Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
File: METmC7lxMuqEmlP8VUu7xjlIsBY.mft (raw, json)
Hash identifier: qVQhFUNrsL5PvN3ialQgaHZH5/rHA6ofPkKKOfT3D98=
Subject key identifier: B2:64:7A:D0:50:9B:0C:20:8D:3A:F9:A8:EA:B5:89:95:DA:22:B1:4B
Authority key identifier: 30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16
Certificate issuer: /CN=3044e60bb97132ea849a53fc554bbbc63948b016
Certificate serial: 019873E2B4F8F9A9F553FD99602932270B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
Manifest number: 109A
Signing time: Mon 04 Aug 2025 07:01:33 +0000
Manifest this update: Mon 04 Aug 2025 07:01:33 +0000
Manifest next update: Tue 05 Aug 2025 07:01:33 +0000
Files and hashes: 1: METmC7lxMuqEmlP8VUu7xjlIsBY.crl (hash: 998HN1m21hpZ2eyoJJwivpIBM16scj66lXF73gmo000=)
2: iSTM7V9FE-bUzbrQTSi6w3GvF8M.roa (hash: YbbyUOZzyme9AkFEQT1yyfiS1x2+GwCoOxsJ23F9SW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:b4:f8:f9:a9:f5:53:fd:99:60:29:32:27:0b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3044e60bb97132ea849a53fc554bbbc63948b016
Validity
Not Before: Aug 4 07:01:33 2025 GMT
Not After : Aug 5 07:01:33 2025 GMT
Subject: CN=b2647ad0509b0c208d3af9a8eab58995da22b14b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ea:ca:14:29:09:21:a7:43:ab:8f:13:60:34:
a0:67:74:58:86:15:aa:42:5a:b7:a9:97:4d:12:1d:
26:6d:87:b2:cb:2a:93:e3:b6:e8:69:57:45:00:c9:
ec:09:48:62:8c:f5:e3:04:16:29:5f:cc:88:50:74:
ca:79:1b:83:8e:36:d8:40:d1:2f:94:39:8b:4f:d3:
85:56:6f:94:50:e9:8a:03:13:e6:99:10:33:41:4a:
3e:33:e8:72:bd:75:65:f6:09:7d:37:26:74:45:49:
d0:f9:2e:41:5a:dd:40:da:3d:9f:b3:2c:9f:60:e2:
39:05:e0:4a:11:e9:f1:53:20:fa:28:b4:75:ff:20:
75:d4:62:28:ce:5e:29:4d:ad:b8:d8:b4:cc:ae:d5:
1d:0c:18:2a:91:51:d0:4d:3c:b6:83:3f:f6:89:d2:
36:ae:bc:be:90:e7:85:3c:72:bc:d7:51:b3:37:21:
52:f6:b9:75:fa:44:68:f1:09:de:bc:49:ed:b7:e5:
fe:21:a3:9e:55:a4:2f:fd:71:89:d3:74:68:5c:81:
e2:6e:64:1b:eb:3d:24:5a:7f:ea:02:1d:58:e7:76:
be:5b:56:1e:15:c1:db:40:1a:ae:7e:49:39:c2:1c:
29:b3:fb:68:70:ec:d4:9a:13:32:97:e0:43:8a:bc:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:64:7A:D0:50:9B:0C:20:8D:3A:F9:A8:EA:B5:89:95:DA:22:B1:4B
X509v3 Authority Key Identifier:
keyid:30:44:E6:0B:B9:71:32:EA:84:9A:53:FC:55:4B:BB:C6:39:48:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/METmC7lxMuqEmlP8VUu7xjlIsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eef70e-820c-45b1-ab19-431f91da4e28/1/METmC7lxMuqEmlP8VUu7xjlIsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:b6:19:b4:14:7c:43:43:94:f9:5c:50:9e:e3:61:58:fb:de:
ce:32:d9:22:e7:91:c8:09:2f:51:69:d9:62:65:dd:34:7e:5f:
10:da:64:cd:d6:99:65:b0:76:c5:b7:6a:d9:73:94:c6:93:8f:
dd:cf:60:4e:c9:59:40:2f:5b:b6:32:17:e9:c7:ae:d1:f7:82:
33:b7:71:5e:b1:23:97:f4:c8:6a:a2:6e:0d:9d:e5:ca:86:75:
6a:be:5a:39:37:5e:c2:11:7b:ff:1d:3d:7a:29:6d:fa:f2:33:
2b:d4:87:fb:d4:d9:fa:de:4e:11:c7:12:bd:a7:07:99:45:1f:
36:fb:5d:11:c6:97:03:b2:b0:68:24:fb:04:24:f8:2b:44:77:
dc:4b:2c:d9:8c:b2:32:c3:70:58:a0:2d:72:db:04:27:a9:ce:
6f:a9:2c:7f:94:72:c5:9f:f0:31:7b:0a:72:4b:df:45:50:8c:
da:f4:62:ed:92:22:a4:91:94:c3:38:c4:47:72:3c:7b:18:ce:
eb:d2:84:8d:34:e2:6c:bd:b1:7d:ee:b0:20:f2:28:45:d6:57:
f4:30:a0:09:02:76:9a:42:0b:87:40:dc:ff:1f:7a:10:8e:ef:
6d:e4:1a:e4:84:e7:2b:16:33:11:95:be:b5:8c:3a:2b:b8:fd:
d3:b6:03:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:10 2025 by rpki-client