Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
File: meB6Mav-wkkJsYhGOEb99lWHJCM.mft (raw, json)
Hash identifier: 99ElZ5v3g0QLSwhPgfZOwgXCO0zrxurkjCAVJmNV0bM=
Subject key identifier: 62:2A:B3:6F:E9:F9:A6:C8:93:16:13:B2:9C:62:CA:5A:0E:2E:9F:9F
Authority key identifier: 99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23
Certificate issuer: /CN=99e07a31abfec24909b188463846fdf655872423
Certificate serial: 019A1EADD3EC019F8E23D6AE360F4AF22061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
Manifest number: 12D6
Signing time: Sun 26 Oct 2025 04:01:39 +0000
Manifest this update: Sun 26 Oct 2025 04:01:39 +0000
Manifest next update: Mon 27 Oct 2025 04:01:39 +0000
Files and hashes: 1: meB6Mav-wkkJsYhGOEb99lWHJCM.crl (hash: 88CL3zV0QOqUntPS6MWGRClzBBl1YZaf4rvk0hmYZ8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:d3:ec:01:9f:8e:23:d6:ae:36:0f:4a:f2:20:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e07a31abfec24909b188463846fdf655872423
Validity
Not Before: Oct 26 04:01:39 2025 GMT
Not After : Oct 27 04:01:39 2025 GMT
Subject: CN=622ab36fe9f9a6c8931613b29c62ca5a0e2e9f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:d2:86:f7:b0:ab:67:41:c1:e8:68:99:a5:
c0:94:87:39:12:36:d9:60:0c:f7:bb:58:bc:c5:45:
fc:01:a7:ef:2e:e8:c9:79:e0:53:e5:12:20:ba:e9:
2e:73:86:5f:92:d9:7a:e1:2c:ad:35:1c:4b:84:4d:
3f:a5:3a:d7:00:48:a0:76:b2:eb:c4:a0:b1:33:c0:
8e:a2:23:4b:41:87:df:b2:49:76:96:34:2a:9d:44:
77:11:5e:6e:88:03:5c:ca:55:36:a6:93:78:55:5b:
1e:28:5c:4c:c7:d9:ca:2f:3e:07:80:2a:a4:2b:91:
26:ef:58:e3:e2:68:80:b0:5b:d0:52:1c:e5:5d:04:
be:67:ba:79:36:b7:55:e0:81:a0:3f:b2:b6:ca:cf:
ba:cf:5d:b6:02:f4:ec:9c:7c:05:3e:da:cf:85:55:
83:37:27:92:71:3a:07:ba:21:68:b1:f2:81:c1:e6:
80:c1:ee:d7:fa:ea:e8:f6:55:54:4a:dc:97:90:52:
f4:4e:38:c8:52:52:e8:4c:bd:61:70:07:ca:80:2f:
a4:94:7a:71:66:45:9e:07:9b:18:09:52:2e:e7:07:
38:eb:7a:83:83:6f:76:6b:2d:96:d9:34:39:e0:4f:
13:22:7d:b3:4f:0e:9e:58:93:5e:79:b7:47:fc:c8:
29:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2A:B3:6F:E9:F9:A6:C8:93:16:13:B2:9C:62:CA:5A:0E:2E:9F:9F
X509v3 Authority Key Identifier:
keyid:99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:04:b8:07:2a:d2:54:0e:f8:a3:7b:88:6e:dd:5f:a6:af:3f:
86:1b:97:69:9d:6f:bc:09:b9:44:04:75:22:54:ff:f9:70:21:
3d:95:aa:70:dd:f9:53:a9:4e:f7:0f:91:ef:b7:d7:ca:1d:1d:
b0:2d:27:ed:26:e0:a3:e8:c5:7a:08:d9:64:b9:45:b7:40:7b:
b2:46:2c:62:53:4c:4f:fa:ee:60:9f:2a:a3:17:6c:4c:ca:93:
28:c9:88:a4:9c:25:68:97:f0:28:a9:13:b2:42:f3:ae:91:2b:
f3:61:67:70:ec:e2:87:41:a0:f8:ec:6a:74:4f:bb:44:47:38:
a2:37:b0:a8:35:9e:5c:01:2d:f1:92:8d:22:b0:9c:6e:31:bd:
9a:d8:a1:34:d9:55:d8:e4:46:f4:cb:26:60:0f:10:0d:e4:55:
37:d8:63:48:f8:b1:fa:05:13:10:54:68:c7:5b:01:52:4e:09:
4a:22:97:ff:9f:8d:ca:f0:19:7c:d0:2a:46:4f:ff:c2:a0:a9:
6b:c5:0f:57:67:e9:28:c6:a4:9f:c6:22:8a:b8:bf:86:4f:aa:
2b:51:29:c2:f4:5c:f9:5e:e5:f0:39:39:5d:95:00:59:bd:a5:
08:1d:fd:df:e3:c5:49:78:8f:26:ae:49:61:26:67:26:a5:4b:
c6:0f:7f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:09:29 2025 by rpki-client