Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
File: RovSl-go2l6hLA32zXQmt4MHRos.mft (raw, json)
Hash identifier: NvCMzp+sE6T45aNGtTo/nRrtxsoN6cVwGiOqneOzS8U=
Subject key identifier: 8A:49:24:3E:D3:8C:AC:E0:03:05:4B:3E:F5:27:83:04:2C:BB:A7:F8
Authority key identifier: 46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
Certificate issuer: /CN=468bd297e828da5ea12c0df6cd7426b78307468b
Certificate serial: 0196561375CFBCCD0B285D9655E1E9533913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
Manifest number: 14FB
Signing time: Mon 21 Apr 2025 02:00:37 +0000
Manifest this update: Mon 21 Apr 2025 02:00:37 +0000
Manifest next update: Tue 22 Apr 2025 02:00:37 +0000
Files and hashes: 1: RovSl-go2l6hLA32zXQmt4MHRos.crl (hash: NWKzSfgEHD/bZ+3RLYUH9xt6eHuZGhFrqdNu8Qz6Mqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:75:cf:bc:cd:0b:28:5d:96:55:e1:e9:53:39:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468bd297e828da5ea12c0df6cd7426b78307468b
Validity
Not Before: Apr 21 02:00:37 2025 GMT
Not After : Apr 22 02:00:37 2025 GMT
Subject: CN=8a49243ed38cace003054b3ef52783042cbba7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:28:83:a9:63:0f:7a:54:19:4f:72:48:c9:4a:
01:0c:0d:08:6d:cc:d7:e6:d3:4b:f6:aa:9a:1e:8e:
6a:52:ca:07:37:35:cf:95:91:3c:0b:dd:0f:80:fa:
7d:57:e5:b2:e3:fe:ca:e0:0f:10:2f:c5:2c:0f:5c:
66:2a:f8:e2:d8:63:4e:45:8b:f7:2b:51:29:20:a9:
3f:dd:e3:bf:90:26:db:17:5c:30:c4:13:0e:9a:8f:
be:8b:f7:f2:c0:b9:44:fd:c1:3e:db:ae:ce:68:3d:
a1:46:da:b2:a5:9e:ef:a8:6c:1c:97:08:50:f5:f5:
b8:2b:b4:b7:ba:d9:85:ef:b3:92:12:ac:36:74:9c:
e7:be:90:c3:d0:48:2d:ab:7d:40:5a:ba:5e:e2:47:
80:37:d4:00:1c:b2:19:19:94:1b:d0:5c:90:e2:06:
5a:91:87:93:c7:72:af:bf:c6:ad:71:20:e2:9a:c8:
75:db:f7:b0:c7:27:5a:fc:17:72:45:ba:b4:c5:d2:
79:bf:d1:d8:e0:3b:fd:ef:ba:cb:b1:9e:d3:c4:a4:
26:00:f3:f0:e0:6c:03:54:84:7b:22:04:37:d7:ae:
9f:6d:47:76:68:c2:29:33:0e:b0:a3:1f:c6:05:d9:
eb:41:cb:94:b6:df:3e:c4:1b:b5:90:d5:bd:b2:12:
81:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:49:24:3E:D3:8C:AC:E0:03:05:4B:3E:F5:27:83:04:2C:BB:A7:F8
X509v3 Authority Key Identifier:
keyid:46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:de:de:e4:91:33:64:24:67:b7:df:de:05:73:af:f2:4c:33:
87:be:ce:e3:1d:8a:dc:a6:24:00:c2:3e:7d:46:10:d6:3b:73:
6e:60:31:63:75:61:90:a5:56:e5:e9:18:41:98:93:41:c8:6c:
13:03:a0:58:2d:64:31:c6:81:39:f9:c6:d8:d6:bc:23:8c:c6:
5b:6d:c2:b8:d8:ba:a1:0a:e7:06:56:7c:20:d5:b3:1a:ad:cd:
8f:b3:08:80:43:c1:78:ec:e9:47:62:2b:7a:f0:5e:a9:be:27:
23:60:d4:c9:a9:00:26:95:2c:14:22:8a:1d:f4:39:5a:ed:62:
eb:3e:36:eb:8d:c7:95:29:e3:47:99:88:e8:de:bd:b6:63:29:
51:d6:ec:d2:3f:00:c5:4f:63:89:18:5e:67:32:fd:9f:b0:62:
4b:e6:e4:12:23:b8:c2:09:12:3e:82:90:95:ff:2f:37:94:45:
ae:ae:22:76:2f:3d:d0:f0:28:3f:1c:3d:56:0a:9d:9b:d5:08:
ce:9e:1a:53:7c:07:53:43:81:ff:cb:65:57:9b:e2:0e:bb:c8:
c8:91:02:ce:ef:1b:5e:b8:72:21:df:4f:a4:36:08:df:18:83:
15:4a:f6:a6:08:d0:ef:3c:76:df:68:e0:87:5a:03:55:5f:e2:
bc:da:a1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:42:28 2025 by rpki-client