Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
File: meKI93yZhWTyY056Lh0AnfLviH8.mft (raw, json)
Hash identifier: pdfQ20lg/tf9pyQSmR7QVQewLa08qyL24ZuViAOyYmM=
Subject key identifier: F2:CA:65:E7:66:53:31:8F:2C:57:76:6C:A3:C2:99:57:A6:5C:02:E0
Authority key identifier: 99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
Certificate issuer: /CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Certificate serial: 01974A7B75354B7F5C0EFAE554DA7C1FA4FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
Manifest number: 0DBF
Signing time: Sat 07 Jun 2025 13:01:34 +0000
Manifest this update: Sat 07 Jun 2025 13:01:34 +0000
Manifest next update: Sun 08 Jun 2025 13:01:34 +0000
Files and hashes: 1: meKI93yZhWTyY056Lh0AnfLviH8.crl (hash: X2akprxcif2TcWRilsekJJPSCKfhVtkqz3Ud0v8dm9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:75:35:4b:7f:5c:0e:fa:e5:54:da:7c:1f:a4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Validity
Not Before: Jun 7 13:01:34 2025 GMT
Not After : Jun 8 13:01:34 2025 GMT
Subject: CN=f2ca65e76653318f2c57766ca3c29957a65c02e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:44:e0:86:da:71:5c:6b:b6:7e:ec:ed:14:
4c:bc:3b:95:65:a9:80:11:ae:72:00:b9:65:3a:35:
21:14:de:a7:d1:20:60:3a:2b:5e:ad:07:b5:a7:97:
78:09:6d:36:4f:a0:fd:8e:cd:f7:c3:d2:8d:7c:04:
08:1d:ff:a3:27:e4:4a:18:63:ac:87:48:cf:ed:7d:
c1:b1:f4:71:6d:de:3f:4d:5c:b3:ad:ea:72:94:eb:
73:24:df:36:78:e6:5f:e6:09:e5:70:7b:d3:a2:05:
e6:f6:c9:73:b2:21:5c:14:81:5b:9f:52:7d:dc:2d:
44:7d:04:af:58:aa:28:4b:36:db:0a:1e:69:01:87:
fb:3a:ce:c9:24:3e:05:7d:f6:52:0f:2e:09:98:21:
e0:b6:66:15:3b:62:a8:05:06:7e:90:51:7f:27:1c:
c5:c6:d7:c1:d5:bb:0d:46:00:c9:97:fc:31:37:e8:
bd:81:9f:a2:41:5b:b1:2f:02:e3:5a:d8:a4:99:12:
6c:e9:a8:bb:19:64:6d:1c:ba:f8:40:3d:e9:1c:36:
45:a1:2e:cd:5e:41:49:51:a1:52:73:f7:a6:4f:7e:
82:b2:84:52:9c:e8:35:72:7d:26:94:34:94:ea:4d:
a8:77:d0:ce:e3:aa:e7:2e:a8:e8:3f:db:c7:2a:b2:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CA:65:E7:66:53:31:8F:2C:57:76:6C:A3:C2:99:57:A6:5C:02:E0
X509v3 Authority Key Identifier:
keyid:99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b7:81:cd:06:43:0a:20:1e:28:bf:db:93:c4:6d:9c:7d:31:
75:8c:2f:6c:2d:21:b9:a2:b8:5d:6b:86:38:99:57:7e:a8:b7:
72:89:a7:27:82:c3:ef:8f:c6:6d:4b:cb:38:1d:a9:d6:0b:c8:
00:25:64:b7:6a:9f:0d:84:d0:82:b5:0a:21:21:c4:8a:13:29:
e0:76:92:f0:04:02:35:b3:fd:68:ed:62:96:d5:a4:c8:02:bf:
c0:0a:76:c9:5c:e5:bd:cd:1a:b3:44:82:07:06:a7:f6:ba:16:
e9:d5:99:70:70:b4:a1:1b:b1:93:27:fa:34:20:25:16:5e:4f:
d6:14:7c:7c:14:d9:07:28:95:a2:ad:b8:d8:57:ab:5d:55:73:
1e:11:19:e5:98:ed:4a:ae:0e:f4:6e:2b:f6:eb:41:a8:b3:e1:
42:2e:3d:43:b9:6c:23:a0:1a:66:7f:9d:b2:f5:a9:2f:32:ae:
18:40:c1:43:cb:d6:ad:83:ca:c3:9b:bc:3f:15:8a:ed:23:54:
de:1a:03:e6:d4:99:27:15:5e:9c:f1:7e:e8:85:f9:f1:6a:9c:
57:fe:d6:e1:ef:6a:00:69:a2:95:99:ee:a4:f8:07:c2:ce:27:
cc:f6:fe:6b:9f:58:d5:3b:f5:ec:21:6e:10:db:20:75:ec:29:
41:a5:81:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:28:33 2025 by rpki-client