Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
File: RovSl-go2l6hLA32zXQmt4MHRos.mft (raw, json)
Hash identifier: fIIyydhX/YnQfGIQ9JMVzY2zoNwqQVMTpwv5vt41MB0=
Subject key identifier: FE:D7:43:F4:88:80:55:B6:C4:E5:FF:72:F0:D7:52:6D:5B:8E:49:59
Authority key identifier: 46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
Certificate issuer: /CN=468bd297e828da5ea12c0df6cd7426b78307468b
Certificate serial: 01977007B0A7348B406BAE5D5603D9ADB003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 20:00:41 +0000
Manifest this update: Sat 14 Jun 2025 20:00:41 +0000
Manifest next update: Sun 15 Jun 2025 20:00:41 +0000
Files and hashes: 1: RovSl-go2l6hLA32zXQmt4MHRos.crl (hash: BxG8cXKI3kvkY/LmDdT3bY7/Ja4oI7IoQLGyEUgaSNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:b0:a7:34:8b:40:6b:ae:5d:56:03:d9:ad:b0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468bd297e828da5ea12c0df6cd7426b78307468b
Validity
Not Before: Jun 14 20:00:41 2025 GMT
Not After : Jun 15 20:00:41 2025 GMT
Subject: CN=fed743f4888055b6c4e5ff72f0d7526d5b8e4959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:c2:36:4e:c1:77:c8:05:18:0f:1c:a2:d4:
2a:60:11:49:c5:da:38:8c:66:a5:fc:be:5c:7f:56:
5f:f8:39:5b:8f:82:e0:7b:ad:52:27:40:aa:6a:b1:
d7:e7:54:55:a6:cf:c3:8c:a5:fd:68:1c:e3:d6:52:
53:b6:81:18:ae:8e:50:01:ef:b4:3e:a0:54:9f:23:
ea:76:f9:f2:9e:d7:11:67:cf:96:11:94:da:fd:68:
8f:20:4a:ab:dd:77:47:2f:d4:cb:33:86:96:61:b7:
51:99:49:97:9d:8d:ff:89:36:16:2c:3b:94:fe:41:
35:73:eb:0a:5c:0c:e1:d6:c3:51:6f:e9:5c:9f:c0:
0c:b2:54:a0:ae:6e:20:0c:d8:27:83:d5:65:13:b2:
6a:bc:af:78:eb:d7:53:bb:f7:f7:02:4e:97:94:67:
c5:98:17:d6:2b:be:92:66:92:2b:31:fa:a3:84:6b:
3d:20:42:f2:9d:31:0e:19:15:54:64:c1:03:1f:86:
92:37:77:4e:89:ef:63:ec:0f:b9:30:97:55:38:25:
68:ca:99:e4:da:d0:76:06:60:48:86:f2:57:f8:26:
31:cb:7a:4b:e9:17:4c:2f:6b:3a:8d:2c:62:91:de:
a4:48:72:88:52:e3:b2:4e:e0:49:95:b4:88:8b:66:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D7:43:F4:88:80:55:B6:C4:E5:FF:72:F0:D7:52:6D:5B:8E:49:59
X509v3 Authority Key Identifier:
keyid:46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:93:8a:76:13:cd:ac:76:b4:8f:8d:16:79:43:e0:46:a9:42:
e7:dc:9d:e4:32:b6:65:01:47:34:1f:2c:5e:d1:04:18:ef:ca:
8f:7b:52:33:97:62:f9:e4:84:0a:ca:d3:1a:cd:46:74:d7:f4:
f6:ce:0d:f8:c5:66:23:77:b0:aa:7e:49:4d:7f:9a:c2:cf:11:
c1:f2:5f:4c:e8:d5:80:22:9f:31:77:30:5a:3b:20:cf:64:e0:
ab:a2:6b:9d:98:dd:f4:15:60:c8:e6:a4:40:5d:41:de:ae:96:
d8:01:8a:e4:7f:ec:df:df:7b:16:21:c1:09:ad:7e:db:a8:cc:
e0:c0:8e:46:7f:ac:49:cf:18:9b:ea:12:4d:07:17:df:51:bf:
10:36:85:79:a9:0d:c9:9e:02:4e:48:a5:31:90:80:56:bf:95:
64:27:4c:ef:3c:ca:a6:bd:c3:4d:40:21:ee:c5:af:4d:de:1f:
8a:3d:52:f5:bc:88:31:1d:26:16:b5:52:1e:36:a3:56:9d:fa:
1a:88:a1:19:d1:be:4f:53:b6:78:7e:eb:f6:55:71:12:36:10:
26:50:d9:97:1f:f4:b2:1e:be:ec:10:59:f5:cb:a8:ac:35:af:
d1:85:a4:e3:a1:2a:38:ba:49:81:d1:16:8b:22:1e:fe:8a:b2:
18:92:6a:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwB7CnNItAa65dVgPZrbADMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGJkMjk3ZTgyOGRhNWVhMTJjMGRmNmNkNzQyNmI3ODMw
NzQ2OGIwHhcNMjUwNjE0MjAwMDQxWhcNMjUwNjE1MjAwMDQxWjAzMTEwLwYDVQQD
EyhmZWQ3NDNmNDg4ODA1NWI2YzRlNWZmNzJmMGQ3NTI2ZDViOGU0OTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hbCNk7Bd8gFGA8cotQqYBFJxdo4
jGal/L5cf1Zf+Dlbj4Lge61SJ0CqarHX51RVps/DjKX9aBzj1lJTtoEYro5QAe+0
PqBUnyPqdvnyntcRZ8+WEZTa/WiPIEqr3XdHL9TLM4aWYbdRmUmXnY3/iTYWLDuU
/kE1c+sKXAzh1sNRb+lcn8AMslSgrm4gDNgng9VlE7JqvK9469dTu/f3Ak6XlGfF
mBfWK76SZpIrMfqjhGs9IELynTEOGRVUZMEDH4aSN3dOie9j7A+5MJdVOCVoypnk
2tB2BmBIhvJX+CYxy3pL6RdML2s6jSxikd6kSHKIUuOyTuBJlbSIi2YoLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7XQ/SIgFW2xOX/cvDXUm1bjklZMB8GA1UdIwQY
MBaAFEaL0pfoKNpeoSwN9s10JreDB0aLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm92U2wtZ28ybDZoTEEzMnpYUW10NE1IUm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85NzkyYjAtYzljNC00ODQ4LWI3MTMt
ODNkMDljZWZiZTg4LzEvUm92U2wtZ28ybDZoTEEzMnpYUW10NE1IUm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS85NzkyYjAtYzljNC00ODQ4LWI3MTMtODNkMDljZWZiZTg4
LzEvUm92U2wtZ28ybDZoTEEzMnpYUW10NE1IUm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJOKdhPN
rHa0j40WeUPgRqlC59yd5DK2ZQFHNB8sXtEEGO/Kj3tSM5di+eSECsrTGs1GdNf0
9s4N+MVmI3ewqn5JTX+aws8RwfJfTOjVgCKfMXcwWjsgz2Tgq6JrnZjd9BVgyOak
QF1B3q6W2AGK5H/s3997FiHBCa1+26jM4MCORn+sSc8Ym+oSTQcX31G/EDaFeakN
yZ4CTkilMZCAVr+VZCdM7zzKpr3DTUAh7sWvTd4fij1S9byIMR0mFrVSHjajVp36
GoihGdG+T1O2eH7r9lVxEjYQJlDZlx/0sh6+7BBZ9cuorDWv0YWk46EqOLpJgdEW
iyIe/oqyGJJq8w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:00:08 2025 by rpki-client