Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
File: RovSl-go2l6hLA32zXQmt4MHRos.mft (raw, json)
Hash identifier: 0eQO/RvRxa+HEOc9f85ipj5AA5Sfz7ZtsTYV92tX7yI=
Subject key identifier: 79:07:F0:4C:9F:A6:39:7A:DC:71:56:9F:FC:73:61:58:7F:8B:57:BA
Authority key identifier: 46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
Certificate issuer: /CN=468bd297e828da5ea12c0df6cd7426b78307468b
Certificate serial: 0196B0D78E5354A2E9B98B19192E6676843D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
Manifest number: 152A
Signing time: Thu 08 May 2025 17:00:38 +0000
Manifest this update: Thu 08 May 2025 17:00:38 +0000
Manifest next update: Fri 09 May 2025 17:00:38 +0000
Files and hashes: 1: RovSl-go2l6hLA32zXQmt4MHRos.crl (hash: b0ghXvaTi4YP6T7SVBrzTAJBP8qm4+wGhu3c27EnO3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:8e:53:54:a2:e9:b9:8b:19:19:2e:66:76:84:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468bd297e828da5ea12c0df6cd7426b78307468b
Validity
Not Before: May 8 17:00:38 2025 GMT
Not After : May 9 17:00:38 2025 GMT
Subject: CN=7907f04c9fa6397adc71569ffc7361587f8b57ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ba:2f:1b:0c:1e:97:6e:96:4d:41:5f:02:24:
18:4e:ce:ab:3a:4b:83:4f:94:cd:05:e7:17:08:9e:
95:95:ad:c7:fe:35:6a:05:79:ec:87:49:24:93:83:
d7:e0:6b:c5:da:42:07:b9:54:ea:ec:61:62:83:c3:
ce:0d:13:b8:24:2b:0b:b6:20:0f:27:fc:6d:66:f3:
20:f7:f6:14:b2:73:13:9d:28:32:44:f4:24:e8:68:
4a:2a:33:f2:f7:e5:4e:b4:92:44:21:5a:9e:8e:c9:
78:9f:45:60:3a:19:16:19:cd:9e:4b:2b:c8:33:23:
12:31:cb:79:e9:99:ca:02:11:c2:77:75:20:0d:35:
27:3d:07:73:32:3d:6c:05:1b:12:8a:78:8e:b3:56:
21:d2:fe:da:c8:15:e5:91:d1:97:74:a7:18:6a:ee:
68:f4:27:4e:24:9e:f3:b9:9f:a1:07:37:0c:b9:03:
1a:cd:21:50:5f:0c:51:7f:82:db:1b:b1:0d:2e:a9:
e5:ee:c5:09:68:d1:ea:99:f5:fa:e1:28:20:ac:d2:
0c:43:38:c9:c9:7c:ef:2d:e6:91:03:70:2a:ae:dc:
58:48:6d:2e:b8:f1:44:08:f1:9d:80:f4:30:37:c4:
a9:a1:15:ca:d6:c9:f0:68:e9:9a:9c:58:7b:e4:7e:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:07:F0:4C:9F:A6:39:7A:DC:71:56:9F:FC:73:61:58:7F:8B:57:BA
X509v3 Authority Key Identifier:
keyid:46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d0:3b:e2:49:f8:c0:0b:ef:38:c7:b3:0a:3d:1b:03:87:83:
16:50:46:a4:3d:33:e6:79:dd:b0:11:b7:4a:2d:f3:3d:c0:e2:
0d:ee:b5:c4:41:a8:3c:b9:3d:f5:55:d1:93:f8:34:58:c6:fa:
b9:fb:0f:94:25:3e:6e:94:d2:ff:2e:08:40:c1:d3:0e:03:ad:
fb:83:7e:a6:10:13:f9:d0:c9:63:e6:ac:98:fa:ed:c2:43:0e:
95:30:75:0f:c1:3b:ad:0d:30:dc:9a:7a:37:e5:63:91:32:db:
ef:e3:b6:f7:a1:58:ae:97:cf:c6:5e:e2:8e:cb:c6:55:74:e1:
bf:bf:e2:be:48:71:8b:95:fd:86:52:54:62:f5:63:02:b1:a6:
bd:32:15:9c:0c:c5:12:fc:4d:0f:32:19:78:ef:56:0e:96:bd:
bf:9c:ce:ae:5b:2d:ad:35:ab:52:10:61:2c:6f:f9:32:96:e0:
d0:5d:94:61:8c:9a:f8:36:a4:92:be:85:84:9d:df:4a:3a:65:
e8:27:64:d9:5f:a6:ac:eb:ec:5f:9d:56:54:fe:ca:7b:86:de:
cb:fb:2f:b6:14:49:36:3e:09:40:ba:75:23:be:16:93:4f:5f:
b2:bf:42:46:cd:a0:64:1c:ae:da:0e:09:b3:af:36:f8:18:83:
29:36:d3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:55:42 2025 by rpki-client