Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
File: RovSl-go2l6hLA32zXQmt4MHRos.mft (raw, json)
Hash identifier: EVVfqJzaK/sgnhCFOOL+eHrKks1qD4qXPftNRw4KIIE=
Subject key identifier: 01:16:1A:96:6A:24:CA:B0:56:CD:1D:5F:EF:A1:65:E5:5A:D0:E2:25
Authority key identifier: 46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
Certificate issuer: /CN=468bd297e828da5ea12c0df6cd7426b78307468b
Certificate serial: 0197B77C7A253302E24203EC8263123CAB3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 17:01:17 +0000
Manifest this update: Sat 28 Jun 2025 17:01:17 +0000
Manifest next update: Sun 29 Jun 2025 17:01:17 +0000
Files and hashes: 1: RovSl-go2l6hLA32zXQmt4MHRos.crl (hash: KPvEKGnTSjWwnnjGdfHgEGoq/kgZOLUiS5hie2gNZa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:7a:25:33:02:e2:42:03:ec:82:63:12:3c:ab:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468bd297e828da5ea12c0df6cd7426b78307468b
Validity
Not Before: Jun 28 17:01:17 2025 GMT
Not After : Jun 29 17:01:17 2025 GMT
Subject: CN=01161a966a24cab056cd1d5fefa165e55ad0e225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:42:a3:96:50:92:2c:d8:21:5f:77:2f:8c:
6a:64:c0:4d:9b:59:e0:78:a2:a0:40:76:8b:8b:59:
b3:76:d4:2e:7d:6f:b8:ce:01:60:cf:82:64:a2:d3:
83:de:26:f0:f0:9e:8f:92:ac:92:fe:7f:dd:46:aa:
ce:d7:f2:c1:0f:09:ed:6f:1c:16:21:61:cf:16:08:
f6:38:35:e1:35:51:3d:39:10:34:80:4d:ab:c5:4e:
94:7a:18:12:92:fc:5b:d5:73:84:32:44:e2:45:f2:
68:62:07:b3:a6:ed:2a:a9:a7:1f:3f:70:79:a2:3c:
21:f4:15:59:16:81:48:45:7b:d5:74:1f:f1:67:ca:
71:37:d7:b1:89:55:2d:42:cf:cf:f5:7c:de:c2:58:
c2:a5:71:b6:bd:5b:49:98:e7:52:fd:1c:ec:bf:84:
09:d4:d0:bc:fb:2f:dd:12:07:8b:16:bb:b4:2a:f6:
cb:a4:ab:8b:a3:38:bc:40:36:e5:8c:20:8c:61:22:
2c:a6:ad:ea:d7:24:92:5b:81:f8:04:41:31:f3:bc:
3d:d5:a7:ea:c8:8c:9e:3c:67:12:d9:e1:d2:39:2f:
f9:fc:7f:77:0a:65:ff:99:b8:51:21:a7:ce:37:40:
a0:93:de:f0:fd:55:0f:f0:fe:1a:0f:9f:df:76:bb:
54:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:16:1A:96:6A:24:CA:B0:56:CD:1D:5F:EF:A1:65:E5:5A:D0:E2:25
X509v3 Authority Key Identifier:
keyid:46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f6:cb:1e:01:c7:06:5c:08:ad:cc:d9:6f:94:c6:7e:6e:d0:
1c:69:ad:9e:be:58:a7:ec:9f:4b:41:a4:91:de:db:12:f7:f0:
f7:0b:b8:69:94:29:ca:29:db:d5:86:ed:04:3e:36:0a:c7:18:
ce:03:5a:66:b2:00:9b:76:1a:21:1d:b2:85:2b:9f:c8:76:65:
27:4c:77:8e:31:77:2c:17:de:13:15:94:d7:da:e8:4a:36:17:
a5:66:f0:d1:e8:77:85:47:1c:5f:a8:36:f3:72:cb:2b:b6:cf:
6f:b4:37:88:2e:cf:9d:db:2d:e9:bd:17:a9:d1:6d:3e:5e:51:
48:a8:6f:7c:ec:04:04:74:59:01:f6:14:53:97:d6:b1:61:23:
1f:2a:f3:f0:5c:e4:60:58:aa:0b:1b:fb:58:aa:64:8d:fd:d6:
02:ac:34:e5:e1:a1:f9:0f:30:8d:84:a9:cd:f4:6b:f9:7a:e2:
e0:54:74:64:08:ee:fc:11:5a:67:16:95:1b:0a:11:c5:43:23:
4e:16:48:ac:6f:43:fa:87:dc:d2:02:52:06:32:14:f8:94:48:
4a:20:00:73:e8:bd:0b:03:74:df:8a:b6:42:20:aa:36:ff:7e:
f2:c4:33:87:68:08:35:bd:00:1a:b2:d0:5a:3e:5f:87:59:da:
b3:de:4b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:44 2025 by rpki-client