Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
File: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json)
Hash identifier: TyAeUDo71kgpwWc0GOFStYw6oLLPwyfCqKoKLgAPtJQ=
Subject key identifier: 9F:29:D7:CC:B9:21:DD:BB:43:6F:C0:85:03:89:DD:46:C5:6C:90:13
Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
Certificate issuer: /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Certificate serial: 0197B88F137E96F29C2141223ACCBAE4247C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
Manifest number: 036F
Signing time: Sat 28 Jun 2025 22:01:13 +0000
Manifest this update: Sat 28 Jun 2025 22:01:13 +0000
Manifest next update: Sun 29 Jun 2025 22:01:13 +0000
Files and hashes: 1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: v2PKqt93jCNqFZhshArHVuKMyTjCWEF+Hc51cs/BoBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:13:7e:96:f2:9c:21:41:22:3a:cc:ba:e4:24:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Validity
Not Before: Jun 28 22:01:13 2025 GMT
Not After : Jun 29 22:01:13 2025 GMT
Subject: CN=9f29d7ccb921ddbb436fc0850389dd46c56c9013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:1d:36:f3:b6:d5:8a:de:66:cb:1b:6f:78:
7b:15:38:63:9a:8d:81:fd:2d:61:a5:58:15:8e:e3:
5e:c9:47:5a:cd:40:dc:f0:90:29:6f:24:58:58:71:
66:5b:2c:7d:e6:5c:ed:2a:cd:b3:c9:b4:c8:bd:9f:
da:82:bb:7d:53:c3:cb:66:cd:d9:33:86:cc:4f:c2:
67:6a:0f:a1:de:6d:dc:ac:d5:36:a8:f4:a8:ca:c0:
81:d1:14:06:92:74:f3:7a:d7:56:35:96:b9:e5:b3:
21:38:9e:d0:e0:1a:93:ec:5d:f5:fd:90:c8:d9:22:
e7:d2:1d:23:be:cd:f2:b7:2a:cf:c7:46:42:ed:75:
16:12:10:00:2c:76:b2:0a:7a:ec:a5:b2:75:cb:12:
27:77:29:0e:08:dc:af:a3:8a:01:1a:5a:f6:70:aa:
11:c5:ab:52:7c:3e:a8:c0:1c:b0:e3:a8:a2:e0:e6:
90:f1:b8:3d:bf:0c:81:5c:e9:d9:d5:3d:eb:40:a2:
16:5f:1e:d8:2e:0e:3d:b0:d1:c6:8f:33:69:80:fa:
09:40:3f:2d:a3:09:99:33:92:2c:a9:31:bf:c8:84:
25:da:bd:83:60:38:c6:48:24:ea:a0:ad:ad:d7:a4:
7f:c5:68:9d:f5:8b:34:e6:87:ff:bf:ab:36:91:14:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:29:D7:CC:B9:21:DD:BB:43:6F:C0:85:03:89:DD:46:C5:6C:90:13
X509v3 Authority Key Identifier:
keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e1:34:ad:c9:04:17:2a:cf:4b:39:43:33:dc:1a:cd:9e:fa:
9a:47:1e:37:93:12:c4:12:6a:3c:53:f5:0c:60:ec:5b:00:6d:
62:af:21:72:72:91:e3:6a:d2:f2:17:c7:d2:97:32:f5:30:37:
33:ba:2e:4b:32:3e:34:61:c4:6b:5f:93:bf:72:da:a6:d3:24:
19:91:f2:22:13:3d:5f:66:d9:37:39:6d:9b:a5:e8:f0:a5:1c:
86:9c:1e:d4:b6:b7:dd:f3:87:4c:f8:f7:ec:5d:ea:4b:f3:84:
c3:22:de:66:f5:03:17:e5:88:c5:15:08:f6:54:d2:00:bb:02:
fc:8b:79:d4:e7:ea:93:00:4d:96:b3:ed:2f:93:d6:21:44:a4:
18:26:73:e7:5a:5d:bb:64:0c:9f:42:0e:21:a0:64:68:4a:ba:
48:8d:96:06:90:6e:2d:53:75:ad:bd:78:76:cf:c2:4b:20:22:
eb:e8:17:9f:24:e1:66:d1:3d:a3:58:95:b5:2e:7d:3d:da:8f:
fe:64:5d:1a:d1:ce:92:43:90:b4:21:ab:d0:01:8d:12:e2:ef:
ed:77:e3:48:f3:8d:c8:f8:8a:34:1e:2a:24:3f:1c:de:8c:fb:
6a:45:06:85:43:6b:66:11:85:3a:3f:d3:28:f8:b7:fb:d9:03:
0e:57:a5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:29:28 2025 by rpki-client