Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
File: Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft (raw, json)
Hash identifier: 39YptKqp9wIi9ibVGnV1FIzvvBp3MPw5h8oKMV1IELU=
Subject key identifier: 3F:19:E4:66:9F:07:1C:0E:E5:7B:2D:BB:C5:5C:26:81:EF:F2:8D:87
Authority key identifier: 46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
Certificate issuer: /CN=468f8ae4a267c812f242bf02c064eb9287c35155
Certificate serial: 0199221F0024C52EED4A890C4D5CE109EC29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
Manifest number: 0D68
Signing time: Sun 07 Sep 2025 03:01:20 +0000
Manifest this update: Sun 07 Sep 2025 03:01:20 +0000
Manifest next update: Mon 08 Sep 2025 03:01:20 +0000
Files and hashes: 1: Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl (hash: +i8aUVVRvVLm5Jc1XlUL5K1MAX4gmPEdQCY8/BpvaPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:00:24:c5:2e:ed:4a:89:0c:4d:5c:e1:09:ec:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468f8ae4a267c812f242bf02c064eb9287c35155
Validity
Not Before: Sep 7 03:01:20 2025 GMT
Not After : Sep 8 03:01:20 2025 GMT
Subject: CN=3f19e4669f071c0ee57b2dbbc55c2681eff28d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:4a:33:1f:3c:ce:ae:1a:ef:3f:49:98:c1:
73:c6:e5:11:0e:eb:19:8b:c3:01:5d:59:33:74:63:
c7:76:c0:7d:0b:a4:46:2d:f1:b1:75:b7:cf:df:4a:
62:06:59:2c:1b:06:00:3c:55:d3:f8:e2:1b:52:93:
51:e9:8c:94:b9:93:81:cb:87:3f:0a:87:84:e6:cd:
22:34:1e:b7:4d:7c:55:bf:ed:b9:37:36:1e:fe:b9:
30:0d:73:c7:35:ae:ba:2f:a4:51:94:59:8e:b6:16:
fd:0e:7e:7e:02:3e:51:90:ed:13:0c:64:7f:b1:70:
f9:1c:19:2b:c2:df:63:70:4f:a0:91:5f:91:ed:c0:
56:05:17:73:85:09:f7:cd:4d:85:d5:6e:6a:37:98:
b6:70:f7:fd:21:22:44:7c:5b:59:17:4b:99:8f:91:
d3:7e:e5:f7:d6:aa:2b:44:28:c2:58:25:3b:51:8b:
6c:a3:3b:ab:28:b8:6c:b7:63:af:23:23:7b:f6:cc:
6a:dc:3a:1b:e5:df:92:d0:2e:8d:9d:a5:0b:f7:00:
b4:79:57:bc:85:04:d6:e3:16:d4:dd:a5:ca:6b:60:
d2:78:66:06:97:f2:39:96:7b:13:aa:8e:45:fe:dc:
de:32:65:6e:5a:d9:d0:b3:7b:7e:dd:c1:17:72:77:
39:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:19:E4:66:9F:07:1C:0E:E5:7B:2D:BB:C5:5C:26:81:EF:F2:8D:87
X509v3 Authority Key Identifier:
keyid:46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:de:b9:dc:fa:98:f0:45:35:38:36:ba:80:c7:5d:1f:2e:9d:
1e:58:1a:4b:6e:9c:ec:dc:0a:65:9a:e6:6f:4a:59:2d:67:62:
76:a0:69:3d:1d:53:07:e0:35:12:b4:d4:67:b4:f1:85:8e:85:
d4:86:f1:dc:16:c1:86:7a:1a:a4:f8:d2:4a:ab:40:0c:ec:e0:
7d:13:b6:07:7b:54:87:29:2f:03:8a:33:ca:5c:03:1c:a4:14:
2b:e2:ec:65:5d:56:87:4f:7b:aa:28:e1:15:d4:5f:71:3f:ad:
5e:46:c0:cf:03:ef:dc:0d:c6:ba:de:41:e9:fe:4d:23:e8:99:
bd:3c:5c:a8:fb:35:f3:de:7d:49:11:80:0b:64:0a:ce:56:2e:
30:a0:ea:7c:e5:bd:76:36:2e:1a:c4:a0:5a:73:9e:7a:9b:8c:
51:63:eb:82:b3:00:d3:99:99:91:8d:c4:72:a8:dd:f1:ed:54:
90:87:56:35:48:4e:83:f9:4a:84:90:2e:39:d0:7e:bb:b7:bc:
04:38:86:74:b6:5a:da:32:7e:ee:e9:9e:1d:7c:f0:af:da:5c:
c4:b6:69:44:cc:a1:68:ed:58:a8:1c:56:d6:3e:bf:41:03:ae:
14:3b:c0:9e:43:ef:bc:5d:f9:6b:91:f0:d4:6e:4c:08:55:c6:
7f:94:9a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:48 2025 by rpki-client