Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
File: meh9VkzLhhHhQKeyvyYMSiIrWdY.mft (raw, json)
Hash identifier: gduWUDQ2SewswTGRyJtaSi7cgQ6xbeB6bhHq3NhifPk=
Subject key identifier: A8:39:28:F2:08:30:CA:2F:A8:3E:6C:DE:C2:75:74:BE:00:47:C6:4E
Authority key identifier: 99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
Certificate issuer: /CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Certificate serial: 019921B1E9E92170EAA8E3C03CAC33518170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
Manifest number: 068E
Signing time: Sun 07 Sep 2025 01:02:11 +0000
Manifest this update: Sun 07 Sep 2025 01:02:11 +0000
Manifest next update: Mon 08 Sep 2025 01:02:11 +0000
Files and hashes: 1: meh9VkzLhhHhQKeyvyYMSiIrWdY.crl (hash: YNzghKUVluy/3rvEKxIKtZrNPwXWbN3NHSjbA6Y5K0M=)
2: nFnXzGX9x8WjQH0WTEkYEV58ntE.roa (hash: qp697Wbqn7eonfV2epdNmLzMoHnyKSRFdJF1JaKpdqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:e9:e9:21:70:ea:a8:e3:c0:3c:ac:33:51:81:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Validity
Not Before: Sep 7 01:02:11 2025 GMT
Not After : Sep 8 01:02:11 2025 GMT
Subject: CN=a83928f20830ca2fa83e6cdec27574be0047c64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:59:01:d4:4b:2f:91:8f:a6:5e:27:fa:23:
23:36:67:a1:f6:50:6a:6f:61:2a:37:ba:2a:84:2e:
da:31:f2:07:0c:8c:d9:08:0b:f2:ca:83:f6:48:31:
9d:d4:6d:90:76:70:03:3d:38:05:34:3a:25:b1:3e:
5c:f2:a7:dd:02:64:cc:50:0c:b6:9d:46:82:a9:fb:
4f:89:41:a4:7e:e8:4e:09:32:9f:31:2f:7e:70:cf:
98:70:86:33:a8:60:ed:68:d4:85:60:bd:2e:12:7e:
89:96:75:91:c6:2f:3f:45:14:6f:d5:ea:71:4f:68:
1f:cc:bf:fc:4f:00:a5:8b:7e:02:52:2f:05:cb:5a:
54:9e:d4:ff:da:27:ca:63:de:65:c7:f4:46:c2:61:
b4:a7:1b:63:35:96:1d:d2:77:e3:f0:43:fd:b3:bd:
2c:2e:26:aa:94:48:24:2a:01:ae:89:94:aa:65:45:
af:67:c0:2a:84:07:dc:2e:88:6a:81:3d:6c:64:3d:
52:0e:9b:56:92:cf:4d:98:c2:01:9d:81:cd:58:0f:
d8:ec:e2:e3:ea:88:98:09:68:98:7b:d0:fb:5f:de:
f4:cf:5c:7c:80:4a:8e:10:db:00:45:4a:8d:60:b0:
35:e0:29:30:81:bf:82:69:94:9f:fe:9a:23:77:de:
b2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:39:28:F2:08:30:CA:2F:A8:3E:6C:DE:C2:75:74:BE:00:47:C6:4E
X509v3 Authority Key Identifier:
keyid:99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6c:7f:c9:38:54:21:42:03:f3:ca:ba:63:48:56:07:28:d1:
c4:8f:2c:97:5f:33:30:ac:2c:71:bd:3b:86:67:f1:0b:3b:07:
f8:72:f8:db:c4:19:fc:97:03:f2:39:63:b9:26:63:b7:b1:73:
05:50:d8:ed:a3:fc:8a:e0:52:22:ba:2a:7e:06:30:f7:c7:62:
c8:75:02:56:7e:a2:11:a1:0e:59:28:91:46:70:32:89:34:6e:
6e:38:72:d6:97:fe:ce:04:54:0e:50:9c:b9:a7:1e:63:ea:3e:
1b:0d:74:db:66:46:b3:da:63:e0:eb:21:b8:5b:b2:ee:24:51:
d1:2d:5b:7a:12:22:58:77:eb:4d:b5:79:5e:04:e3:66:71:68:
32:be:34:33:bd:4f:ae:6e:09:13:2c:b8:c0:c7:38:58:a2:c6:
1d:dc:4f:db:48:57:71:09:1f:25:d4:04:ff:ec:05:85:44:29:
c3:93:a0:8b:27:83:7d:71:9d:7d:22:c5:1b:73:3e:35:60:29:
d4:2e:e5:51:e3:05:8a:56:04:7b:41:e6:b1:55:26:c2:e2:9a:
07:99:aa:e1:dd:d3:95:b4:b2:5f:1d:e0:f7:a7:ed:d1:f0:49:
7f:00:f5:c4:87:60:9c:6e:ad:ef:ab:6d:67:9f:a0:81:f1:fb:
85:af:b3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:42 2025 by rpki-client