Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
File: meKI93yZhWTyY056Lh0AnfLviH8.mft (raw, json)
Hash identifier: DzwPapUa87L8qN5luOTrudE0/x1qbi2u5TjiRLpl7HI=
Subject key identifier: 69:AE:11:28:EB:58:8A:8E:25:E4:6B:9D:62:95:B2:C4:A3:FF:42:FC
Authority key identifier: 99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
Certificate issuer: /CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Certificate serial: 019679E980B57AE81B5CB0B70A75A534F3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
Manifest number: 0D53
Signing time: Mon 28 Apr 2025 01:01:07 +0000
Manifest this update: Mon 28 Apr 2025 01:01:07 +0000
Manifest next update: Tue 29 Apr 2025 01:01:07 +0000
Files and hashes: 1: meKI93yZhWTyY056Lh0AnfLviH8.crl (hash: odzWpU5aJQGKzj85RvA/m7PDb12YyYAE/SRVSaEJLGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:80:b5:7a:e8:1b:5c:b0:b7:0a:75:a5:34:f3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e288f77c998564f2634e7a2e1d009df2ef887f
Validity
Not Before: Apr 28 01:01:07 2025 GMT
Not After : Apr 29 01:01:07 2025 GMT
Subject: CN=69ae1128eb588a8e25e46b9d6295b2c4a3ff42fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:bc:a2:d8:e9:a7:5a:f3:fa:d3:fd:7f:9b:
ef:56:b4:4e:14:7e:4d:73:5a:6a:df:c1:06:06:d2:
26:f7:c8:71:c6:13:cf:c1:9a:29:e1:86:1c:c1:14:
ea:94:a9:04:2a:60:71:5c:70:b5:57:4a:f8:48:2c:
eb:11:2d:0f:14:bb:6b:4e:16:33:ec:76:8c:8c:12:
0d:96:4c:29:7a:12:11:85:ef:39:6d:24:a2:77:a7:
fd:99:eb:3c:3a:3e:e3:0e:a8:55:a8:0e:59:36:a8:
4e:55:2a:83:8b:15:bc:da:dd:5b:2c:6a:15:fe:4f:
30:79:20:b9:23:77:30:a1:29:f9:f6:3f:c8:34:60:
9f:f4:e6:e6:4b:ad:57:a6:0c:4f:12:26:56:95:bc:
3b:bc:8a:5f:3c:34:a8:9f:3d:31:f3:05:fc:ef:31:
d0:8d:a6:45:5e:68:ea:4d:26:1b:fa:84:56:da:d1:
3d:1d:bc:48:2c:bb:dc:98:d3:ad:96:ba:78:93:d1:
45:ee:05:a8:4d:d4:29:2b:db:b4:d4:6a:b7:3b:e4:
1d:f2:86:3c:25:59:92:2a:4d:5c:43:4b:9a:78:05:
59:78:fd:4f:87:04:89:8b:02:a4:e4:6d:47:2b:12:
7d:93:25:7d:cd:08:e8:fa:3e:6f:d8:54:18:4a:b0:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AE:11:28:EB:58:8A:8E:25:E4:6B:9D:62:95:B2:C4:A3:FF:42:FC
X509v3 Authority Key Identifier:
keyid:99:E2:88:F7:7C:99:85:64:F2:63:4E:7A:2E:1D:00:9D:F2:EF:88:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meKI93yZhWTyY056Lh0AnfLviH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9243a1-4ecc-4183-9691-0f60b859a9f1/1/meKI93yZhWTyY056Lh0AnfLviH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8e:37:94:d6:84:6e:e1:55:d3:3b:09:1b:96:19:16:f6:6b:
fc:0c:87:17:16:d5:ca:ec:b3:4a:6a:7c:84:ee:06:4c:1e:39:
97:fe:22:72:88:75:8f:40:59:b7:d9:44:43:2b:b1:7f:6e:e3:
cb:a7:f3:6d:57:0f:64:89:6c:d8:bd:a0:30:57:66:1c:1f:9f:
78:dd:3c:68:b6:6f:dc:04:27:19:e5:28:d1:1d:25:b9:8d:8d:
51:28:0a:3e:1e:17:d4:19:4d:6b:d1:91:6f:95:fb:88:42:46:
a7:04:9e:fc:06:92:7d:bc:68:2c:ee:25:01:08:25:21:98:89:
8d:df:4b:f1:5b:b8:18:9a:ac:2d:ff:2f:0e:58:a8:a8:eb:b9:
43:fd:15:4b:dc:94:12:e7:af:d0:b8:6b:00:84:33:8f:7c:02:
9d:c9:39:2e:c3:07:4f:3d:fc:81:8d:ee:1d:4f:3d:0f:ff:9f:
e4:33:07:f8:78:c3:0d:ba:bf:3a:98:a9:6c:de:b2:45:0a:a4:
38:da:a4:83:b6:f6:16:20:dd:1a:ef:b8:74:e1:e8:68:52:b3:
ed:cc:15:80:22:cc:5e:bc:b2:b8:09:13:a2:7a:eb:d8:ed:38:
9a:a2:3e:04:d3:98:e7:ba:ab:d4:27:86:1a:df:49:03:cc:f2:
b6:ad:35:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ56YC1eugbXLC3CnWlNPPgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZTI4OGY3N2M5OTg1NjRmMjYzNGU3YTJlMWQwMDlkZjJl
Zjg4N2YwHhcNMjUwNDI4MDEwMTA3WhcNMjUwNDI5MDEwMTA3WjAzMTEwLwYDVQQD
Eyg2OWFlMTEyOGViNTg4YThlMjVlNDZiOWQ2Mjk1YjJjNGEzZmY0MmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscu8otjpp1rz+tP9f5vvVrROFH5N
c1pq38EGBtIm98hxxhPPwZop4YYcwRTqlKkEKmBxXHC1V0r4SCzrES0PFLtrThYz
7HaMjBINlkwpehIRhe85bSSid6f9mes8Oj7jDqhVqA5ZNqhOVSqDixW82t1bLGoV
/k8weSC5I3cwoSn59j/INGCf9ObmS61XpgxPEiZWlbw7vIpfPDSonz0x8wX87zHQ
jaZFXmjqTSYb+oRW2tE9HbxILLvcmNOtlrp4k9FF7gWoTdQpK9u01Gq3O+Qd8oY8
JVmSKk1cQ0uaeAVZeP1PhwSJiwKk5G1HKxJ9kyV9zQjo+j5v2FQYSrByNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmuESjrWIqOJeRrnWKVssSj/0L8MB8GA1UdIwQY
MBaAFJniiPd8mYVk8mNOei4dAJ3y74h/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVLSTkzeVpoV1R5WTA1NkxoMEFuZkx2aUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85MjQzYTEtNGVjYy00MTgzLTk2OTEt
MGY2MGI4NTlhOWYxLzEvbWVLSTkzeVpoV1R5WTA1NkxoMEFuZkx2aUg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS85MjQzYTEtNGVjYy00MTgzLTk2OTEtMGY2MGI4NTlhOWYx
LzEvbWVLSTkzeVpoV1R5WTA1NkxoMEFuZkx2aUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPo43lNaE
buFV0zsJG5YZFvZr/AyHFxbVyuyzSmp8hO4GTB45l/4icoh1j0BZt9lEQyuxf27j
y6fzbVcPZIls2L2gMFdmHB+feN08aLZv3AQnGeUo0R0luY2NUSgKPh4X1BlNa9GR
b5X7iEJGpwSe/AaSfbxoLO4lAQglIZiJjd9L8Vu4GJqsLf8vDlioqOu5Q/0VS9yU
Euev0LhrAIQzj3wCnck5LsMHTz38gY3uHU89D/+f5DMH+HjDDbq/OpipbN6yRQqk
ONqkg7b2FiDdGu+4dOHoaFKz7cwVgCLMXryyuAkTonrr2O04mqI+BNOY57qr1CeG
Gt9JA8zytq01Rg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:32:20 2025 by rpki-client