Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
File: Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft (raw, json)
Hash identifier: R76le1Y8fqa3DbdEXatYd/Z444o/gchKpFBDFs/6+XU=
Subject key identifier: 17:E4:A5:33:32:F4:B0:9F:5B:39:0B:CD:40:2F:AB:AC:18:E8:66:76
Authority key identifier: 46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
Certificate issuer: /CN=468f8ae4a267c812f242bf02c064eb9287c35155
Certificate serial: 019A7225D543EE27739F2A12AF1FCBEC5A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
Manifest number: 0E16
Signing time: Tue 11 Nov 2025 09:01:12 +0000
Manifest this update: Tue 11 Nov 2025 09:01:12 +0000
Manifest next update: Wed 12 Nov 2025 09:01:12 +0000
Files and hashes: 1: Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl (hash: rqWgXGYlmsh29LAlFV5wy+XxTkHEPceYUxyaGSq2jU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d5:43:ee:27:73:9f:2a:12:af:1f:cb:ec:5a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468f8ae4a267c812f242bf02c064eb9287c35155
Validity
Not Before: Nov 11 09:01:12 2025 GMT
Not After : Nov 12 09:01:12 2025 GMT
Subject: CN=17e4a53332f4b09f5b390bcd402fabac18e86676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d9:2f:6e:61:f3:40:14:a0:41:38:9a:73:51:
29:05:2f:2a:26:a8:d2:53:fd:ad:c5:6d:ca:58:9b:
fa:f1:08:86:8d:50:29:4f:f4:b2:fe:ac:7a:91:ff:
3e:6a:4a:21:78:b6:c4:a1:d0:50:1c:6e:ed:51:58:
0c:ef:ed:bb:00:de:46:cb:d8:2c:e9:f7:65:c6:1a:
de:0c:93:ce:11:51:74:b8:a2:ad:9d:da:63:f9:41:
10:94:23:54:7a:61:54:d2:a8:4e:d6:97:84:45:58:
1a:39:1a:16:df:72:d5:84:3f:b4:a6:1f:28:c5:64:
15:90:5b:ff:0f:58:e1:e4:e2:2f:29:c3:ea:88:83:
8e:cd:eb:4e:33:63:32:f0:61:3e:c1:4f:c1:9f:58:
13:40:30:57:1b:c0:cb:1a:42:cd:9c:4e:e3:00:df:
e5:fd:97:5d:f2:c6:ac:01:06:ea:ee:6d:47:52:04:
fe:57:6c:c9:38:5f:62:42:ed:0c:93:4e:7f:50:27:
06:cb:7e:30:b1:f6:ac:f0:65:2a:21:7c:e0:b4:6a:
c2:66:ad:fe:ba:f3:f7:e7:e4:03:aa:17:2f:88:41:
b6:58:92:b8:af:22:5e:54:a9:bb:71:f8:50:32:0d:
b4:fa:eb:59:43:1f:30:ee:8d:2d:b6:6c:14:6b:60:
66:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E4:A5:33:32:F4:B0:9F:5B:39:0B:CD:40:2F:AB:AC:18:E8:66:76
X509v3 Authority Key Identifier:
keyid:46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d8:04:77:6a:68:1c:08:15:aa:0c:ce:42:aa:a5:0d:06:08:
41:17:53:72:76:9a:f1:e4:13:25:b9:f2:61:2e:5f:6d:14:5d:
7c:08:ea:16:3f:ab:77:44:e0:9f:36:54:df:c3:05:69:dc:da:
20:03:f4:2f:de:79:6e:9a:f0:9b:96:ac:27:e9:4c:d1:ee:4f:
85:c7:93:e6:b7:48:84:05:76:7b:d5:56:7c:0a:26:29:05:78:
a7:35:0f:ef:fb:7e:1e:10:f3:4b:65:4f:f9:0b:6f:28:77:f8:
05:04:6d:96:1e:b6:94:71:34:6c:73:fe:e5:f0:11:4b:28:96:
44:22:e8:73:60:09:d3:9d:dc:5d:b5:55:3e:27:1a:5f:4a:44:
3d:a0:be:2d:80:d6:73:0e:3d:12:2b:fc:1c:3a:43:1b:ba:4b:
d6:07:2a:ec:85:62:fb:b2:42:7e:e8:b7:88:cf:4e:46:b1:73:
6b:c8:10:04:d9:71:54:02:76:8b:98:51:98:dc:c1:db:b5:78:
f3:d4:89:ec:d0:5d:af:2f:c3:23:78:94:f8:e8:c7:33:39:17:
11:26:9b:d3:61:ed:7f:29:3f:5d:c0:a5:a5:47:d6:6b:f4:59:
96:bb:ba:e9:9b:92:aa:f1:b7:b6:fa:ac:a4:7e:3f:8f:16:78:
f8:8e:2d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:28 2025 by rpki-client