Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft
File: 1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft (raw, json)
Hash identifier: LjnrM3OJMEAyMi3IQ6lzxs6/pBCkKoeBYBVjBltlSFY=
Subject key identifier: FA:5B:F3:67:C1:1A:A6:16:13:43:41:8D:14:BB:6F:1D:AF:6F:B4:95
Authority key identifier: F8:C1:1E:87:E1:A9:53:12:B6:C5:9A:5F:CB:D8:97:64:6B:4A:4F:81
Certificate issuer: /CN=f8c11e87e1a95312b6c59a5fcbd897646b4a4f81
Certificate serial: 019A7225E4441E3B1CFE38BA487667756A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft
Manifest number: 017A
Signing time: Tue 11 Nov 2025 09:01:16 +0000
Manifest this update: Tue 11 Nov 2025 09:01:16 +0000
Manifest next update: Wed 12 Nov 2025 09:01:16 +0000
Files and hashes: 1: 1-MEeh-GpUxK2xZpfy9iXZGtKT4E.crl (hash: 8tS2cpWvnr25384N7kOuVLZN/lk+iiiDITAcu1rFfZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e4:44:1e:3b:1c:fe:38:ba:48:76:67:75:6a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8c11e87e1a95312b6c59a5fcbd897646b4a4f81
Validity
Not Before: Nov 11 09:01:16 2025 GMT
Not After : Nov 12 09:01:16 2025 GMT
Subject: CN=fa5bf367c11aa6161343418d14bb6f1daf6fb495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:dc:d7:f3:a5:ee:cc:a0:38:b0:aa:5d:8a:
da:4b:a2:52:e2:cf:e4:24:9d:61:1f:99:f3:4d:6d:
3e:03:9a:72:a8:49:31:c1:68:57:38:8d:c5:d8:cd:
b0:0e:22:cc:a9:af:6b:e1:6c:36:b0:de:8e:7b:7c:
ad:cf:37:4f:ee:20:04:58:67:8a:76:db:d8:22:8e:
dd:3a:05:6f:da:53:d7:f9:33:93:0f:46:62:67:2f:
6c:1c:8c:22:7f:67:d2:2f:46:1d:1b:54:20:85:b7:
f9:9d:f5:23:10:ca:ee:96:de:9e:33:1e:71:6f:28:
8b:fa:14:6a:6c:69:35:d2:18:ba:9a:1f:69:83:d0:
71:45:0c:0e:ec:8a:3f:0d:a3:11:da:c3:88:19:4c:
30:8c:0a:a2:24:b1:33:41:6c:83:20:ae:ae:51:f9:
8e:c2:87:c7:25:75:cf:ce:c4:b6:5a:6a:3a:f4:12:
bc:a0:ae:f7:0f:7a:4b:af:51:d7:5e:26:55:49:e9:
0f:b4:0e:61:7d:11:c6:f7:b9:d2:c6:3b:39:a3:22:
29:be:40:61:da:70:3a:0d:f2:b9:c6:fd:f5:de:9c:
6d:15:30:47:28:d1:ac:fe:ab:e3:a5:5a:65:b4:ad:
f2:ac:e5:8c:89:0b:6c:7c:52:5f:68:0b:83:ee:3c:
3a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5B:F3:67:C1:1A:A6:16:13:43:41:8D:14:BB:6F:1D:AF:6F:B4:95
X509v3 Authority Key Identifier:
keyid:F8:C1:1E:87:E1:A9:53:12:B6:C5:9A:5F:CB:D8:97:64:6B:4A:4F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/adc689-8ba5-4d12-ad71-c6a4f00d650a/1/1-MEeh-GpUxK2xZpfy9iXZGtKT4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:0c:6a:d4:09:c5:0d:bb:4d:f8:e5:88:5a:cb:3c:2c:d1:cb:
df:b8:4b:7f:df:db:07:1d:4e:10:0e:f2:45:d5:01:c9:3d:f9:
d6:c9:72:81:cd:6e:69:84:78:9f:20:a9:e2:52:9a:af:22:cd:
81:ce:3b:58:86:c2:a9:ed:42:f7:7e:79:18:b0:ba:1b:70:90:
e3:97:a8:99:dc:46:5e:fa:5d:da:f1:be:11:aa:24:ab:84:6b:
28:75:c7:14:39:e1:8a:22:8a:4b:5a:06:e2:cf:ec:9e:90:50:
74:5e:23:5b:46:f3:a5:67:c3:cd:e8:fc:ba:d6:56:c5:25:f3:
c2:04:a2:8e:0e:95:42:e4:53:a9:51:82:28:66:e3:dc:6b:97:
40:3a:30:ae:b1:47:97:71:a8:75:3e:aa:e9:37:f6:d7:58:6d:
45:56:f3:1c:64:e0:0f:c4:21:fb:1a:b6:1c:a4:a0:40:77:bd:
58:69:33:f3:d2:a3:27:c3:b9:b8:7c:06:3b:ff:d9:a3:ae:5a:
8c:61:1a:db:92:f1:58:88:04:f6:e5:db:d5:cd:6d:86:3e:62:
b1:60:6b:95:e5:a7:a9:40:c5:96:07:1e:73:6b:4e:93:f2:45:
79:f4:85:75:99:b2:c9:c7:f6:4e:75:38:be:3c:03:3a:27:ce:
0b:bd:94:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:22 2025 by rpki-client