Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
File: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json)
Hash identifier: tJaMrPQyAHieS37TImDXYwmoEfsrz2e2gc5fk9yXqWg=
Subject key identifier: 5B:B4:7E:2A:7B:F3:F0:0D:DC:2B:C7:16:4E:8A:F3:F3:D1:45:72:CE
Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
Certificate issuer: /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Certificate serial: 019748555379B4C1C5D2E31E9DA1C0DC5E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
Manifest number: 0335
Signing time: Sat 07 Jun 2025 03:00:40 +0000
Manifest this update: Sat 07 Jun 2025 03:00:40 +0000
Manifest next update: Sun 08 Jun 2025 03:00:40 +0000
Files and hashes: 1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: 3jynMuJ0yLX+fMuPy55fMsEvoAT5+0hVc4Our3P3nR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:53:79:b4:c1:c5:d2:e3:1e:9d:a1:c0:dc:5e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Validity
Not Before: Jun 7 03:00:40 2025 GMT
Not After : Jun 8 03:00:40 2025 GMT
Subject: CN=5bb47e2a7bf3f00ddc2bc7164e8af3f3d14572ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:f0:30:f3:4a:49:8b:1c:19:10:67:59:0f:
8e:d5:ec:ee:09:bf:d0:2b:e1:ab:18:fd:a0:94:54:
fd:b7:82:12:fc:6c:3d:11:0a:4d:54:34:24:28:17:
b3:65:4b:e9:ad:a5:6f:66:bc:87:4f:1c:d3:fc:1b:
73:c6:e5:1a:b1:37:da:4a:1d:72:82:62:62:7d:fe:
29:b8:3d:53:2c:3c:83:83:0c:3b:be:13:2c:5d:d9:
13:fc:9c:87:f0:10:88:98:95:c3:72:4b:2a:a4:36:
b3:50:dc:10:a7:26:55:93:90:a7:59:6a:8d:b3:3a:
1a:93:43:da:0d:f8:b4:92:fb:4b:d0:7e:d7:71:a6:
0a:40:4c:6c:9f:4f:19:f0:8c:9d:30:2c:fa:e6:fa:
5f:96:4a:ad:39:19:da:63:e5:a8:09:1a:04:b0:f2:
60:ed:6a:19:4a:7e:cb:d0:9b:70:29:87:97:71:d2:
da:ce:ac:7e:2b:3b:fa:cc:e5:86:e6:c4:3d:3d:b8:
12:ec:da:11:65:bc:ba:fa:d6:07:4a:e0:f8:79:f6:
a8:66:62:3b:c4:69:02:ee:a7:ea:36:09:8f:56:69:
03:37:43:81:fb:13:21:f8:e7:e1:45:4b:0a:5e:b6:
c9:c9:11:54:9b:00:10:f6:f1:47:8f:3e:1e:23:fb:
ca:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B4:7E:2A:7B:F3:F0:0D:DC:2B:C7:16:4E:8A:F3:F3:D1:45:72:CE
X509v3 Authority Key Identifier:
keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b6:b3:20:71:04:b7:36:d2:61:bb:54:7b:bf:88:c0:82:ed:
55:c0:1e:80:8c:2e:ff:02:b9:f4:26:54:d8:be:e7:89:60:6c:
70:16:13:0a:08:2a:81:aa:ca:72:ce:24:81:d7:db:09:ed:75:
70:e9:52:3d:93:1a:2f:8d:6d:6e:c9:83:b5:ea:d0:ec:80:65:
5b:af:3f:3b:49:93:f8:b6:0a:6d:ea:30:21:66:03:36:f4:50:
36:2d:e0:64:f0:91:dd:61:1b:bc:c7:a3:03:26:51:c3:2a:a5:
94:b3:91:de:ad:a2:fe:c8:5b:71:4a:cd:15:ff:74:7b:f2:1b:
0f:83:3c:40:be:c7:db:f9:84:d3:fd:c3:50:30:12:72:83:9a:
53:cb:e7:b1:2a:c7:5d:0d:cd:20:65:53:b2:b9:cb:05:2b:01:
f1:f8:3a:25:f0:fb:28:c9:1a:fa:3f:cd:8f:53:d0:4a:fc:8c:
90:c6:4e:4b:5e:47:b8:f7:48:85:10:9e:fd:09:43:7c:6b:82:
67:b3:71:27:3e:2b:3c:91:f7:fa:d5:01:6c:7c:0d:7b:65:19:
66:bb:88:9e:5f:c1:21:b9:1f:c1:0b:4a:e0:99:1a:8a:4e:e3:
89:2e:a8:fe:fb:9e:1f:41:a1:16:31:e2:9e:e0:b7:b3:70:31:
a1:7d:a3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:38:31 2025 by rpki-client