Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
File: MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft (raw, json)
Hash identifier: sjy+CfmnIZhM2ek16XBC0w8EPzRL6p+4MsJ7LPVIYCY=
Subject key identifier: 63:2B:F2:59:2F:C6:96:3D:2F:92:BC:02:ED:41:D0:56:2D:74:55:72
Authority key identifier: 30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F
Certificate issuer: /CN=304a791dc74f2377232fbb07b6ae71240ab9555f
Certificate serial: 019916F65D7C5DEB4432E3A07B18A6071B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
Manifest number: 1668
Signing time: Thu 04 Sep 2025 23:01:08 +0000
Manifest this update: Thu 04 Sep 2025 23:01:08 +0000
Manifest next update: Fri 05 Sep 2025 23:01:08 +0000
Files and hashes: 1: MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl (hash: 0a5iLlzC/KLJYTdaHFeXrGreMoXse+AFtXJ/rwI4TuM=)
2: uvD1NcvE0sPpTuXNxuhcQ5fPB6Q.roa (hash: OX3lDi/3JYwmJY7qneRsBmTQJvJ1wj5rMRdXng4YNi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f6:5d:7c:5d:eb:44:32:e3:a0:7b:18:a6:07:1b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304a791dc74f2377232fbb07b6ae71240ab9555f
Validity
Not Before: Sep 4 23:01:08 2025 GMT
Not After : Sep 5 23:01:08 2025 GMT
Subject: CN=632bf2592fc6963d2f92bc02ed41d0562d745572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e0:ce:7a:b7:10:84:ae:b2:93:4f:01:a8:ad:
f0:32:e9:ac:b7:73:13:92:de:ad:4b:0f:21:f1:76:
ff:1d:0c:8a:cb:98:26:9b:32:d8:02:33:ff:a2:fd:
d4:31:7d:c3:54:b5:44:8d:92:b7:b7:c0:6e:8d:7d:
eb:02:78:d6:a5:97:48:c4:01:4d:6e:8a:66:44:4e:
9b:a5:11:95:76:a7:dd:f1:df:d3:39:18:73:63:8d:
2c:35:b7:36:89:32:7f:2a:57:63:f4:e4:91:64:e0:
5f:82:6e:cf:56:d4:f1:f7:e9:7b:b3:f0:21:05:cf:
6a:63:80:f2:09:31:cf:28:7a:2b:d5:08:99:a0:e1:
c3:8b:9a:05:a6:4d:2d:b7:d5:96:b7:62:8d:75:f8:
14:d2:28:eb:24:5e:a9:f2:c9:50:59:29:f1:b4:3a:
d6:c1:51:0a:d7:96:7f:dc:d9:1b:5e:f8:b1:86:21:
98:e7:d0:43:e1:ea:bf:7d:22:82:47:0e:fb:21:84:
6c:7f:7a:d2:cd:a5:b4:c6:80:00:2d:b2:77:9e:d3:
56:96:7d:72:bc:de:d8:fb:83:de:2b:fb:a4:b6:12:
d5:0e:be:7d:81:1a:26:2a:1f:2c:05:d4:f6:a6:94:
00:be:56:da:c8:05:a4:e5:f2:c9:1f:7c:73:5e:cb:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2B:F2:59:2F:C6:96:3D:2F:92:BC:02:ED:41:D0:56:2D:74:55:72
X509v3 Authority Key Identifier:
keyid:30:4A:79:1D:C7:4F:23:77:23:2F:BB:07:B6:AE:71:24:0A:B9:55:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEp5HcdPI3cjL7sHtq5xJAq5VV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/194c8e-e1b6-4aae-b5b2-7981fde6bf39/1/MEp5HcdPI3cjL7sHtq5xJAq5VV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:74:e2:6d:0e:c0:ef:e2:3d:1c:58:50:b5:a8:89:d7:0f:c0:
12:93:f9:a5:46:c8:a5:cd:45:ba:bf:cb:c3:6b:c0:4d:cd:14:
eb:73:fe:f2:45:97:89:77:a8:47:a5:6f:af:6e:28:03:94:4b:
ec:33:2a:5b:e6:c4:cd:c0:31:b6:b1:bd:cf:6f:bf:f0:27:6e:
a1:2d:de:16:b1:ac:88:f0:a4:7f:9a:ec:cb:86:4f:2d:66:f7:
fe:ae:b1:c5:2f:64:18:f0:39:ba:67:60:58:3b:81:d4:cc:5c:
21:08:e8:84:55:3a:cd:2c:9f:ed:7c:db:b0:f2:a9:72:7e:60:
ad:e7:90:b7:7a:e8:53:5a:89:6d:75:4e:16:2d:36:28:96:0b:
21:c1:5e:33:95:80:4f:53:32:53:87:13:f2:16:3a:9d:27:d5:
c9:03:f8:e0:0b:b1:e8:f5:6d:d5:d4:e3:b9:43:ef:c7:b1:ab:
c5:fc:c1:fc:ba:05:ac:73:ea:80:2d:3d:7a:0a:ab:10:5a:d9:
bc:aa:13:41:61:57:20:d5:77:75:b9:c2:19:13:b0:fb:83:ec:
de:a6:f1:cd:e8:86:38:95:19:5b:6a:de:62:aa:9b:01:4f:cb:
fb:17:67:15:7d:08:ea:aa:d3:ec:da:22:dc:2d:3f:6b:c2:80:
34:c2:36:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:35:55 2025 by rpki-client