Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
File: me-7KxZTQig3k33SfeNU5o-eAaM.mft (raw, json)
Hash identifier: C4uc4nIAsBM2EJc79L/kYR2SNerTRiYcWaZWvBcOfGY=
Subject key identifier: 18:F6:FE:49:CF:E2:48:F7:59:40:70:7F:85:81:BC:3E:E4:84:62:6D
Authority key identifier: 99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
Certificate issuer: /CN=99efbb2b1653422837937dd27de354e68f9e01a3
Certificate serial: 01967755C6BA6EFA503E40A4A3DA72F9D1E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 13:00:32 +0000
Manifest this update: Sun 27 Apr 2025 13:00:32 +0000
Manifest next update: Mon 28 Apr 2025 13:00:32 +0000
Files and hashes: 1: me-7KxZTQig3k33SfeNU5o-eAaM.crl (hash: Blt7TEQ/zPSi9vKrP/S297hPBR4ousdo21pQNlSufSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:55:c6:ba:6e:fa:50:3e:40:a4:a3:da:72:f9:d1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99efbb2b1653422837937dd27de354e68f9e01a3
Validity
Not Before: Apr 27 13:00:32 2025 GMT
Not After : Apr 28 13:00:32 2025 GMT
Subject: CN=18f6fe49cfe248f75940707f8581bc3ee484626d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7a:d1:e0:bf:65:e6:f8:7d:27:7f:9d:de:ab:
08:3e:61:7c:b5:d9:9f:5b:4a:39:42:f1:44:30:63:
9d:a0:4f:a9:64:c0:d8:b4:5a:b9:f9:6e:a5:93:6d:
dc:be:ce:c2:27:4d:d7:87:29:7e:c3:91:dc:f2:b8:
cf:c6:a5:25:64:e4:03:8d:da:0b:d6:d6:51:bf:d1:
3e:ff:f2:ba:43:77:46:3f:af:ff:53:69:b2:0a:dc:
d4:8e:8e:98:74:38:be:14:5e:74:e8:5c:f2:95:1f:
6e:95:3a:9f:0b:d1:49:89:17:1c:11:b9:9b:c4:aa:
96:c6:4d:0c:d5:03:37:02:c4:22:55:05:8a:e3:1d:
24:85:12:4e:18:fc:e5:0b:74:b6:ae:b5:45:aa:c5:
86:b5:b0:69:54:03:14:a0:6d:c5:86:87:38:29:8e:
36:80:9e:41:53:74:b6:32:75:67:e4:6a:94:2c:50:
3d:fc:ee:5f:8b:ca:cb:0e:e2:17:ea:b6:16:96:fa:
a4:f0:a5:6c:05:b5:50:3c:e4:3a:6b:76:0d:e0:0c:
2f:40:34:aa:e0:24:68:ce:c3:6a:36:8f:38:a6:b6:
a6:8a:fa:48:82:b2:88:61:1b:31:c4:62:6f:7e:7f:
c1:b6:01:1e:12:15:27:b6:80:87:9a:d5:c9:f0:38:
da:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F6:FE:49:CF:E2:48:F7:59:40:70:7F:85:81:BC:3E:E4:84:62:6D
X509v3 Authority Key Identifier:
keyid:99:EF:BB:2B:16:53:42:28:37:93:7D:D2:7D:E3:54:E6:8F:9E:01:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/me-7KxZTQig3k33SfeNU5o-eAaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/326bbc-d061-4af1-8964-41d79efb49a9/1/me-7KxZTQig3k33SfeNU5o-eAaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cd:b0:d7:9d:1e:93:14:7f:d1:fd:ab:c4:5c:01:c0:ea:5c:
6e:9c:cf:4a:6b:37:49:53:f4:87:25:2d:ce:96:f8:36:03:b9:
e6:84:0c:5c:c1:41:f9:93:cf:97:b2:db:d7:15:38:61:e0:61:
0e:af:fa:42:9a:a8:bd:42:00:ef:6b:2c:7a:a7:e3:39:11:e4:
1c:aa:16:5d:9f:1c:05:0e:d3:87:d8:a7:eb:40:e3:18:f4:ef:
d0:37:27:56:83:e2:63:66:1d:bc:d3:20:6d:0d:bd:0d:d7:df:
55:ac:f8:f6:f7:3f:38:28:ee:3c:60:2b:39:dd:80:9f:f3:ae:
d6:a9:96:13:2f:2e:74:30:53:86:09:fc:3c:5f:5f:01:31:50:
1d:26:21:e8:5e:c8:eb:04:07:dc:08:c2:db:bf:c9:02:ff:92:
84:17:73:85:af:66:b0:31:33:5d:70:f5:5d:d1:fb:70:a1:aa:
f3:eb:6d:e7:15:e3:bd:97:88:4b:8f:aa:1d:7e:a4:1f:7c:21:
b5:0a:45:96:75:fa:8a:fc:fc:91:84:8d:c9:d3:fe:3a:ed:5f:
6d:30:28:d8:80:2a:f4:50:ce:70:6f:6b:ba:39:34:e2:07:fd:
f2:d7:51:26:eb:51:7e:fb:5a:67:04:1d:90:26:93:e8:07:85:
1a:ee:be:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:45:39 2025 by rpki-client