Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
File: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json)
Hash identifier: Raordq5FxCxbrOoEPSmPaiOZ/sn7bTB71m0YphDKZeQ=
Subject key identifier: 05:02:60:FC:E2:79:AD:E9:44:AD:8E:B5:D3:73:B5:F4:C5:EB:7B:73
Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
Certificate issuer: /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Certificate serial: 019921B22B04463F56BB0B9A357254E342C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
Manifest number: 042A
Signing time: Sun 07 Sep 2025 01:02:28 +0000
Manifest this update: Sun 07 Sep 2025 01:02:28 +0000
Manifest next update: Mon 08 Sep 2025 01:02:28 +0000
Files and hashes: 1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: lwHkOMnm9tURMNViTVNGKHOk9j8k0YEYrngkxvDRT1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:2b:04:46:3f:56:bb:0b:9a:35:72:54:e3:42:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Validity
Not Before: Sep 7 01:02:28 2025 GMT
Not After : Sep 8 01:02:28 2025 GMT
Subject: CN=050260fce279ade944ad8eb5d373b5f4c5eb7b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:83:93:5c:e7:3b:89:2f:69:6d:51:26:05:64:
ba:47:60:94:18:2e:d4:1a:a8:7d:82:68:cd:0e:a4:
37:39:0c:b1:ce:ec:b2:cd:b6:58:b3:c0:46:47:9b:
67:3e:69:2f:09:c0:07:ac:eb:ae:7c:4c:a5:19:54:
3b:67:c2:d2:9f:09:f0:a8:ea:f4:29:87:41:00:b3:
d0:98:e3:60:fd:44:6d:a1:53:1f:96:2d:29:da:e3:
71:4d:81:e1:f8:e1:7a:58:1d:95:22:5f:f7:bd:7f:
23:82:0b:17:a1:25:89:ab:63:d1:bc:39:fc:05:5f:
e3:9e:80:2e:20:b6:50:51:bc:6b:5e:b8:a5:6d:78:
02:19:80:93:da:a3:be:1b:ec:f6:fb:d9:dd:f9:34:
d4:95:57:c8:c6:49:63:98:e6:b3:e6:07:e5:08:cd:
be:34:78:eb:cd:e9:16:e5:a8:83:d2:42:53:6b:10:
60:33:30:9a:f0:eb:ee:69:83:a0:b0:ed:2f:2e:7e:
6e:0e:1c:37:60:c1:d7:03:73:58:ab:ac:b7:81:c2:
10:e9:87:0a:ba:6e:00:90:a8:8c:94:f9:9e:fd:7a:
8f:60:a9:24:f3:69:35:d8:72:72:3a:b6:25:50:a1:
59:f6:c0:eb:8f:26:2c:0a:92:88:76:e4:ce:cb:ef:
5b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:02:60:FC:E2:79:AD:E9:44:AD:8E:B5:D3:73:B5:F4:C5:EB:7B:73
X509v3 Authority Key Identifier:
keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bb:4a:cc:2a:5a:72:97:90:21:1f:ee:fb:fc:7c:37:22:85:
e7:31:c6:07:3d:fa:dd:48:bf:1f:3e:e5:69:af:21:12:02:ca:
85:80:96:16:26:18:5a:bd:e4:2a:3f:c5:41:55:3f:e9:82:a9:
36:e5:22:da:0e:5c:be:35:f0:7c:10:2f:a4:45:0d:1a:f7:07:
ad:e8:bc:8f:5f:f6:2d:e9:1b:d2:3f:c3:b6:36:85:82:39:90:
b1:96:cb:38:32:dc:64:43:29:0b:8e:79:fc:f4:10:8f:02:90:
49:67:da:f6:b4:74:50:17:50:1f:79:5c:f8:98:12:8d:01:32:
70:93:c6:62:d9:49:19:42:4e:a0:fc:96:5d:6b:74:c5:21:33:
06:f2:fd:22:54:9e:2a:23:32:4c:a4:ea:c0:b5:f7:5e:72:77:
b1:c9:ad:e0:be:92:a1:22:ce:88:14:a7:33:ec:32:bd:15:23:
0d:3d:e5:45:13:51:4f:da:96:f9:48:32:53:26:27:49:d2:5d:
b2:51:e6:0c:2e:57:9e:2a:b6:a5:f7:64:99:e0:13:03:17:4f:
21:25:56:65:16:98:ad:9f:37:58:06:72:f5:6b:c0:6e:35:36:
d0:ab:66:f2:fd:98:8b:c2:8f:f6:cb:e9:c8:e6:ba:cb:62:6d:
1a:6c:82:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:36 2025 by rpki-client