Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
File: RovSl-go2l6hLA32zXQmt4MHRos.mft (raw, json)
Hash identifier: N0Pt4Fib1x6Sy6VJ5qKDhPxgBgU9lKRpshynbPUiISo=
Subject key identifier: BD:F3:AB:E4:66:BE:A3:24:9C:29:28:C6:C5:E0:C8:52:CC:4D:BF:E9
Authority key identifier: 46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
Certificate issuer: /CN=468bd297e828da5ea12c0df6cd7426b78307468b
Certificate serial: 0199FAD7D83172509B5D5A0F8318A866CA66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 05:01:13 +0000
Manifest this update: Sun 19 Oct 2025 05:01:13 +0000
Manifest next update: Mon 20 Oct 2025 05:01:13 +0000
Files and hashes: 1: RovSl-go2l6hLA32zXQmt4MHRos.crl (hash: sBjyTmBuWkF+Ardg2qdukaAaOoDFKnBeCtV7ycsNVus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:d8:31:72:50:9b:5d:5a:0f:83:18:a8:66:ca:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468bd297e828da5ea12c0df6cd7426b78307468b
Validity
Not Before: Oct 19 05:01:13 2025 GMT
Not After : Oct 20 05:01:13 2025 GMT
Subject: CN=bdf3abe466bea3249c2928c6c5e0c852cc4dbfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:be:ba:0a:1a:e1:51:0e:37:d4:0e:3d:1f:fe:
4e:ba:f4:a2:1c:25:52:cc:6a:37:d1:16:86:7c:6e:
3e:08:3a:5b:83:ba:a1:4f:b5:5e:04:f8:a8:a4:32:
05:fe:87:bf:11:6c:41:d3:2b:48:fd:ab:24:dd:16:
88:05:66:62:b1:64:24:56:63:96:00:0a:f0:7e:5f:
e2:5d:a6:70:c6:48:f0:5d:f1:02:4b:d7:16:a7:ef:
2d:61:e7:bb:bc:eb:7e:44:08:98:dd:7a:a5:5b:37:
98:78:9b:c6:3e:da:e9:b5:5d:d5:5e:be:76:9d:04:
c4:5d:b1:a6:82:5d:fb:74:00:d1:c7:5b:e0:aa:37:
49:81:55:b9:5b:7b:3f:68:27:c3:97:33:21:00:e8:
c0:1e:76:e9:a1:78:f1:b4:6c:b8:26:1e:78:20:4d:
20:78:ec:4e:0a:41:8d:5c:90:7a:86:ec:c3:2e:23:
25:b0:93:8d:ce:39:72:ce:1d:af:67:a3:a5:d1:a8:
80:dd:4e:7c:c5:98:d6:5d:af:99:40:23:99:7b:5b:
e4:5c:55:5c:d8:6b:17:b4:0e:45:22:18:fc:8b:a9:
0b:f4:30:73:62:90:39:43:60:dd:90:8b:a1:4e:ba:
f9:13:a4:eb:0a:36:a9:71:fb:02:cc:b9:25:97:2c:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F3:AB:E4:66:BE:A3:24:9C:29:28:C6:C5:E0:C8:52:CC:4D:BF:E9
X509v3 Authority Key Identifier:
keyid:46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b4:4d:32:6f:6a:61:71:53:2a:83:70:f7:40:d6:1f:e9:5d:
81:25:e8:70:f7:34:4e:9e:f1:e2:76:03:fc:59:06:e5:db:bc:
86:74:b0:b3:ac:99:fb:ba:6c:aa:15:dd:00:61:94:0e:f4:87:
42:81:be:e8:3b:dc:7b:e6:a2:e8:2a:ef:ac:c6:75:a9:75:2d:
9b:fe:21:db:93:5a:d9:fd:90:bc:36:20:ad:38:7e:d6:df:ca:
e3:2f:9c:71:c6:23:ad:b4:f5:a2:81:5c:56:47:52:c5:b7:bf:
db:7d:24:b5:52:2e:11:03:23:e0:8e:ce:25:92:d2:60:f2:60:
20:83:58:29:c9:24:bf:6d:99:9d:c7:6c:4e:37:73:3d:4f:27:
80:57:99:6e:c4:a4:99:26:f7:25:5a:22:92:16:b2:f9:7d:ab:
17:88:3e:f7:51:89:62:f8:80:76:32:7f:b7:b9:05:a1:77:24:
6a:d5:ae:7d:ea:c7:c6:d5:e2:44:d3:ea:40:b9:1b:11:5d:a3:
cf:31:90:df:5f:94:b2:25:1a:5e:f5:24:16:87:a7:a9:9a:3a:
5f:d4:ec:00:62:9a:50:4e:14:85:a5:0b:2b:52:7c:73:f8:17:
c0:f6:5b:cb:2e:f3:8a:cb:51:85:87:06:2b:a6:cf:3e:9d:35:
f8:ef:32:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:56 2025 by rpki-client