Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
File: me-7KxZTQig3k33SfeNU5o-eAaM.mft (raw, json)
Hash identifier: 6/KIPhmt29ViJJkB3NfxU+nqz5psVwBS1NyzhC49nNA=
Subject key identifier: DD:17:F4:56:E7:A7:4B:29:D0:F2:89:66:6C:E7:71:A1:24:2E:EC:21
Authority key identifier: 99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
Certificate issuer: /CN=99efbb2b1653422837937dd27de354e68f9e01a3
Certificate serial: 019A7301C23699C08D0C8C20C653829E07A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 13:01:26 +0000
Manifest this update: Tue 11 Nov 2025 13:01:26 +0000
Manifest next update: Wed 12 Nov 2025 13:01:26 +0000
Files and hashes: 1: me-7KxZTQig3k33SfeNU5o-eAaM.crl (hash: A6gYUKG+l6U6nrP6nny0VtspirWlpDAuDT3zVd/S4pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:c2:36:99:c0:8d:0c:8c:20:c6:53:82:9e:07:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99efbb2b1653422837937dd27de354e68f9e01a3
Validity
Not Before: Nov 11 13:01:26 2025 GMT
Not After : Nov 12 13:01:26 2025 GMT
Subject: CN=dd17f456e7a74b29d0f289666ce771a1242eec21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:a1:b6:e9:d4:ac:e9:80:fd:3a:8b:14:15:
a9:13:32:f0:69:e6:c2:39:7e:88:8e:53:00:16:e2:
d9:ee:3b:81:a1:fe:76:97:bc:3f:80:83:c3:59:f3:
73:c9:a2:d8:b7:c5:45:12:d2:bc:cc:6f:8d:79:e7:
67:1a:ac:71:60:2d:ae:02:08:86:ca:a9:1e:65:bc:
2c:6a:3e:a2:54:11:6c:ad:fc:f7:57:f9:bc:a4:55:
b7:d8:8d:d4:9a:26:04:32:3b:d1:e7:3d:46:64:32:
3d:cf:db:b6:e7:6f:05:96:14:34:67:c2:cd:4d:ed:
f8:fa:cc:e5:7e:c2:c0:6d:ef:1f:ae:c8:0f:65:0b:
78:f2:1d:e2:cb:8c:ae:e4:f3:e8:68:34:39:98:ae:
5b:e8:32:ea:17:7c:99:4d:d7:7e:7b:c5:9a:66:eb:
8f:d8:5f:9f:e9:e5:b5:74:81:e1:38:15:d6:47:fe:
7f:99:64:bc:84:5d:cb:49:6b:17:e8:fb:95:42:64:
6b:cd:39:27:49:d8:d0:1f:7d:a9:7d:8a:42:4f:4f:
58:fd:46:17:ca:a1:ce:72:80:19:97:3b:b7:3f:4d:
ca:96:0b:71:4b:76:32:f9:87:76:bb:8c:9d:7f:a7:
77:9e:1b:2b:fc:9f:2b:e3:a0:2d:53:88:ee:1e:04:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:17:F4:56:E7:A7:4B:29:D0:F2:89:66:6C:E7:71:A1:24:2E:EC:21
X509v3 Authority Key Identifier:
keyid:99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:08:64:01:39:c9:71:cc:df:c0:05:95:08:18:00:40:1c:84:
5a:c8:a0:7f:78:84:e6:e1:62:de:9e:c2:88:fe:b1:b4:ba:7e:
72:85:de:90:81:8e:31:9b:77:01:41:a9:bd:a6:ce:b2:80:eb:
98:cf:21:ee:5c:79:0e:c9:d0:d7:b1:1a:e4:26:cf:9f:7e:a3:
ea:ac:f4:7a:39:8a:52:c2:05:34:07:53:a3:10:3b:90:46:37:
26:b9:ed:58:08:0c:ae:54:55:9c:14:30:2a:f7:56:03:98:44:
f4:fc:6a:e1:ad:04:62:cf:13:85:b2:45:8a:95:81:ce:9f:1f:
ac:c5:ee:d8:7b:14:71:a9:a4:a4:6b:bd:3b:c0:0b:3b:36:b1:
53:5a:e6:27:7c:a1:b0:e7:8c:cb:15:2f:1f:31:95:63:2b:01:
9d:4b:b2:55:43:8c:6d:51:20:da:03:cf:a5:7c:b6:04:13:a8:
c5:d7:83:c6:b7:23:a1:5b:d3:d5:26:5d:53:21:45:13:5d:cd:
07:c1:0b:35:53:d0:a5:e0:fa:d1:bc:2f:7a:8f:b5:f2:ef:8a:
e5:15:80:27:bf:ad:79:27:6a:86:21:8c:19:3a:9a:20:32:d5:
da:bb:5e:10:12:52:c0:ca:83:28:82:65:7a:1d:c6:e5:6e:63:
27:70:a5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:39 2025 by rpki-client