Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
File: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json)
Hash identifier: 5SPhlgmTYzrXMYtYxwY1gCoU6cvy9MxbxK5jjLFhZ+E=
Subject key identifier: 38:25:09:52:25:50:7D:B3:B8:17:5A:2B:C9:2A:BF:B2:F0:E2:E8:17
Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
Certificate issuer: /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Certificate serial: 0198D660948D66542532F3208BEBD42DF770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
Manifest number: 0403
Signing time: Sat 23 Aug 2025 10:01:50 +0000
Manifest this update: Sat 23 Aug 2025 10:01:50 +0000
Manifest next update: Sun 24 Aug 2025 10:01:50 +0000
Files and hashes: 1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: iJE7yZh6pG9A7clDcaEW/fu7KXlpHDrw2R9ZFUXVlVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:94:8d:66:54:25:32:f3:20:8b:eb:d4:2d:f7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Validity
Not Before: Aug 23 10:01:50 2025 GMT
Not After : Aug 24 10:01:50 2025 GMT
Subject: CN=3825095225507db3b8175a2bc92abfb2f0e2e817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:6a:23:46:43:1d:41:22:e6:a9:0a:a1:bb:
0f:82:1a:19:8a:0c:08:56:fe:ce:95:9e:5b:91:fb:
1e:e7:e0:ba:3b:11:32:c3:78:aa:66:43:11:0d:8d:
c9:41:69:21:5b:a3:01:a7:5c:16:12:05:73:7f:9d:
aa:42:3c:ff:87:0f:00:79:5d:75:d4:7d:bb:32:ff:
b6:ea:e7:35:de:5a:46:3b:78:e9:c8:df:c1:58:aa:
48:9e:8b:a6:8c:82:da:42:c0:51:e3:a2:b4:09:73:
7c:1b:10:06:ff:73:70:1f:94:2e:38:fd:e4:b4:c5:
a9:92:23:48:06:0b:d9:f4:67:a4:ab:d4:5c:11:47:
5e:1d:78:a9:ef:41:ff:69:e6:de:8a:25:6f:8a:bd:
90:49:9d:d0:24:db:6c:85:40:41:8a:19:a2:e0:59:
b0:ff:86:f3:8e:c5:24:80:59:c3:7c:91:a2:d6:f9:
01:70:be:a8:ed:f7:d8:60:ea:32:ae:08:b1:0f:56:
13:28:f0:87:78:29:8d:0a:43:84:50:37:d6:2e:9d:
7a:d1:8b:0d:35:17:f3:50:63:08:a6:10:be:74:5f:
2a:c1:a6:5c:54:df:e1:9b:0c:07:6b:5f:23:a4:02:
2f:8d:d4:68:6b:99:d6:f3:c7:d6:bc:fa:41:c6:96:
4a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:25:09:52:25:50:7D:B3:B8:17:5A:2B:C9:2A:BF:B2:F0:E2:E8:17
X509v3 Authority Key Identifier:
keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:3f:16:78:34:e7:58:98:9b:f5:3d:fb:fa:a7:55:01:94:fd:
d3:e4:5d:9a:ef:e1:00:28:a2:82:b7:b7:57:bf:66:07:04:8a:
bf:30:cd:a0:44:ce:90:68:b1:ad:5c:a1:96:bd:a4:53:e9:68:
c2:83:2c:85:8c:63:b4:3c:e8:77:0a:b8:9a:67:da:7a:50:bb:
6b:11:20:78:88:45:d2:87:fb:7b:06:7f:06:d2:29:54:8e:09:
34:88:48:30:67:eb:fb:52:47:ce:25:f9:32:1b:b3:3f:31:bb:
f5:4b:23:4b:9e:78:be:60:91:f3:53:69:76:0a:d8:02:14:9a:
f5:63:5f:2e:bd:ab:94:67:99:a7:83:a6:69:d7:dc:46:c6:56:
62:67:eb:7e:e8:b4:b6:f5:55:80:66:71:60:7f:37:25:90:91:
03:4d:3b:ad:db:7c:34:05:9e:43:cf:fb:01:65:61:41:ee:a8:
12:b1:a1:95:87:91:5c:44:98:5a:e1:c3:7d:41:59:23:d1:7c:
99:4b:d5:c1:65:98:9f:b6:dc:0f:0c:8a:1b:fd:c8:b2:36:45:
6f:de:88:dc:bd:3e:6d:b6:cf:2a:30:6b:6d:0b:2d:74:95:1f:
09:16:d1:37:f0:c5:f6:7b:50:50:4c:66:9b:7c:1b:22:9a:27:
2f:0e:83:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:42 2025 by rpki-client