Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
File: Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft (raw, json)
Hash identifier: VHVFk5N2Xft36TyHi+JFbFezUVJUMLlIBjdZzh9tWXU=
Subject key identifier: 7E:13:79:01:0C:85:0E:EC:2C:D8:6B:2B:7F:16:9B:39:D4:D7:91:B7
Authority key identifier: 46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
Certificate issuer: /CN=468f8ae4a267c812f242bf02c064eb9287c35155
Certificate serial: 0198D6CDD26324D5A52FDBBD0B931F6D21BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
Manifest number: 0D41
Signing time: Sat 23 Aug 2025 12:01:09 +0000
Manifest this update: Sat 23 Aug 2025 12:01:09 +0000
Manifest next update: Sun 24 Aug 2025 12:01:09 +0000
Files and hashes: 1: Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl (hash: 1hKjqPLy/HeN6jn9w30mtxC4izwQnd12wyNabbjTv6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:d2:63:24:d5:a5:2f:db:bd:0b:93:1f:6d:21:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468f8ae4a267c812f242bf02c064eb9287c35155
Validity
Not Before: Aug 23 12:01:09 2025 GMT
Not After : Aug 24 12:01:09 2025 GMT
Subject: CN=7e1379010c850eec2cd86b2b7f169b39d4d791b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:17:7e:d3:f2:7a:d0:fa:a0:3d:a3:5e:06:
bf:c8:8b:8b:d0:d0:ad:fe:10:5d:93:b6:a7:5c:3e:
d5:ac:a0:15:c0:11:98:34:0a:80:c4:64:37:69:b7:
83:e4:5c:db:09:29:12:d2:d7:ee:5b:6e:1f:ec:68:
5d:e2:82:e6:57:a5:a5:56:c6:ca:6f:49:1f:a0:f9:
db:71:ae:b3:7c:5c:87:fd:8c:d1:f6:2d:b2:c6:7d:
44:2d:0c:ce:4a:f1:54:4c:a3:52:dd:63:93:14:06:
01:d7:45:d3:58:2a:38:15:c4:92:fb:ab:29:3e:cd:
c9:92:23:88:b3:1d:82:50:14:8a:bd:c4:e8:62:51:
4e:3b:05:53:af:46:0c:19:d7:1b:5e:a3:09:10:b7:
45:e0:93:e7:1b:3e:b1:af:c6:7e:f3:55:71:62:f5:
ec:44:a6:d7:9c:5a:94:f1:0f:33:2b:c1:b4:0d:ec:
00:88:73:52:4a:69:e6:d4:bb:7b:02:3b:e0:e6:46:
34:de:61:38:9d:e6:d9:c7:82:ba:54:e9:c3:62:45:
56:d8:87:2f:be:16:a8:fc:e1:ad:e2:a6:f2:80:65:
38:25:86:35:f0:61:02:0c:d4:d3:08:59:20:87:aa:
9a:0d:c4:39:f4:8b:e5:64:99:de:d0:1e:76:8a:87:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:13:79:01:0C:85:0E:EC:2C:D8:6B:2B:7F:16:9B:39:D4:D7:91:B7
X509v3 Authority Key Identifier:
keyid:46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c9:63:9c:60:5c:6e:09:1e:a9:6b:9c:44:7e:c3:31:9e:30:
d8:dd:9f:e8:80:a6:d5:d8:05:f4:40:94:2f:b2:2f:20:ab:0b:
80:fd:a7:30:b6:91:1f:78:0b:c7:d8:c1:e8:07:66:41:a9:b4:
38:5a:dd:a1:fd:ff:cc:32:17:a3:fe:d4:5f:a8:c5:45:2f:f6:
e4:4e:a8:7c:5c:89:04:d0:f4:73:d8:cb:ab:69:09:78:0a:5e:
22:e3:bc:36:c2:d9:58:4a:52:21:f1:56:08:ae:cb:64:6d:9d:
ef:b5:43:b0:ab:a8:55:a0:4d:64:0e:1c:e7:b2:0a:f4:f3:09:
05:b0:da:ea:8c:7a:57:ff:e7:ba:c2:29:2b:c9:43:72:33:f7:
e2:16:89:49:0e:f7:ff:f0:a6:97:75:07:8b:7b:9b:dd:df:81:
56:47:93:dc:b0:94:f9:2d:aa:f6:58:f8:11:22:8e:c3:da:ed:
c4:5b:98:de:5f:e5:be:3f:22:0a:88:89:2f:2a:1a:d1:11:5f:
f2:a3:4f:00:40:21:1f:ab:14:91:7f:0a:5b:95:2c:5d:30:a4:
d0:69:72:2a:26:b3:ff:16:9a:ec:28:28:28:d9:12:eb:22:2f:
d0:77:5c:63:d7:37:90:34:ec:8a:51:80:d3:b8:d0:4f:6f:0e:
b3:c6:79:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:33:59 2025 by rpki-client