Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
File: MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft (raw, json)
Hash identifier: +HMz9Je55VrKPFww7JHeokxACE60q3vMs5bH1gznFz8=
Subject key identifier: E0:3F:82:96:16:65:E7:07:C1:05:9C:2D:D4:66:1C:26:8B:10:C5:60
Authority key identifier: 30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE
Certificate issuer: /CN=304aa258224fa3c67bad1f2b9f9b28a65d95feae
Certificate serial: 019A71B78CCA5112A8BFE0711159B539A4B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:00:45 +0000
Manifest this update: Tue 11 Nov 2025 07:00:45 +0000
Manifest next update: Wed 12 Nov 2025 07:00:45 +0000
Files and hashes: 1: MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl (hash: WFEsBPS7nFcPeKnppgdivfhf3npDb/t4KfR5NJLSDng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8c:ca:51:12:a8:bf:e0:71:11:59:b5:39:a4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=304aa258224fa3c67bad1f2b9f9b28a65d95feae
Validity
Not Before: Nov 11 07:00:45 2025 GMT
Not After : Nov 12 07:00:45 2025 GMT
Subject: CN=e03f82961665e707c1059c2dd4661c268b10c560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:fd:3a:41:b3:67:38:fd:ee:19:13:fb:23:
21:45:ad:94:2d:a5:20:fe:ee:63:5b:4f:e8:74:21:
d7:5c:9a:44:f9:14:05:b1:89:32:42:e6:e3:31:4e:
ea:48:5b:ab:2a:26:72:ef:cc:19:b6:41:59:eb:30:
b7:5a:cb:19:53:b9:de:42:33:17:d5:44:3a:e1:06:
f6:90:f3:b6:e7:2c:e6:d1:58:c5:6a:53:a4:ef:4f:
3d:4b:58:8a:65:19:c7:7e:af:33:52:12:6e:d7:80:
80:f9:1e:8b:7a:be:0b:e4:9d:8e:fd:13:bf:0c:f6:
e4:3f:3d:a6:fe:5e:df:bb:ca:f8:05:b0:8b:09:b8:
18:08:bb:ea:1b:c8:5e:b2:06:7a:66:63:ab:01:dd:
7c:da:69:05:19:94:22:2a:4f:2a:47:6f:8c:3e:70:
8c:85:b9:4a:91:83:51:b6:65:af:a7:1e:31:63:f2:
77:48:21:9d:7a:79:a3:ca:b2:47:2a:22:f6:e5:11:
c6:1d:d9:12:67:d4:1d:8a:7c:5c:ec:66:51:43:fa:
17:f2:4a:dc:8c:ad:78:73:9e:0c:de:78:c2:0c:ba:
24:6c:40:b3:fe:73:87:ae:20:06:c8:76:8a:71:58:
61:e9:3a:73:b6:46:a9:3c:79:4d:b0:4d:55:99:4b:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3F:82:96:16:65:E7:07:C1:05:9C:2D:D4:66:1C:26:8B:10:C5:60
X509v3 Authority Key Identifier:
keyid:30:4A:A2:58:22:4F:A3:C6:7B:AD:1F:2B:9F:9B:28:A6:5D:95:FE:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEqiWCJPo8Z7rR8rn5sopl2V_q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/55ebdc-8f38-4a07-b048-93bbb1ba316d/1/MEqiWCJPo8Z7rR8rn5sopl2V_q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f3:d1:5d:dd:7f:92:44:41:69:c5:54:48:3b:8b:28:9e:27:
d6:e0:b3:4f:a3:ec:f6:a3:70:14:3f:9a:18:78:ab:5d:7b:24:
20:29:b8:c9:c0:46:ee:52:55:33:91:b0:f3:0c:6a:6d:48:57:
0a:80:13:19:04:41:22:a9:ac:52:8f:a8:4b:1b:3c:ce:4c:e8:
ea:1b:7a:a2:6a:ae:9f:27:3c:83:b1:fe:88:f0:eb:84:9f:1c:
33:d0:29:9f:3f:65:cf:2f:09:f1:e7:6a:ad:68:8a:f3:a1:55:
d8:4a:6c:55:b5:c3:64:06:7d:05:31:c1:20:a3:a3:c3:99:78:
73:65:e5:71:4f:69:46:86:b6:5b:07:c0:de:cc:3e:78:30:67:
97:b1:cb:31:1a:9f:c1:dd:42:29:71:76:2a:d6:a6:6d:b1:1f:
86:9c:66:4d:5c:0b:0e:4e:63:c5:d1:bf:16:cd:c5:a8:e8:47:
d9:ce:07:1b:56:41:ba:b2:aa:8c:c8:f9:13:ef:d2:d8:4a:9b:
dc:7b:53:6a:cc:ee:5f:48:74:e4:15:41:3e:17:78:65:42:cf:
50:29:c7:79:22:60:d3:30:cd:41:70:70:05:67:a4:c6:1c:f3:
99:2f:85:d7:c6:08:b6:ee:0d:0c:52:c5:83:79:54:f5:20:01:
8f:ef:33:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt4zKURKov+BxEVm1OaSxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNGFhMjU4MjI0ZmEzYzY3YmFkMWYyYjlmOWIyOGE2NWQ5
NWZlYWUwHhcNMjUxMTExMDcwMDQ1WhcNMjUxMTEyMDcwMDQ1WjAzMTEwLwYDVQQD
EyhlMDNmODI5NjE2NjVlNzA3YzEwNTljMmRkNDY2MWMyNjhiMTBjNTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYT9OkGzZzj97hkT+yMhRa2ULaUg
/u5jW0/odCHXXJpE+RQFsYkyQubjMU7qSFurKiZy78wZtkFZ6zC3WssZU7neQjMX
1UQ64Qb2kPO25yzm0VjFalOk7089S1iKZRnHfq8zUhJu14CA+R6Ler4L5J2O/RO/
DPbkPz2m/l7fu8r4BbCLCbgYCLvqG8hesgZ6ZmOrAd182mkFGZQiKk8qR2+MPnCM
hblKkYNRtmWvpx4xY/J3SCGdenmjyrJHKiL25RHGHdkSZ9Qdinxc7GZRQ/oX8krc
jK14c54M3njCDLokbECz/nOHriAGyHaKcVhh6TpztkapPHlNsE1VmUso1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOA/gpYWZecHwQWcLdRmHCaLEMVgMB8GA1UdIwQY
MBaAFDBKolgiT6PGe60fK5+bKKZdlf6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUVxaVdDSlBvOFo3clI4cm41c29wbDJWX3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81NWViZGMtOGYzOC00YTA3LWIwNDgt
OTNiYmIxYmEzMTZkLzEvTUVxaVdDSlBvOFo3clI4cm41c29wbDJWX3E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi81NWViZGMtOGYzOC00YTA3LWIwNDgtOTNiYmIxYmEzMTZk
LzEvTUVxaVdDSlBvOFo3clI4cm41c29wbDJWX3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/PRXd1/
kkRBacVUSDuLKJ4n1uCzT6Ps9qNwFD+aGHirXXskICm4ycBG7lJVM5Gw8wxqbUhX
CoATGQRBIqmsUo+oSxs8zkzo6ht6omqunyc8g7H+iPDrhJ8cM9Apnz9lzy8J8edq
rWiK86FV2EpsVbXDZAZ9BTHBIKOjw5l4c2XlcU9pRoa2WwfA3sw+eDBnl7HLMRqf
wd1CKXF2KtambbEfhpxmTVwLDk5jxdG/Fs3FqOhH2c4HG1ZBurKqjMj5E+/S2Eqb
3HtTaszuX0h05BVBPhd4ZULPUCnHeSJg0zDNQXBwBWekxhzzmS+F18YItu4NDFLF
g3lU9SABj+8zSg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:16 2025 by rpki-client