Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
File: meB6Mav-wkkJsYhGOEb99lWHJCM.mft (raw, json)
Hash identifier: ZbHTWEFUT/hrWn3rhMzRWROkQm3/ETigAsHS5t90d9Y=
Subject key identifier: 7F:D1:09:BA:B7:4F:B2:D7:B4:76:CF:B9:C5:6B:D3:37:1B:CC:B8:A6
Authority key identifier: 99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23
Certificate issuer: /CN=99e07a31abfec24909b188463846fdf655872423
Certificate serial: 019923A0BEBEC49470CA3C411661EF905C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
Manifest number: 1254
Signing time: Sun 07 Sep 2025 10:02:41 +0000
Manifest this update: Sun 07 Sep 2025 10:02:41 +0000
Manifest next update: Mon 08 Sep 2025 10:02:41 +0000
Files and hashes: 1: meB6Mav-wkkJsYhGOEb99lWHJCM.crl (hash: 8BIOsAYYcHZH+z5zq6Gbl0fgiA/NBt5brn1dM+7VdsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:be:be:c4:94:70:ca:3c:41:16:61:ef:90:5c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e07a31abfec24909b188463846fdf655872423
Validity
Not Before: Sep 7 10:02:41 2025 GMT
Not After : Sep 8 10:02:41 2025 GMT
Subject: CN=7fd109bab74fb2d7b476cfb9c56bd3371bccb8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:0f:6e:3b:83:7a:5f:78:6d:4a:bc:d0:61:
46:09:62:5e:73:9a:58:11:33:d4:fb:b4:b4:e5:61:
c0:fe:45:dc:d1:65:16:6a:3f:8e:e9:7d:49:a8:a4:
47:c6:53:4e:21:14:a9:51:a0:35:d7:ac:6c:6f:b1:
41:60:59:f4:7a:c8:35:ee:29:f0:18:a7:7d:3d:6a:
e3:3f:68:62:b1:6b:23:92:9b:b2:3a:e8:47:4c:43:
53:31:51:f4:fe:46:37:e9:a5:9b:d5:8e:13:74:af:
16:a3:b0:36:f9:32:2c:ed:b4:4f:65:c2:6a:07:eb:
72:7a:b2:71:55:2d:8c:85:6e:6b:b8:a0:89:2f:01:
0b:d9:fc:e3:17:42:b8:48:50:c2:5e:70:69:9c:7d:
02:a6:4f:7e:0c:68:06:79:ae:a8:64:30:67:64:29:
a5:6d:48:f2:d0:80:20:2c:60:61:33:8b:0a:2c:b8:
3b:d2:ce:d2:ec:1a:66:03:1c:33:9f:3f:c8:98:20:
90:73:56:c3:20:72:25:2c:59:86:13:d0:34:1d:83:
7b:4c:2f:b1:d4:41:bb:38:c8:dc:30:b6:f0:2a:98:
5e:e7:92:44:ef:bc:1c:9e:7d:01:e5:18:cd:06:95:
cf:ef:1a:d2:00:9d:fc:d0:bf:d1:53:e3:47:83:de:
55:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D1:09:BA:B7:4F:B2:D7:B4:76:CF:B9:C5:6B:D3:37:1B:CC:B8:A6
X509v3 Authority Key Identifier:
keyid:99:E0:7A:31:AB:FE:C2:49:09:B1:88:46:38:46:FD:F6:55:87:24:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meB6Mav-wkkJsYhGOEb99lWHJCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5a2da8-15c7-4bd9-976d-2162458eace5/1/meB6Mav-wkkJsYhGOEb99lWHJCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a8:ce:16:63:46:ab:fe:f9:d3:41:df:d4:b3:c1:80:ac:66:
f9:ea:b0:e4:b7:de:53:26:79:1f:66:c4:a9:cb:ad:8f:37:b1:
58:53:6c:50:85:34:73:26:3f:ea:f1:e7:7e:63:7b:f7:e8:ec:
67:9f:08:c8:5a:60:26:18:03:f9:fa:82:78:95:2a:d9:05:1f:
3a:ac:2e:58:93:78:7c:10:20:c4:f2:03:80:2f:90:3a:7d:f3:
9e:0d:e9:21:31:c7:90:08:9b:2c:f3:0f:c4:7e:3f:6e:5b:4d:
5b:34:d5:83:89:f8:ca:7d:85:c5:46:48:7a:37:30:c5:aa:9c:
07:27:d9:0a:41:c0:86:f0:bc:4b:2a:cc:c8:22:42:00:41:f2:
3d:f7:43:79:2a:df:ad:ea:55:bc:e7:fb:e2:f0:93:05:68:10:
94:45:08:a5:35:0f:29:c9:e9:d8:4f:23:3f:21:de:1e:40:e3:
00:d1:85:e2:7c:90:d7:bb:ec:05:45:ea:47:68:1b:6c:b3:9f:
43:bd:81:ef:33:e8:2c:92:9e:c0:7a:b3:3a:62:a6:3e:93:cb:
09:70:c5:c6:2a:28:6b:17:bf:47:9d:20:5b:60:d6:8c:d5:26:
c0:5b:47:85:ee:a0:06:61:40:bf:77:f5:ac:fe:1d:ad:b0:80:
e3:3b:39:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:37 2025 by rpki-client