Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
File: MEEPXtOG-HkgPLRCil-V_ciZtZE.mft (raw, json)
Hash identifier: J0+P9ERMISeNOqQ17Va97VLMClD2IhJUhZUuFrHVadg=
Subject key identifier: 5C:20:E0:7A:10:31:24:EB:05:2B:23:F1:E0:EF:23:89:BF:E7:27:39
Authority key identifier: 30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
Certificate issuer: /CN=30410f5ed386f879203cb4428a5f95fdc899b591
Certificate serial: 019679E9A33BF3DC6449344179EA67AE5418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
Manifest number: 04CE
Signing time: Mon 28 Apr 2025 01:01:16 +0000
Manifest this update: Mon 28 Apr 2025 01:01:16 +0000
Manifest next update: Tue 29 Apr 2025 01:01:16 +0000
Files and hashes: 1: MEEPXtOG-HkgPLRCil-V_ciZtZE.crl (hash: t5XCOWgMdJ664WF/RXnCFSjVxdF+kLrzb8zmALNW5nM=)
2: VKnNvbVsRqF6coqOLVNx3je3CD4.roa (hash: SfCYWwwunVdh83nhVwYfX1uU9K1UYabADUPAPwp/I2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:a3:3b:f3:dc:64:49:34:41:79:ea:67:ae:54:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30410f5ed386f879203cb4428a5f95fdc899b591
Validity
Not Before: Apr 28 01:01:16 2025 GMT
Not After : Apr 29 01:01:16 2025 GMT
Subject: CN=5c20e07a103124eb052b23f1e0ef2389bfe72739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7e:68:31:f4:d0:fe:59:bd:3c:3c:88:1f:4f:
41:11:9a:36:01:02:72:11:e9:3a:a1:fe:86:18:8d:
c9:a5:be:6b:a0:bb:89:bc:fc:dc:55:e0:66:e5:47:
e6:87:2f:55:87:90:bc:76:16:01:4b:d4:3c:84:61:
5a:25:5e:0d:3e:03:3f:ca:91:c0:cc:dd:c7:fe:ea:
96:17:53:0e:7e:c2:29:19:d5:da:8a:b3:4a:a5:23:
0d:cc:dd:1a:3f:25:3d:1f:7c:06:b6:90:b1:b9:de:
0a:c9:fa:68:a6:31:79:a9:c2:eb:b3:e1:89:a5:3c:
65:2a:c9:dc:3c:aa:ae:07:a7:98:75:5c:06:c2:e4:
91:98:36:be:91:88:e8:08:9c:d1:fa:32:db:f6:99:
6c:5f:3d:c4:6f:a0:cf:dd:01:0e:0a:35:e6:05:7e:
29:21:c4:b1:68:da:53:3f:c1:88:7a:06:fa:4f:f6:
30:db:ae:12:ff:0b:8e:b1:8e:db:3f:f3:16:8b:f3:
6c:cd:02:21:9a:d7:f3:1a:77:be:42:e2:cc:2b:38:
f1:b0:51:c7:78:fc:9d:8a:c2:00:ca:27:51:15:70:
a2:17:b2:24:5b:8e:48:06:9f:f5:d8:34:67:c3:4d:
dd:2a:f3:6c:5f:56:29:d7:df:9c:86:1e:12:85:ea:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:20:E0:7A:10:31:24:EB:05:2B:23:F1:E0:EF:23:89:BF:E7:27:39
X509v3 Authority Key Identifier:
keyid:30:41:0F:5E:D3:86:F8:79:20:3C:B4:42:8A:5F:95:FD:C8:99:B5:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MEEPXtOG-HkgPLRCil-V_ciZtZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11ceb0-09e2-477f-879d-8267360ff9ed/1/MEEPXtOG-HkgPLRCil-V_ciZtZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:21:85:ad:0d:3a:14:e9:5d:42:99:55:e0:75:4e:8f:ca:6e:
24:57:a5:e6:72:6e:46:81:5b:cc:1a:a5:82:bd:0c:e6:eb:81:
f6:2a:c7:93:6e:1b:42:5c:05:5d:45:20:de:f3:22:d4:48:a3:
80:96:c0:62:c1:47:aa:4d:a2:4b:8b:45:47:6f:3c:c7:8e:41:
7b:de:c8:4a:83:e0:f3:7a:a5:18:0d:6f:b8:8b:c0:16:3b:77:
7b:e4:29:cd:c9:bf:af:90:c8:0d:f3:db:51:45:84:7d:4c:82:
b9:95:2d:6c:87:47:2d:13:dc:13:b9:d0:3e:d9:54:f7:f9:ff:
af:c5:f2:0c:0a:e1:7c:37:7e:77:b7:7f:46:62:8f:d2:ae:c2:
b3:68:27:82:bf:57:26:23:ec:74:e4:45:18:c2:fe:23:81:e8:
0a:da:f2:d3:0a:3f:3c:21:91:3c:1a:a2:c7:1d:b0:4d:6e:c4:
72:d9:67:94:17:e5:30:b0:db:6e:53:99:e8:90:9d:3a:d0:47:
7e:b0:87:00:bb:42:6f:85:8c:d0:9e:c0:96:c1:3b:cf:b8:17:
38:d4:d1:c6:e7:1f:d7:bd:fe:d0:b5:b3:e2:f7:b8:e8:0d:db:
81:8f:52:24:1b:85:ed:35:39:56:b4:1e:b9:51:0d:31:f8:e8:
26:31:e5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:51:31 2025 by rpki-client