Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
File: RovSl-go2l6hLA32zXQmt4MHRos.mft (raw, json)
Hash identifier: 1AMXIA6cMGVtzIAn5Q5j/DUtLhaP63nOWSD3sfsF8A8=
Subject key identifier: 26:B6:E3:89:E2:C8:C3:98:C4:32:FD:6D:39:0C:64:05:EE:F0:C9:BF
Authority key identifier: 46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
Certificate issuer: /CN=468bd297e828da5ea12c0df6cd7426b78307468b
Certificate serial: 0198D54E8B824D53204B2CFE9791C1218010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 05:02:31 +0000
Manifest this update: Sat 23 Aug 2025 05:02:31 +0000
Manifest next update: Sun 24 Aug 2025 05:02:31 +0000
Files and hashes: 1: RovSl-go2l6hLA32zXQmt4MHRos.crl (hash: QqnezxeVKj3Ap1B1/6BFLbUXe9b3TYW2UfIZjQLEYrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8b:82:4d:53:20:4b:2c:fe:97:91:c1:21:80:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468bd297e828da5ea12c0df6cd7426b78307468b
Validity
Not Before: Aug 23 05:02:31 2025 GMT
Not After : Aug 24 05:02:31 2025 GMT
Subject: CN=26b6e389e2c8c398c432fd6d390c6405eef0c9bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:33:c3:26:05:ed:4d:da:94:3c:91:bc:dc:89:
ba:86:5b:9f:2b:e7:83:9c:aa:ea:86:97:a2:63:9a:
89:f7:c7:2e:a4:5b:a9:f3:a9:09:9c:5a:71:71:52:
31:98:38:fc:bf:d2:1e:4a:79:be:88:c0:58:af:a3:
c2:21:6d:31:0e:d7:96:eb:ce:29:b4:17:7f:00:4a:
73:e2:94:f8:41:2a:66:1d:0a:72:d3:58:d3:ba:1d:
b0:b7:1b:34:e7:6d:a8:8e:9c:4a:5c:0b:f0:a0:ee:
ff:b9:74:76:58:5f:5b:f8:64:4c:8b:3b:11:29:e3:
31:26:a6:dd:87:7c:db:eb:ad:9f:d5:03:93:70:f3:
60:20:40:8d:a2:7f:a8:2d:45:7d:49:6d:8d:c5:f9:
4f:e0:8f:7e:29:40:97:39:39:07:87:c8:77:95:f5:
46:ab:fb:d2:1c:87:3e:68:cd:d9:cf:f3:78:c4:10:
65:4b:7d:8d:4b:8d:78:91:b2:5f:a5:07:18:6e:c4:
f1:99:ab:4b:66:0d:27:e1:1c:63:f8:42:6b:05:5f:
01:e7:5b:49:21:8e:12:a8:c8:1e:07:98:41:ab:55:
23:54:76:70:b2:b0:91:e9:27:c6:e8:8e:d7:e1:8b:
cd:66:41:69:10:0b:83:a8:da:e3:bb:52:3a:5b:1f:
bd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B6:E3:89:E2:C8:C3:98:C4:32:FD:6D:39:0C:64:05:EE:F0:C9:BF
X509v3 Authority Key Identifier:
keyid:46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2e:79:28:f5:af:dd:2e:d6:d7:9d:b8:be:9a:8d:0e:d2:34:
64:54:86:b0:75:52:73:1a:4c:9e:0c:10:83:d8:48:36:c4:f4:
2e:49:8f:67:8f:0b:46:6c:ec:b8:6d:1f:44:f7:91:b7:e4:3e:
e4:c4:f5:11:be:d6:50:f3:55:26:2a:b9:fd:43:71:a1:da:28:
b5:69:c9:de:a4:81:56:a8:f2:bf:97:e8:33:ac:ee:c9:fb:7b:
a7:85:ae:3e:11:86:89:9d:1a:d4:2d:90:5c:1f:42:b3:74:f8:
8a:d8:e1:82:2d:b9:df:35:87:90:1e:97:69:96:13:c2:fe:6b:
a8:37:9d:f4:0f:6b:33:f0:62:6f:35:d3:43:46:00:56:de:39:
f3:fe:1d:0c:49:4b:bd:da:31:57:56:e4:1a:90:5f:57:02:80:
6e:43:db:e8:f9:40:85:f0:d5:3e:89:b6:0f:5f:0f:11:3e:14:
26:d5:c9:00:9f:38:f4:7d:bd:57:38:c1:ea:df:bd:38:23:e0:
4f:34:dc:de:48:07:bc:4c:1b:5c:5b:61:ee:d3:75:c0:be:01:
42:d2:a2:e3:73:c0:e3:23:c4:f9:cc:25:ba:21:3e:94:2a:de:
01:78:b9:3f:eb:20:86:8e:96:b0:eb:9e:26:2c:47:6f:93:3c:
73:19:2a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:47:44 2025 by rpki-client