Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
File: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json)
Hash identifier: V0U0ENY438/SyokOK7LhygiKDcuqKeRsh+bHT/ctBKw=
Subject key identifier: F2:27:2A:07:58:2A:BB:5C:12:A5:28:31:B9:78:56:66:2F:90:A6:E7
Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
Certificate issuer: /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Certificate serial: 019A71B94191DA344BFE812F86916DBD6CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
Manifest number: 04D8
Signing time: Tue 11 Nov 2025 07:02:37 +0000
Manifest this update: Tue 11 Nov 2025 07:02:37 +0000
Manifest next update: Wed 12 Nov 2025 07:02:37 +0000
Files and hashes: 1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: NMZMlv8FFKIigrDw25HnpEg/+W3cgdiouqyFW9Iw3gE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:41:91:da:34:4b:fe:81:2f:86:91:6d:bd:6c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Validity
Not Before: Nov 11 07:02:37 2025 GMT
Not After : Nov 12 07:02:37 2025 GMT
Subject: CN=f2272a07582abb5c12a52831b97856662f90a6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:53:dc:7a:02:73:3f:37:d0:25:eb:4e:ea:
6d:b1:2b:80:55:00:db:dd:33:3b:da:ec:ef:61:37:
45:7a:ad:65:3c:22:73:7d:12:0b:66:64:80:20:2b:
92:88:01:c4:86:89:0f:46:f7:15:b8:b6:c9:28:e7:
20:74:6c:75:59:21:fd:a6:d6:5a:ef:9c:5c:00:c9:
68:14:fe:97:c4:e6:8a:b1:43:04:c2:e6:20:38:9d:
4e:4d:cc:51:c8:74:32:a7:33:7b:a2:80:1a:f2:99:
d1:94:d4:cc:4c:08:e1:59:e2:b8:d7:d1:72:43:96:
7f:a6:08:83:be:90:92:a4:f1:37:f4:02:88:23:9c:
7c:6d:e7:fe:33:81:d4:d0:d7:80:52:d8:f8:b0:7d:
9b:ba:ce:a1:29:58:b3:fb:0b:e7:34:29:44:a4:55:
fa:c7:4f:93:91:27:56:58:5a:b7:90:ed:ea:01:73:
37:33:a3:19:1f:aa:dd:01:84:25:b5:75:53:6a:86:
55:ab:fb:c8:4b:ca:d2:a2:d6:b4:4f:96:da:b3:b1:
c1:93:97:a6:93:35:01:ba:cb:bb:1a:0c:c8:81:18:
d3:50:fd:2f:66:42:aa:c5:0a:cf:ff:3b:d0:77:8e:
8a:51:91:26:e3:e1:06:f4:56:2c:87:a9:0f:ba:54:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:27:2A:07:58:2A:BB:5C:12:A5:28:31:B9:78:56:66:2F:90:A6:E7
X509v3 Authority Key Identifier:
keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9f:b3:2e:76:87:4b:11:dc:6c:e9:a0:db:da:14:47:6c:f0:
90:00:b3:e3:15:02:ce:4d:b2:a3:a1:40:7a:be:31:a2:cf:f7:
6c:43:67:4d:d7:bb:f4:ee:51:83:10:bb:95:0d:e1:25:3d:78:
f5:18:90:41:2d:93:70:2a:a6:9a:7f:7a:9c:69:2a:62:c8:79:
af:8d:48:24:3f:67:9e:98:0b:31:69:7f:1c:29:79:1d:ae:e3:
78:c8:35:bc:8e:00:ba:a9:1c:15:dd:d9:7f:8b:54:d9:93:8c:
a9:3a:2f:32:36:50:28:91:af:51:53:02:ad:b4:2a:d8:7d:fc:
a9:fb:32:02:39:70:e9:10:d9:bd:96:30:df:83:f3:1e:92:e0:
93:3f:52:83:ed:92:5b:6a:92:27:2e:7d:40:85:51:49:99:c6:
01:21:29:d9:89:b2:84:62:b3:1c:8d:30:a8:bf:97:40:c1:5d:
2c:f0:0a:53:c4:40:3c:c8:20:11:e6:85:c4:5c:52:66:73:84:
fa:aa:d6:53:fd:76:6e:85:f4:05:a9:ff:ed:5f:38:8a:4f:37:
1d:d7:e2:f6:bd:0f:6e:61:d3:4d:e9:18:14:91:bc:13:98:2d:
77:02:52:c6:84:c0:5c:2f:ea:5f:3a:25:ed:52:82:b6:6b:22:
2c:ca:48:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:39 2025 by rpki-client