Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
File: meh9VkzLhhHhQKeyvyYMSiIrWdY.mft (raw, json)
Hash identifier: A8MTo0mhMGWvvgtXxBsfrfehhMtutYoSdO6S4Zry/Og=
Subject key identifier: C8:EE:B7:9E:54:07:3D:D3:AA:54:58:BB:F1:86:94:01:73:85:4F:C0
Authority key identifier: 99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
Certificate issuer: /CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Certificate serial: 01967BA042DE69CC26817B66ADEBB49A1026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
Manifest number: 052F
Signing time: Mon 28 Apr 2025 09:00:22 +0000
Manifest this update: Mon 28 Apr 2025 09:00:22 +0000
Manifest next update: Tue 29 Apr 2025 09:00:22 +0000
Files and hashes: 1: meh9VkzLhhHhQKeyvyYMSiIrWdY.crl (hash: qlScjqt4kLDMWDVZVnTLSMq1Na5GPeY9RhRIK5ktQYA=)
2: nFnXzGX9x8WjQH0WTEkYEV58ntE.roa (hash: qp697Wbqn7eonfV2epdNmLzMoHnyKSRFdJF1JaKpdqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a0:42:de:69:cc:26:81:7b:66:ad:eb:b4:9a:10:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99e87d564ccb8611e140a7b2bf260c4a222b59d6
Validity
Not Before: Apr 28 09:00:22 2025 GMT
Not After : Apr 29 09:00:22 2025 GMT
Subject: CN=c8eeb79e54073dd3aa5458bbf186940173854fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1e:ac:f5:33:a3:bc:05:30:bf:6f:bf:fe:d4:
e9:3b:ec:6c:91:b3:14:32:28:da:87:0a:bf:a5:da:
f2:24:38:fb:fc:f4:6a:24:3a:5d:20:fe:10:37:c0:
4d:12:32:8d:55:31:9b:62:d6:f0:da:3c:42:97:6f:
b8:55:02:5f:a6:98:e3:e6:c0:b6:fb:84:b0:c4:a3:
0f:cb:12:c5:84:cf:cc:0b:94:ab:43:3b:79:92:12:
90:8b:a3:e5:eb:99:4e:89:fa:5d:fc:b5:f0:0a:03:
18:e3:0b:ff:ce:ac:7e:e0:76:f7:f5:e2:34:79:f4:
51:f7:34:d3:92:ca:28:bc:cf:9b:e7:17:d6:fd:a1:
11:ad:c9:6d:58:65:90:68:eb:da:da:6c:cf:fa:b1:
ce:0a:d4:26:23:42:8b:22:07:c4:8f:46:c0:f5:a2:
46:09:8c:17:65:b0:9a:f0:62:5f:25:f4:8f:1e:2f:
32:d8:69:6d:ff:4d:3c:a9:9f:27:42:01:13:6f:2e:
8c:89:2b:fe:51:b3:22:bd:9f:ac:73:64:2f:41:d1:
ce:d8:d4:9f:e2:3d:43:21:5e:46:71:f6:6d:3f:1e:
25:45:c0:54:a1:fe:f5:42:f4:e0:37:a8:8e:a2:51:
1f:52:11:0b:08:b0:48:c8:a5:6f:18:40:5a:6b:91:
4c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EE:B7:9E:54:07:3D:D3:AA:54:58:BB:F1:86:94:01:73:85:4F:C0
X509v3 Authority Key Identifier:
keyid:99:E8:7D:56:4C:CB:86:11:E1:40:A7:B2:BF:26:0C:4A:22:2B:59:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meh9VkzLhhHhQKeyvyYMSiIrWdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccb162-949b-4837-b580-cf51d8e4c14b/1/meh9VkzLhhHhQKeyvyYMSiIrWdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5f:a8:3d:81:17:b6:72:d3:6f:30:97:2e:68:e2:2b:fa:83:
7d:49:28:b8:21:bc:b8:c9:73:92:9b:6d:64:0e:60:38:f9:96:
98:b2:a2:c9:6d:32:35:d0:5d:9e:61:5b:c6:00:f1:45:52:15:
f3:cb:09:94:db:29:ed:18:35:b7:f5:ac:ca:38:0e:10:34:c8:
ab:04:82:6e:6d:f7:fc:0e:0e:22:3c:94:1a:fd:cd:d2:ad:10:
8f:56:0b:28:fa:1c:51:67:f6:89:4c:c1:dc:ff:5c:95:7e:c9:
7f:08:69:9e:1d:a5:25:1d:66:95:f6:4b:14:93:e0:f1:e8:79:
2a:d5:1a:bd:7a:4a:8d:f1:94:27:76:26:c5:f5:6a:60:51:e4:
b2:bf:d8:61:22:ef:cb:2e:dd:4b:59:56:96:47:dd:08:1b:2f:
8b:be:d3:48:f7:9e:eb:32:e8:59:d3:17:b1:1c:40:ff:42:dd:
ac:cb:32:a8:63:7d:4d:02:d9:40:9d:5e:40:27:05:a9:f2:87:
2c:7c:21:fd:ea:23:e4:94:ea:de:32:8f:c2:44:11:91:b9:22:
48:66:a6:fe:17:93:58:4d:d2:17:63:87:cf:5f:12:61:ef:e8:
09:93:30:9d:06:5a:00:76:09:ec:0e:d7:bc:73:ec:cc:fe:34:
fd:46:d0:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ7oELeacwmgXtmreu0mhAmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZTg3ZDU2NGNjYjg2MTFlMTQwYTdiMmJmMjYwYzRhMjIy
YjU5ZDYwHhcNMjUwNDI4MDkwMDIyWhcNMjUwNDI5MDkwMDIyWjAzMTEwLwYDVQQD
EyhjOGVlYjc5ZTU0MDczZGQzYWE1NDU4YmJmMTg2OTQwMTczODU0ZmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnB6s9TOjvAUwv2+//tTpO+xskbMU
Mijahwq/pdryJDj7/PRqJDpdIP4QN8BNEjKNVTGbYtbw2jxCl2+4VQJfppjj5sC2
+4SwxKMPyxLFhM/MC5SrQzt5khKQi6Pl65lOifpd/LXwCgMY4wv/zqx+4Hb39eI0
efRR9zTTksoovM+b5xfW/aERrcltWGWQaOva2mzP+rHOCtQmI0KLIgfEj0bA9aJG
CYwXZbCa8GJfJfSPHi8y2Glt/008qZ8nQgETby6MiSv+UbMivZ+sc2QvQdHO2NSf
4j1DIV5GcfZtPx4lRcBUof71QvTgN6iOolEfUhELCLBIyKVvGEBaa5FMHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMjut55UBz3TqlRYu/GGlAFzhU/AMB8GA1UdIwQY
MBaAFJnofVZMy4YR4UCnsr8mDEoiK1nWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVoOVZrekxoaEhoUUtleXZ5WU1TaUlyV2RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jY2IxNjItOTQ5Yi00ODM3LWI1ODAt
Y2Y1MWQ4ZTRjMTRiLzEvbWVoOVZrekxoaEhoUUtleXZ5WU1TaUlyV2RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9jY2IxNjItOTQ5Yi00ODM3LWI1ODAtY2Y1MWQ4ZTRjMTRi
LzEvbWVoOVZrekxoaEhoUUtleXZ5WU1TaUlyV2RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmV+oPYEX
tnLTbzCXLmjiK/qDfUkouCG8uMlzkpttZA5gOPmWmLKiyW0yNdBdnmFbxgDxRVIV
88sJlNsp7Rg1t/WsyjgOEDTIqwSCbm33/A4OIjyUGv3N0q0Qj1YLKPocUWf2iUzB
3P9clX7Jfwhpnh2lJR1mlfZLFJPg8eh5KtUavXpKjfGUJ3YmxfVqYFHksr/YYSLv
yy7dS1lWlkfdCBsvi77TSPee6zLoWdMXsRxA/0LdrMsyqGN9TQLZQJ1eQCcFqfKH
LHwh/eoj5JTq3jKPwkQRkbkiSGam/heTWE3SF2OHz18SYe/oCZMwnQZaAHYJ7A7X
vHPszP40/UbQMg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:48:08 2025 by rpki-client