Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
File: meKI93yZhWTyY056Lh0AnfLviH8.mft (raw, json)
Hash identifier: VNg7z4SiGBRhrHov9RYR3qBN90uamvoPTM49LvvQNHQ=
Subject key identifier: 7D:A5:06:88:77:1C:95:DE:FD:58:FB:71:42:F7:52:F2:A4:0F:93:FB
Authority key identifier: 99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
Certificate issuer: /CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Certificate serial: 0199239EBE0DEC65A7C0BF9814FFBF7E5D9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
Manifest number: 0EB4
Signing time: Sun 07 Sep 2025 10:00:29 +0000
Manifest this update: Sun 07 Sep 2025 10:00:29 +0000
Manifest next update: Mon 08 Sep 2025 10:00:29 +0000
Files and hashes: 1: meKI93yZhWTyY056Lh0AnfLviH8.crl (hash: KSaRA4pRpYC4vPHVLs/jfa7ptssdh6DQW4HR+KNZVF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:be:0d:ec:65:a7:c0:bf:98:14:ff:bf:7e:5d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Validity
Not Before: Sep 7 10:00:29 2025 GMT
Not After : Sep 8 10:00:29 2025 GMT
Subject: CN=7da50688771c95defd58fb7142f752f2a40f93fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:47:0c:60:76:44:35:de:5b:69:9b:66:41:
e5:05:05:b8:e3:05:57:42:20:ca:be:0e:e4:53:52:
ca:70:dd:d8:08:06:ba:c8:bb:05:21:e3:dd:26:db:
fa:1a:8f:57:47:b5:6a:a1:19:39:0d:7f:41:4f:06:
65:bd:97:4a:f0:66:39:31:5f:62:e2:80:1d:29:c2:
47:a0:51:eb:b9:94:29:17:65:8b:c7:6c:2a:2f:29:
4f:77:94:61:1e:fe:d4:c6:2b:42:94:87:28:f2:0f:
3d:38:26:db:b4:d8:9d:a5:5b:da:c2:66:3b:7a:82:
b8:65:44:23:2b:01:38:c2:db:0e:6e:6e:04:5e:1a:
26:7b:c9:2b:05:9e:be:8b:d6:13:f8:d4:03:43:1f:
9e:46:7f:94:bb:be:cf:85:5b:cc:59:23:95:9a:13:
3b:9e:4a:17:58:af:55:98:fd:27:15:39:3a:dd:99:
62:94:09:4b:d1:96:18:b8:f1:a9:a4:27:6b:bd:38:
8c:53:98:51:86:44:08:3c:45:d4:0f:92:2f:cb:cf:
b3:6a:83:52:4f:0d:78:12:7c:83:a0:dc:1f:c5:7f:
57:56:3c:fc:60:53:ad:d9:5f:6f:b0:2a:ea:06:8a:
0d:dd:55:5e:af:21:2b:2b:78:dc:14:0d:20:6b:ab:
57:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A5:06:88:77:1C:95:DE:FD:58:FB:71:42:F7:52:F2:A4:0F:93:FB
X509v3 Authority Key Identifier:
keyid:99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:56:1a:12:14:b0:95:5a:51:3a:a7:89:81:e2:c6:d5:63:ba:
9f:8b:76:eb:83:23:ac:48:bb:a2:45:33:33:2b:a2:fa:ef:75:
20:17:8b:7a:19:a5:e4:c5:25:73:b7:72:0e:0b:35:01:9a:90:
f3:41:90:08:be:bb:13:48:e9:9f:fe:48:d7:c5:d3:ea:b5:f3:
46:9f:d4:79:23:e8:b7:70:d9:5c:b5:76:e0:0f:1c:1d:97:38:
ae:22:cd:4e:f1:de:2c:0e:cf:d1:0a:97:45:4e:31:79:de:76:
8d:79:9f:dd:d9:31:04:1c:8a:3c:f8:ab:e2:fa:99:b5:31:b8:
4f:f0:83:90:1f:78:98:41:84:f5:90:a5:09:4e:1d:dd:22:98:
17:f3:e9:8b:e1:29:d0:22:2e:5c:e6:11:3c:b1:14:04:77:ae:
e4:51:90:ae:0f:f4:0f:21:b1:fa:5f:7e:a6:4a:84:cb:fd:70:
8d:84:ba:09:bf:86:9a:ce:f8:d2:3b:84:95:cc:6a:6d:3b:aa:
f6:d2:a3:89:75:11:e8:16:c3:1c:b6:c6:41:21:8e:b6:f8:5b:
0c:c3:70:2b:65:c7:2c:3f:36:2e:fc:0c:af:07:27:e1:bc:ee:
f9:de:17:8e:51:47:af:63:ea:25:3d:1a:c5:45:3a:b0:60:bf:
75:ef:56:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:12 2025 by rpki-client