Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
File: RovSl-go2l6hLA32zXQmt4MHRos.mft (raw, json)
Hash identifier: FULDs7l1csef/Uf3Nt8moZpsXdozMttryIhwJBv2Q3E=
Subject key identifier: 18:3B:0E:8D:13:26:73:DC:11:8D:5F:C4:C3:3D:28:2F:98:17:E1:E6
Authority key identifier: 46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
Certificate issuer: /CN=468bd297e828da5ea12c0df6cd7426b78307468b
Certificate serial: 019A4DE20CA7E64A78946579BC04198A7A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 08:00:51 +0000
Manifest this update: Tue 04 Nov 2025 08:00:51 +0000
Manifest next update: Wed 05 Nov 2025 08:00:51 +0000
Files and hashes: 1: RovSl-go2l6hLA32zXQmt4MHRos.crl (hash: /2Sl/WCH0xqpL9tDegmfLw07yXplPfvtafvalQSPLVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:0c:a7:e6:4a:78:94:65:79:bc:04:19:8a:7a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468bd297e828da5ea12c0df6cd7426b78307468b
Validity
Not Before: Nov 4 08:00:51 2025 GMT
Not After : Nov 5 08:00:51 2025 GMT
Subject: CN=183b0e8d132673dc118d5fc4c33d282f9817e1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:20:88:aa:9d:e5:35:b9:fe:79:c3:b0:7f:
7e:71:30:c6:67:6a:28:9a:99:11:0a:59:f0:84:24:
00:bd:57:83:b3:ab:17:18:e8:06:2c:20:4d:7a:f8:
43:b7:65:91:ab:48:de:99:25:f4:81:04:35:4e:22:
b0:20:cf:46:c6:43:36:df:a7:d1:13:0c:31:6a:73:
a3:b5:08:41:e7:39:04:04:a6:41:85:71:ef:26:de:
32:7c:36:d6:33:76:e6:f3:1e:d6:ec:63:d7:28:27:
6c:6b:e1:7d:f5:36:40:05:d3:69:d1:55:80:83:62:
71:8a:d2:8d:d6:d6:96:af:ec:fc:0b:77:13:29:47:
8f:f1:3c:9a:2c:39:e5:e8:51:df:08:02:c7:0c:8f:
fe:34:64:d5:0c:03:42:f0:4f:01:d6:ef:54:29:7f:
10:44:96:9e:e0:eb:1e:c5:47:9e:ce:63:e0:01:4f:
a0:86:c5:8e:0f:ba:a7:70:cb:f9:1b:f0:12:33:09:
50:b1:2b:aa:e1:b6:14:d2:03:4c:4d:54:e1:6b:49:
28:42:36:9b:5f:10:ed:99:53:d1:55:2e:9e:0c:1b:
ff:f8:03:3a:f4:e4:0b:13:cb:c5:ae:fc:86:b0:44:
02:2b:89:82:7c:f4:7a:22:4d:db:77:04:9b:b9:18:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:3B:0E:8D:13:26:73:DC:11:8D:5F:C4:C3:3D:28:2F:98:17:E1:E6
X509v3 Authority Key Identifier:
keyid:46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:0e:d4:a1:39:60:05:fd:a1:56:3a:39:d3:11:7c:ab:77:61:
58:2c:9b:f5:b9:3d:c2:c7:07:91:f1:77:ec:a9:fa:2e:75:4b:
76:19:31:bb:d2:ec:83:f8:8a:a6:86:4a:9c:bc:44:2b:15:b3:
91:e9:39:77:22:18:7c:64:9d:47:cb:a7:ff:ff:45:ea:21:59:
38:a1:f9:42:48:42:7b:fc:3d:6a:0d:df:0d:cb:25:ad:b1:df:
53:4f:c4:93:35:e3:4c:7a:53:8b:88:9a:61:c6:b5:06:32:c3:
11:bc:5d:b1:8d:f4:c0:4a:93:e7:bd:64:b4:6f:09:5b:4a:61:
05:ee:9c:45:21:19:97:7c:92:1c:b4:a8:2e:f3:fe:63:b0:c1:
af:e9:4a:55:f9:f7:be:05:97:22:6c:ec:a9:8e:f2:3d:4a:e9:
89:dc:2c:4c:a5:31:2d:6c:06:af:62:7b:63:24:0c:f9:5b:a6:
92:19:a5:c8:43:da:04:f3:24:0e:ce:a5:fb:8c:9f:0a:88:45:
a0:99:4c:f2:13:94:e5:49:3b:19:d2:74:b3:df:0f:4b:78:f8:
ab:b5:e3:de:bc:ec:6e:4e:1b:ba:0c:83:dd:e5:72:bc:40:fe:
ba:e5:cd:40:74:43:e8:e0:d5:51:6b:e9:8f:ef:fd:67:90:8a:
ca:ee:44:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:00 2025 by rpki-client