Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
File: Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft (raw, json)
Hash identifier: +0Rls2dsrRvg5E28hdvrkofTLhz6NG+kCcqewRcp80A=
Subject key identifier: F1:5A:68:CA:1D:11:96:54:4D:5F:82:39:4C:5B:07:B8:B1:D6:C0:B9
Authority key identifier: 46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
Certificate issuer: /CN=468f8ae4a267c812f242bf02c064eb9287c35155
Certificate serial: 01987DF7C2E960C6758542F4882C2FBEC069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
Manifest number: 0D13
Signing time: Wed 06 Aug 2025 06:00:45 +0000
Manifest this update: Wed 06 Aug 2025 06:00:45 +0000
Manifest next update: Thu 07 Aug 2025 06:00:45 +0000
Files and hashes: 1: Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl (hash: 4Lw+1bwNtkEQYZzSA872cvPB/fS2Fu6jx/2PxlczZU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:c2:e9:60:c6:75:85:42:f4:88:2c:2f:be:c0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468f8ae4a267c812f242bf02c064eb9287c35155
Validity
Not Before: Aug 6 06:00:45 2025 GMT
Not After : Aug 7 06:00:45 2025 GMT
Subject: CN=f15a68ca1d1196544d5f82394c5b07b8b1d6c0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:52:42:18:25:e7:42:cb:61:47:c4:a7:c7:a5:
ad:96:10:f0:33:9b:7c:e6:27:63:ce:bc:ae:6f:32:
7b:59:52:cc:3b:84:db:2d:15:94:ff:7d:ec:03:d2:
02:fa:be:a3:42:64:3a:86:1c:59:c9:a5:89:f0:fe:
55:bb:d1:5a:52:a2:eb:2a:52:1e:80:95:4f:a1:2c:
24:48:ff:13:ed:2d:ea:81:5a:90:a2:b9:41:c8:11:
3d:d3:a0:05:7d:b4:8f:81:6e:a1:1a:93:db:84:d2:
69:f7:5e:90:cb:a0:7b:ba:73:fe:80:10:9e:a1:81:
2f:90:fb:4e:93:d6:f2:13:62:a2:1a:74:b0:07:2a:
d8:0a:0c:9e:03:64:cc:2c:50:26:a5:fb:82:63:d3:
b8:ec:35:fc:ed:19:0f:16:ae:bd:e0:04:1c:1b:09:
70:ea:c7:b8:7c:68:89:f8:76:d8:fe:20:56:89:33:
e6:b4:05:8f:ee:83:38:4c:61:b8:6f:79:c1:5f:88:
fe:fd:4e:5c:33:36:56:81:9d:99:9d:a9:86:09:09:
9b:d1:69:75:42:31:c1:28:81:0c:64:b4:d8:ba:72:
1b:21:20:f3:1a:a9:e5:bc:fe:b6:da:f8:3b:0a:de:
22:4d:28:0a:a5:80:97:a2:f9:07:78:f7:4e:d3:86:
38:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5A:68:CA:1D:11:96:54:4D:5F:82:39:4C:5B:07:B8:B1:D6:C0:B9
X509v3 Authority Key Identifier:
keyid:46:8F:8A:E4:A2:67:C8:12:F2:42:BF:02:C0:64:EB:92:87:C3:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro-K5KJnyBLyQr8CwGTrkofDUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/64470b-1a7a-4966-9325-7a407da666d4/1/Ro-K5KJnyBLyQr8CwGTrkofDUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e6:0f:56:68:b9:f9:ba:c2:73:8e:ae:9b:7b:48:fd:c1:a4:
e8:ce:2a:d0:a5:84:86:0b:62:41:73:9e:4c:76:4a:bc:d3:05:
50:62:b2:ae:d0:0e:7e:06:e8:90:5e:8c:64:1f:66:80:3f:59:
9a:99:b6:2c:5d:8c:fc:25:9e:38:6f:20:54:bd:53:c0:93:bf:
4f:a1:c1:26:31:89:69:82:90:03:2f:42:c3:9c:56:b6:eb:ed:
aa:ed:f9:13:d3:3d:ba:63:7c:db:56:b4:76:48:ea:2b:f4:fe:
03:6b:b9:8d:f4:c2:fa:f4:80:f2:a8:5a:56:12:29:be:46:8c:
40:09:4f:1d:8b:4a:dd:3c:0a:1f:50:82:8d:a6:43:de:b7:d2:
18:6d:a9:00:f0:0e:06:5b:6f:9f:a7:f3:5c:68:e2:86:19:aa:
b0:fa:fd:b7:47:bf:af:8d:dc:01:95:7d:79:09:77:3b:c8:62:
91:77:4c:b0:bf:d5:ac:50:0d:f8:76:db:92:7a:58:60:33:72:
0f:16:4d:d4:0c:c9:f6:7d:e4:a5:96:4d:ee:49:f7:d4:96:78:
99:39:07:2a:a7:34:d2:80:48:d1:d5:76:7d:4c:d9:5f:e2:d9:
10:71:e5:7e:6a:ad:f9:12:d7:63:31:f0:a8:63:01:df:52:04:
ec:e8:f2:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh998LpYMZ1hUL0iCwvvsBpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGY4YWU0YTI2N2M4MTJmMjQyYmYwMmMwNjRlYjkyODdj
MzUxNTUwHhcNMjUwODA2MDYwMDQ1WhcNMjUwODA3MDYwMDQ1WjAzMTEwLwYDVQQD
EyhmMTVhNjhjYTFkMTE5NjU0NGQ1ZjgyMzk0YzViMDdiOGIxZDZjMGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01JCGCXnQsthR8Snx6WtlhDwM5t8
5idjzryubzJ7WVLMO4TbLRWU/33sA9IC+r6jQmQ6hhxZyaWJ8P5Vu9FaUqLrKlIe
gJVPoSwkSP8T7S3qgVqQorlByBE906AFfbSPgW6hGpPbhNJp916Qy6B7unP+gBCe
oYEvkPtOk9byE2KiGnSwByrYCgyeA2TMLFAmpfuCY9O47DX87RkPFq694AQcGwlw
6se4fGiJ+HbY/iBWiTPmtAWP7oM4TGG4b3nBX4j+/U5cMzZWgZ2ZnamGCQmb0Wl1
QjHBKIEMZLTYunIbISDzGqnlvP622vg7Ct4iTSgKpYCXovkHePdO04Y44QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFaaModEZZUTV+COUxbB7ix1sC5MB8GA1UdIwQY
MBaAFEaPiuSiZ8gS8kK/AsBk65KHw1FVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82NDQ3MGItMWE3YS00OTY2LTkzMjUt
N2E0MDdkYTY2NmQ0LzEvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82NDQ3MGItMWE3YS00OTY2LTkzMjUtN2E0MDdkYTY2NmQ0
LzEvUm8tSzVLSm55Qkx5UXI4Q3dHVHJrb2ZEVVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeYPVmi5
+brCc46um3tI/cGk6M4q0KWEhgtiQXOeTHZKvNMFUGKyrtAOfgbokF6MZB9mgD9Z
mpm2LF2M/CWeOG8gVL1TwJO/T6HBJjGJaYKQAy9Cw5xWtuvtqu35E9M9umN821a0
dkjqK/T+A2u5jfTC+vSA8qhaVhIpvkaMQAlPHYtK3TwKH1CCjaZD3rfSGG2pAPAO
Bltvn6fzXGjihhmqsPr9t0e/r43cAZV9eQl3O8hikXdMsL/VrFAN+HbbknpYYDNy
DxZN1AzJ9n3kpZZN7kn31JZ4mTkHKqc00oBI0dV2fUzZX+LZEHHlfmqt+RLXYzHw
qGMB31IE7Ojy5w==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:30:55 2025 by rpki-client