Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
File: Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft (raw, json)
Hash identifier: 5MbWz9W6XoSHUy2bR8xUHvYH6GvZinuIZ6GRjAK1vIQ=
Subject key identifier: 7A:FC:E3:0B:30:9F:04:5F:30:87:EB:90:67:78:2E:18:73:D5:56:86
Authority key identifier: 46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
Certificate issuer: /CN=468f8ae4a267c812f242bf02c064eb9287c35155
Certificate serial: 0199FC5861B90BAA6B29AB80A34249460D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
Manifest number: 0DD9
Signing time: Sun 19 Oct 2025 12:01:14 +0000
Manifest this update: Sun 19 Oct 2025 12:01:14 +0000
Manifest next update: Mon 20 Oct 2025 12:01:14 +0000
Files and hashes: 1: Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl (hash: k8Rb2aFUqp/rcZjVvI++u9jVVEvZfLq7ZJJWzF1g/EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:61:b9:0b:aa:6b:29:ab:80:a3:42:49:46:0d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468f8ae4a267c812f242bf02c064eb9287c35155
Validity
Not Before: Oct 19 12:01:14 2025 GMT
Not After : Oct 20 12:01:14 2025 GMT
Subject: CN=7afce30b309f045f3087eb9067782e1873d55686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0f:54:66:8f:1f:d6:aa:24:9b:39:7e:ba:03:
50:27:9a:01:83:2e:db:d0:a5:47:c3:e4:5b:ed:10:
fe:34:20:93:5f:4f:1b:7d:1f:c3:e0:f5:bd:8f:53:
69:89:2d:aa:f8:0c:18:67:be:02:f6:8d:40:7f:d3:
10:e4:a7:38:b2:03:43:74:84:f2:20:be:da:34:35:
a2:36:03:aa:bf:07:e4:8b:bd:77:bf:b0:e4:fb:c6:
a8:09:6e:2f:3f:65:67:04:18:84:f9:c2:d1:9e:a3:
17:fe:13:7c:35:56:76:22:3f:10:1e:d6:02:c8:5c:
6e:d5:8b:d2:d4:d8:df:39:c4:13:43:b5:1c:46:d8:
66:3d:0f:6f:72:5a:80:30:75:78:c3:39:a8:e9:14:
c9:f8:a2:cf:9b:12:82:da:21:63:76:28:20:5d:1f:
33:49:0b:02:95:d2:ce:e4:76:f9:82:9f:74:65:fc:
58:76:50:0f:2e:ca:dc:e1:7a:8e:67:2e:22:ef:84:
b6:d9:66:c8:6b:3e:79:4b:1b:30:b4:0a:8b:68:3d:
6e:df:a5:34:10:53:8b:e4:b0:64:75:29:81:f6:2d:
8b:6a:a8:b6:58:4e:b9:ec:4f:d9:90:ac:7f:af:f6:
cb:b8:07:0c:5d:a5:ea:7f:85:c2:c5:37:2a:20:14:
6b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FC:E3:0B:30:9F:04:5F:30:87:EB:90:67:78:2E:18:73:D5:56:86
X509v3 Authority Key Identifier:
keyid:46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f1:92:a7:61:7b:63:2a:06:ff:e7:69:02:8c:c9:c1:46:0f:
bf:11:c0:b7:56:2e:07:c2:10:58:ea:b8:aa:7e:d3:0d:d9:cf:
4b:14:b8:e0:e6:e1:5e:45:84:07:61:c7:d9:57:56:87:16:25:
cc:e1:97:4c:c5:34:50:c7:35:94:6f:59:d4:4c:8b:98:0b:30:
18:05:99:59:60:eb:8f:a7:68:44:22:fd:39:63:32:4f:d5:28:
08:40:61:e7:e6:de:f6:25:9a:4c:eb:62:96:de:a8:5b:48:ed:
8d:2b:02:2b:e1:85:f1:16:0a:63:07:7d:a0:b6:cf:a4:5a:91:
ed:f2:0a:21:ef:0e:80:15:db:ea:43:3c:06:91:bc:5e:e2:45:
18:21:60:cc:87:00:b4:48:5b:bc:31:86:4f:8a:f0:8d:98:a7:
b0:fb:c2:12:a6:ec:6e:5c:eb:d0:0a:39:f7:f6:3b:b8:eb:ff:
f2:b7:bc:f5:68:b1:9a:aa:46:78:0f:41:89:af:bf:03:9c:88:
3d:59:2f:3a:46:4d:89:34:40:f3:cd:a4:a2:fe:c0:75:0f:d0:
54:07:8d:18:cd:0c:3b:a0:2c:a3:d5:b4:33:ef:9d:3f:c3:72:
85:d7:53:e3:02:2a:e0:6d:7c:10:98:7b:2d:9e:55:a8:87:b9:
03:a1:ff:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:42 2025 by rpki-client