
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
File: Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft (raw, json)
Hash identifier: Oersaz0M1BWIEoJYYMYQEaCl+76bM3eer6tWPn7Ojp4=
Subject key identifier: B8:45:FE:A7:D7:0C:F4:07:67:94:68:63:DF:2E:32:0D:CD:4D:C5:FF
Authority key identifier: 46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
Certificate issuer: /CN=468f8ae4a267c812f242bf02c064eb9287c35155
Certificate serial: 01974CD71473C627046D846FC5B5281C8B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
Manifest number: 0C75
Signing time: Sun 08 Jun 2025 00:00:53 +0000
Manifest this update: Sun 08 Jun 2025 00:00:53 +0000
Manifest next update: Mon 09 Jun 2025 00:00:53 +0000
Files and hashes: 1: Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl (hash: YDnvOtgyV4ZP+b8e08iESQhAYcCqQ2b0db08LJAR6m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:d7:14:73:c6:27:04:6d:84:6f:c5:b5:28:1c:8b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468f8ae4a267c812f242bf02c064eb9287c35155
Validity
Not Before: Jun 8 00:00:53 2025 GMT
Not After : Jun 9 00:00:53 2025 GMT
Subject: CN=b845fea7d70cf40767946863df2e320dcd4dc5ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8e:87:37:7b:05:72:dc:af:28:ae:5f:fe:19:
6f:72:81:67:12:21:c4:e8:92:21:d6:04:f1:0f:6e:
37:ed:ed:f2:dc:a7:66:26:bd:13:8e:22:a6:bf:f7:
dc:eb:af:6f:40:bc:4e:c9:dc:47:b8:1a:18:34:f9:
1b:f9:da:ad:e5:12:1e:df:d4:da:fe:ad:e7:1d:c0:
42:4d:e9:dd:2a:b5:79:51:f2:d1:56:b6:14:a6:42:
0c:9f:7f:8e:2a:eb:63:71:8a:83:37:f8:ba:88:a9:
70:82:7a:6c:be:74:29:82:79:a5:bb:dc:82:8f:ec:
c9:9b:53:c8:8b:64:ce:e8:bc:6a:73:91:d6:f9:71:
14:fe:d8:77:0b:bf:3b:cb:dc:1f:aa:8c:42:27:43:
30:51:e5:09:b4:e0:5b:8f:02:9c:5c:67:cf:66:74:
eb:3a:89:3d:5b:47:b9:ff:5e:16:8b:4b:08:30:3c:
e2:a8:a4:14:a8:da:ef:18:2e:d4:1a:83:64:96:5e:
89:de:4f:f4:72:e7:08:9f:8d:3b:f0:2c:08:c3:e8:
07:86:20:47:5d:eb:46:6f:98:23:b5:0d:08:b3:40:
f5:68:b1:0f:72:08:85:8d:90:80:08:3d:56:40:b1:
e6:5b:17:c9:11:09:28:32:6d:e9:2f:48:11:df:fa:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:45:FE:A7:D7:0C:F4:07:67:94:68:63:DF:2E:32:0D:CD:4D:C5:FF
X509v3 Authority Key Identifier:
keyid:46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:24:ba:98:b1:3e:72:bf:46:cf:a9:ab:53:b9:d1:f3:df:ff:
65:de:5d:a2:35:18:87:81:ff:a7:5f:00:43:85:14:6b:fd:8e:
34:e5:10:3d:8a:20:58:e2:f5:98:e0:2c:b3:3e:cc:8f:ba:fb:
a7:67:f4:c6:45:2b:55:03:fd:57:42:c3:6d:4d:07:f4:99:5d:
dd:1a:07:ce:18:b6:e5:43:c4:9f:26:f2:9b:4e:86:94:02:a9:
65:a6:af:da:6a:d9:1e:ea:51:3e:96:6e:98:48:9f:ae:69:a6:
28:d1:77:03:12:87:20:e2:c9:e7:96:b0:af:53:42:e4:91:a8:
87:06:6d:7c:3a:ba:3b:e6:49:57:4f:c7:2e:d3:b1:2a:d5:36:
10:50:ab:70:4b:09:a0:7d:76:2c:56:40:77:89:b4:bc:c0:a6:
54:00:56:5d:6e:11:18:5f:c8:92:5d:a0:fb:17:26:fd:96:b7:
73:da:23:23:4c:02:47:80:4c:39:58:88:4d:06:ac:57:95:72:
c8:54:b7:b0:0c:3c:17:2b:b1:4e:63:af:c3:a9:81:05:c3:84:
e8:b1:00:9f:74:1d:28:a7:ef:de:fe:c5:61:40:c0:54:04:ed:
43:4c:9d:fa:13:9c:12:36:63:9c:bf:16:22:6d:e3:1e:ea:4a:
32:eb:e6:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdM1xRzxicEbYRvxbUoHIt5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGY4YWU0YTI2N2M4MTJmMjQyYmYwMmMwNjRlYjkyODdj
MzUxNTUwHhcNMjUwNjA4MDAwMDUzWhcNMjUwNjA5MDAwMDUzWjAzMTEwLwYDVQQD
EyhiODQ1ZmVhN2Q3MGNmNDA3Njc5NDY4NjNkZjJlMzIwZGNkNGRjNWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY6HN3sFctyvKK5f/hlvcoFnEiHE
6JIh1gTxD2437e3y3KdmJr0TjiKmv/fc669vQLxOydxHuBoYNPkb+dqt5RIe39Ta
/q3nHcBCTendKrV5UfLRVrYUpkIMn3+OKutjcYqDN/i6iKlwgnpsvnQpgnmlu9yC
j+zJm1PIi2TO6Lxqc5HW+XEU/th3C787y9wfqoxCJ0MwUeUJtOBbjwKcXGfPZnTr
Ook9W0e5/14Wi0sIMDziqKQUqNrvGC7UGoNkll6J3k/0cucIn4078CwIw+gHhiBH
XetGb5gjtQ0Is0D1aLEPcgiFjZCACD1WQLHmWxfJEQkoMm3pL0gR3/opkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhF/qfXDPQHZ5RoY98uMg3NTcX/MB8GA1UdIwQY
MBaAFEaPiuSiZ8gS8kK/AsBk65KHw1FVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82NDQ3MGItMWE3YS00OTY2LTkzMjUt
N2E0MDdkYTY2NmQ0LzEvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82NDQ3MGItMWE3YS00OTY2LTkzMjUtN2E0MDdkYTY2NmQ0
LzEvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyS6mLE+
cr9Gz6mrU7nR89//Zd5dojUYh4H/p18AQ4UUa/2ONOUQPYogWOL1mOAssz7Mj7r7
p2f0xkUrVQP9V0LDbU0H9Jld3RoHzhi25UPEnybym06GlAKpZaav2mrZHupRPpZu
mEifrmmmKNF3AxKHIOLJ55awr1NC5JGohwZtfDq6O+ZJV0/HLtOxKtU2EFCrcEsJ
oH12LFZAd4m0vMCmVABWXW4RGF/Ikl2g+xcm/Za3c9ojI0wCR4BMOViITQasV5Vy
yFS3sAw8FyuxTmOvw6mBBcOE6LEAn3QdKKfv3v7FYUDAVATtQ0yd+hOcEjZjnL8W
Im3jHupKMuvmOg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:14:43 2025 by rpki-client