Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
File: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json)
Hash identifier: tH1hhsm00YBU1FtCT3YEYUseeyhg4O5QNKm5mtrEwMo=
Subject key identifier: A0:23:0B:68:C3:E9:1C:2E:46:24:97:79:8B:28:66:CB:77:A5:62:7E
Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
Certificate issuer: /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Certificate serial: 0199FDD9ED6491D8242B48C393C61F420E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
Manifest number: 049C
Signing time: Sun 19 Oct 2025 19:02:21 +0000
Manifest this update: Sun 19 Oct 2025 19:02:21 +0000
Manifest next update: Mon 20 Oct 2025 19:02:21 +0000
Files and hashes: 1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: 2gaJicLibFtlJ9QuXPS4KisAeoIQPgiLTy9TKg/NDzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ed:64:91:d8:24:2b:48:c3:93:c6:1f:42:0e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Validity
Not Before: Oct 19 19:02:21 2025 GMT
Not After : Oct 20 19:02:21 2025 GMT
Subject: CN=a0230b68c3e91c2e462497798b2866cb77a5627e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:00:2f:e2:d3:80:fe:dd:88:a3:d3:93:71:
7c:ef:a3:fe:b6:40:e2:84:1e:1e:13:8b:2a:7a:26:
f6:48:3a:f5:a5:e9:b9:c8:91:10:32:c0:81:6f:3a:
34:7e:c5:9b:73:92:e0:ff:55:09:14:ca:7e:c8:89:
5b:02:60:80:05:80:5b:34:a1:79:d3:1b:cf:11:f0:
12:89:66:59:f9:f7:83:44:72:08:3d:3d:0c:50:5a:
8b:0e:d6:ae:c2:f7:19:15:10:28:87:ca:c1:e9:d2:
68:c7:88:f5:bf:2b:a8:2a:a0:a6:57:d6:08:13:aa:
0f:06:d8:52:80:23:d4:70:e8:b8:1a:e0:a4:8d:f5:
01:2c:32:67:6c:f5:20:c1:98:1e:8e:56:4e:8b:94:
f7:e3:04:45:31:33:20:5c:5a:6e:20:8f:fc:cf:45:
a7:5d:f2:7a:25:c6:f3:2a:45:fa:77:70:f0:b1:66:
11:58:9f:a9:e2:13:dc:78:df:e6:ed:e1:d6:34:9a:
f1:3b:33:b3:b1:26:87:2c:63:d1:ca:13:18:b0:36:
80:24:72:46:79:77:1f:61:8f:f8:e1:23:6b:ca:ac:
7d:d4:87:7d:d0:2d:90:9e:b5:91:fe:49:aa:cc:98:
5d:97:af:9a:10:0c:65:fb:02:3a:9b:f2:66:6f:b5:
d5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:23:0B:68:C3:E9:1C:2E:46:24:97:79:8B:28:66:CB:77:A5:62:7E
X509v3 Authority Key Identifier:
keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:76:6e:34:20:85:dc:91:59:a5:39:5b:b1:b8:42:2c:e2:05:
98:f3:6d:90:1d:c5:e4:1e:49:14:14:ee:9c:06:db:4f:98:98:
f1:43:86:a8:15:08:f0:fa:48:72:a8:fa:04:9b:c3:ed:44:fb:
20:50:c4:84:18:5a:ca:c2:75:69:eb:3d:df:38:c5:d4:f3:0f:
71:ce:e8:8f:54:e7:b9:6a:8a:f7:7e:4c:fe:ce:4e:f6:b7:5e:
cc:d9:8d:eb:d4:53:f8:94:5b:b2:8b:77:8a:96:6b:39:57:da:
35:59:ef:2e:0b:65:5c:d6:11:1e:fc:e8:5c:78:f6:c2:21:ff:
57:0b:07:cf:e4:8a:5b:11:22:60:20:99:25:4e:0d:a0:a6:f6:
18:6e:dd:9b:55:77:27:b8:52:4e:bd:01:b2:87:24:c8:0e:0b:
98:fa:e3:3f:15:6f:c0:6b:a6:b3:6e:53:ce:6a:96:28:2f:0a:
cc:5e:97:f2:b2:7f:09:10:92:a1:ee:a7:50:cf:8e:3a:fc:a7:
24:78:d0:0d:46:44:0d:b2:ea:42:11:f8:2c:fe:47:6e:ba:ee:
f2:bc:32:b3:85:96:9e:e7:83:97:30:db:5d:ec:c1:59:05:f1:
e4:b9:f5:9b:e1:b0:1d:41:9a:0d:be:d0:dd:7b:18:b2:f5:36:
f7:97:a7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:00:41 2025 by rpki-client