Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
File: meKI93yZhWTyY056Lh0AnfLviH8.mft (raw, json)
Hash identifier: cbHk7eDeNYFTFTsIRggjjb0ggGmLBoBJ3hVsnzOgZYo=
Subject key identifier: 8F:DA:BB:51:5A:45:D2:5A:11:11:1B:10:D3:2B:87:48:C6:3D:63:67
Authority key identifier: 99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
Certificate issuer: /CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Certificate serial: 019774F79F07D25CD883BE3747FDCCEE0B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
Manifest number: 0DD5
Signing time: Sun 15 Jun 2025 19:01:14 +0000
Manifest this update: Sun 15 Jun 2025 19:01:14 +0000
Manifest next update: Mon 16 Jun 2025 19:01:14 +0000
Files and hashes: 1: meKI93yZhWTyY056Lh0AnfLviH8.crl (hash: 9+l2bYGrig7kAAGgwvGhzhga7/QVAmEj3P+TN0e2fp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f7:9f:07:d2:5c:d8:83:be:37:47:fd:cc:ee:0b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Validity
Not Before: Jun 15 19:01:14 2025 GMT
Not After : Jun 16 19:01:14 2025 GMT
Subject: CN=8fdabb515a45d25a11111b10d32b8748c63d6367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:7f:79:f0:bc:c5:b4:da:fe:c7:c9:1f:bf:
e1:a1:27:8b:cb:cc:81:9e:9a:77:ab:dc:dc:d3:56:
e5:d5:31:45:e3:18:bc:33:7a:ed:e3:95:50:71:9d:
2c:d0:50:bf:c6:f7:69:87:d9:9a:b5:73:4d:2d:e4:
60:f5:b0:ca:4d:a7:e7:8e:c6:81:0c:6e:2c:b1:e3:
7e:8a:cf:70:0d:fd:53:1e:6c:87:de:d7:76:39:9b:
f4:60:4b:c3:97:18:a1:f8:cd:3f:41:7a:2a:85:76:
76:2b:8a:25:4d:1b:de:74:23:d2:2c:b3:86:d3:8b:
af:53:15:d9:dc:4d:bb:fc:5f:47:2c:52:04:54:32:
62:d2:3e:50:1e:d2:19:00:f5:03:90:ba:c6:3f:eb:
c6:67:25:de:2b:a3:49:28:57:3f:e8:e5:d6:2d:17:
13:39:69:98:de:fe:fc:e3:6d:eb:00:13:6e:c5:bb:
6b:d9:56:86:6e:ad:60:7c:ef:4f:ec:04:30:05:e0:
6e:5b:18:a1:4b:a5:30:39:fd:03:a5:64:f6:df:a2:
fb:b7:45:35:0b:2f:5e:47:f7:d2:5f:13:b6:10:a9:
73:01:2d:f4:39:1a:39:6a:87:15:b7:14:06:b9:d6:
82:e3:af:0b:e1:47:58:70:c1:42:4b:f2:77:53:88:
a2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DA:BB:51:5A:45:D2:5A:11:11:1B:10:D3:2B:87:48:C6:3D:63:67
X509v3 Authority Key Identifier:
keyid:99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c2:f8:59:e1:c2:45:1e:d4:9e:f7:8e:ab:35:a6:95:3c:b6:
8d:46:38:1e:08:18:c2:a5:76:75:68:74:99:3d:17:ec:9d:4d:
cc:2f:7c:5a:6a:46:1f:96:04:cd:39:27:ec:14:ef:52:a3:6b:
71:96:33:61:a0:a3:81:bf:45:cb:da:db:1c:91:99:bb:f2:22:
59:88:e5:07:2e:b9:e3:cd:5f:dd:cd:b9:57:c3:a4:09:b1:41:
d7:df:b1:1a:0a:6f:b7:c1:86:b6:5b:52:ae:4e:3e:85:a1:9e:
45:4f:1a:39:b9:24:60:57:9d:92:22:e0:48:61:e2:e0:ef:4e:
46:7e:ce:b8:97:b0:70:ad:c7:27:fd:e6:1b:88:37:a6:de:24:
63:36:f3:91:b6:fc:ef:96:fc:ab:5a:a0:ad:ec:fd:22:16:98:
ca:49:be:82:6c:80:81:39:51:18:a0:2a:64:7b:e4:3f:be:64:
89:26:e0:fc:d4:93:17:cc:26:c5:71:79:22:28:06:c4:37:e0:
f8:3c:3d:66:61:a4:27:af:2f:da:27:51:c2:44:85:50:e9:2c:
93:dc:d6:d1:f0:02:4a:30:50:da:a5:14:75:b0:c0:50:a7:ec:
17:75:4a:23:23:4b:df:1d:8e:6e:62:eb:4b:38:ba:12:c0:ca:
8b:3e:f5:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0958H0lzYg743R/3M7guLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZTI4OGY3N2M5OTg1NjRmMjYzNGU3YTJlMWQwMDlkZjJl
Zjg4N2YwHhcNMjUwNjE1MTkwMTE0WhcNMjUwNjE2MTkwMTE0WjAzMTEwLwYDVQQD
Eyg4ZmRhYmI1MTVhNDVkMjVhMTExMTFiMTBkMzJiODc0OGM2M2Q2MzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrh/efC8xbTa/sfJH7/hoSeLy8yB
npp3q9zc01bl1TFF4xi8M3rt45VQcZ0s0FC/xvdph9matXNNLeRg9bDKTafnjsaB
DG4sseN+is9wDf1THmyH3td2OZv0YEvDlxih+M0/QXoqhXZ2K4olTRvedCPSLLOG
04uvUxXZ3E27/F9HLFIEVDJi0j5QHtIZAPUDkLrGP+vGZyXeK6NJKFc/6OXWLRcT
OWmY3v78423rABNuxbtr2VaGbq1gfO9P7AQwBeBuWxihS6UwOf0DpWT236L7t0U1
Cy9eR/fSXxO2EKlzAS30ORo5aocVtxQGudaC468L4UdYcMFCS/J3U4iiOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/au1FaRdJaEREbENMrh0jGPWNnMB8GA1UdIwQY
MBaAFJniiPd8mYVk8mNOei4dAJ3y74h/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVLSTkzeVpoV1R5WTA1NkxoMEFuZkx2aUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85MjQzYTEtNGVjYy00MTgzLTk2OTEt
MGY2MGI4NTlhOWYxLzEvbWVLSTkzeVpoV1R5WTA1NkxoMEFuZkx2aUg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS85MjQzYTEtNGVjYy00MTgzLTk2OTEtMGY2MGI4NTlhOWYx
LzEvbWVLSTkzeVpoV1R5WTA1NkxoMEFuZkx2aUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcL4WeHC
RR7UnveOqzWmlTy2jUY4HggYwqV2dWh0mT0X7J1NzC98WmpGH5YEzTkn7BTvUqNr
cZYzYaCjgb9Fy9rbHJGZu/IiWYjlBy65481f3c25V8OkCbFB19+xGgpvt8GGtltS
rk4+haGeRU8aObkkYFedkiLgSGHi4O9ORn7OuJewcK3HJ/3mG4g3pt4kYzbzkbb8
75b8q1qgrez9IhaYykm+gmyAgTlRGKAqZHvkP75kiSbg/NSTF8wmxXF5IigGxDfg
+Dw9ZmGkJ68v2idRwkSFUOksk9zW0fACSjBQ2qUUdbDAUKfsF3VKIyNL3x2ObmLr
Szi6EsDKiz71qg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:25:19 2025 by rpki-client