Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
File: meKI93yZhWTyY056Lh0AnfLviH8.mft (raw, json)
Hash identifier: Oa1qgWun1NFLZHytzwXXeE/uzJEAR84zAsHRxprDfOg=
Subject key identifier: B8:5D:87:41:52:A0:B3:CC:0E:2B:E3:E4:63:FA:AE:18:78:D0:28:15
Authority key identifier: 99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
Certificate issuer: /CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Certificate serial: 019A71B79A3D7EB9E5CC8238080D5D801892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
Manifest number: 0F61
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: meKI93yZhWTyY056Lh0AnfLviH8.crl (hash: OM/sbhY8k5ms400Ua88zOz4IXF6uJyJzYAMTioDM06Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9a:3d:7e:b9:e5:cc:82:38:08:0d:5d:80:18:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=b85d874152a0b3cc0e2be3e463faae1878d02815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:99:8d:09:fb:cf:1e:f7:a5:ec:b6:c7:8e:
09:55:6b:7a:f5:4b:0f:c8:0e:ff:3c:20:5e:1f:b8:
f4:f7:4b:31:81:84:61:eb:a9:ee:b1:13:d7:6c:96:
37:c9:1b:14:e0:f4:f3:4a:5a:ac:8c:fb:b9:6e:af:
11:0d:4c:71:56:a5:71:b2:ff:d0:61:22:22:cb:1e:
40:52:eb:b2:b9:f0:90:5d:3a:ba:14:68:80:5f:fb:
c0:89:98:df:fb:c7:5f:ab:e4:b3:e8:ef:00:55:eb:
15:76:a3:4e:5f:80:eb:a3:57:41:c3:76:a2:1b:2f:
af:0d:9d:8b:59:a3:0f:37:f7:5f:6e:92:bb:43:87:
3b:5e:c4:be:36:ea:4a:a0:b3:e4:da:9c:cd:c6:61:
6d:e6:8f:58:ab:2e:92:0f:2d:ed:3b:93:e3:5f:ed:
3d:1f:01:62:67:c4:b8:ea:03:07:86:7f:5c:96:f1:
cf:40:2b:66:cc:a2:3f:9b:71:8b:3d:bd:d1:0b:54:
7a:ae:e7:d3:ab:cc:be:95:56:5d:b7:e0:73:3d:82:
af:2f:26:11:70:57:a1:9d:f1:43:d8:09:98:3b:06:
5a:db:85:63:9f:20:dd:f4:94:b3:4f:93:43:23:47:
98:ad:aa:7d:04:2a:1f:92:8f:1b:bf:30:88:d9:d4:
f9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5D:87:41:52:A0:B3:CC:0E:2B:E3:E4:63:FA:AE:18:78:D0:28:15
X509v3 Authority Key Identifier:
keyid:99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:84:10:c5:1f:0d:50:c4:4e:e5:67:42:fa:cc:db:53:38:13:
e3:b4:96:51:7d:bc:64:34:0a:92:ca:e8:50:59:9a:2e:e9:77:
ef:70:f0:d6:61:d5:6d:4a:33:74:ea:27:43:80:dd:d9:68:2c:
41:e0:93:3f:f7:00:cd:c6:94:5f:3f:dc:44:65:94:70:17:d3:
a4:a9:1b:23:01:e4:18:de:7d:fd:e4:72:69:8f:e0:b1:df:15:
72:c2:42:78:15:83:ec:4b:6c:60:3e:bc:15:e9:47:85:6e:91:
c9:06:54:d4:45:47:bb:07:92:c2:9e:77:3c:de:85:f0:03:38:
38:95:19:4f:c3:07:9e:63:2b:b7:b7:2d:c8:72:4e:67:3a:b2:
37:cf:af:5d:66:58:79:8e:6f:be:79:e3:fe:d1:e7:9b:fa:42:
76:02:58:cb:1a:cd:36:56:f4:8e:42:a7:7b:75:ae:28:7a:61:
f1:89:08:e3:e4:04:7f:fd:c5:52:45:79:21:80:5f:2d:f3:47:
f1:75:7f:d9:08:5f:fc:bd:2c:10:8c:9c:d2:de:6d:8c:89:37:
a6:f4:2a:72:d4:18:40:67:85:ac:4e:88:29:e8:81:9b:f7:5d:
96:cf:87:ff:7d:f9:1b:00:d2:c6:18:53:7a:19:67:09:23:3f:
e0:f9:44:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:30 2025 by rpki-client