:
95:16:ea:10:6d:fa:23:c0:b8:74:07:a2:1c:0e:39:78:84:eb:
ed:03:e4:69:9d:d0:2a:1e:b5:16:50:de:01:e6:71:ba:5d:b5:
54:2a:84:82:e2:9d:e0:79:e5:de:87:62:17:f8:e8:2f:5e:80:
2f:ba:7f:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSpOFMptOaGK5dLRvaCDw3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZWZiYjJiMTY1MzQyMjgzNzkzN2RkMjdkZTM1NGU2OGY5
ZTAxYTMwHhcNMjUwNDIwMTAwMDU5WhcNMjUwNDIxMTAwMDU5WjAzMTEwLwYDVQQD
Eyg5NjczZGFlNTZmNmUwMDYyYmQ4M2Q2NmJmNDdhZWU4NjMwMTlmNDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0qy9BDWSvL1sdSITk1trcNynxzg
+p/nuKLGdEzbIMhZqtexAf6UPMHVOZAzTHWvKX4l94YYB47AtJ7b09p5N1Nzs9gl
zHethDfM2Ikz7XOTTYIhgQ73lCZAu2Cj9hWtbb5Tui+QhePMoF4wBC8Cu5pFh5x9
LzfZj+NNfn2L6G7ceqYMtwB6CC7NthJw02Ub3wxNzrF+wjpgJEuxB+7kY8g2HpJt
mu+Ll6MX+1/7mFm9oUZ+N3UOJR+VZds1p7WUVhIGqGNJtSTcax55r8LPb28rRI+v
1YeBnMK4c2RuQ0Fm8dHSPH0L9qH+CAdOgdvy+YeLPegzVz1ry103fPq3gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZz2uVvbgBivYPWa/R67oYwGfSAMB8GA1UdIwQY
MBaAFJnvuysWU0IoN5N90n3jVOaPngGjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWUtN0t4WlRRaWczazMzU2ZlTlU1by1lQWFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMjZiYmMtZDA2MS00YWYxLTg5NjQt
NDFkNzllZmI0OWE5LzEvbWUtN0t4WlRRaWczazMzU2ZlTlU1by1lQWFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zMjZiYmMtZDA2MS00YWYxLTg5NjQtNDFkNzllZmI0OWE5
LzEvbWUtN0t4WlRRaWczazMzU2ZlTlU1by1lQWFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMb0A7Opt
K9+gwtsn1/D17Lk2VW17F9cJ+gT+BDgacwtMlDfexLVHXDYAmk1gGwPhTp/XxHTl
EHPS/mmw0H5+/8Qv7NUoeUwOC+va1845Ro5+HuJwka0XG6worP25ybGFbtaMZZHk
BbfwAP/nM+IbAUDGAd2b+6ZIpSmI58B4A9wZAWbG/OqzUtr8snQAUdKgSDKn22+W
rGtZiVi+yaCHO1plhTLOmyyvypSJxSMqHoiCM0eqWfg67b4e+KVQZEWkO+cyECOW
lRbqEG36I8C4dAeiHA45eITr7QPkaZ3QKh61FlDeAeZxul21VCqEguKd4Hnl3odi
F/joL16AL7p/cQ==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:54:40 2025 by rpki-client