Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
File: RovSl-go2l6hLA32zXQmt4MHRos.mft (raw, json)
Hash identifier: u+R6pw7dbRIw9/ML0v+scUkjoxQLs63/XcZ03+ocbxw=
Subject key identifier: B1:24:87:DF:33:F9:B7:93:FD:3C:59:B7:4D:40:C8:57:37:90:C2:BC
Authority key identifier: 46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
Certificate issuer: /CN=468bd297e828da5ea12c0df6cd7426b78307468b
Certificate serial: 01987E65E8D90E217CE569696EF1068AB1DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
Manifest number: 1619
Signing time: Wed 06 Aug 2025 08:01:04 +0000
Manifest this update: Wed 06 Aug 2025 08:01:04 +0000
Manifest next update: Thu 07 Aug 2025 08:01:04 +0000
Files and hashes: 1: RovSl-go2l6hLA32zXQmt4MHRos.crl (hash: NayfTV3bicUA5lNNFJCfKy0lPBhCeWER2yHFMKPGmNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:e8:d9:0e:21:7c:e5:69:69:6e:f1:06:8a:b1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468bd297e828da5ea12c0df6cd7426b78307468b
Validity
Not Before: Aug 6 08:01:04 2025 GMT
Not After : Aug 7 08:01:04 2025 GMT
Subject: CN=b12487df33f9b793fd3c59b74d40c8573790c2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:04:84:b6:8a:34:33:9f:bc:22:7a:89:11:
78:f5:3f:ee:ff:31:5a:27:37:59:5c:96:a6:1a:00:
9d:bf:6e:bc:d0:85:f5:95:02:82:9a:6e:fd:6a:f9:
46:e7:cc:3f:a9:9c:17:13:4f:d1:e7:ab:ef:26:e3:
71:e8:c0:f7:91:28:49:a0:c1:fd:18:62:5f:5a:4f:
90:f6:88:c4:ae:9e:17:f9:c4:ed:4a:32:be:55:a6:
38:04:28:28:94:9f:2a:c3:2f:d7:80:32:5f:21:44:
1a:2e:57:58:86:36:86:7b:a8:47:fb:54:48:f2:96:
14:4a:2d:a8:15:10:ae:1b:6f:2f:ba:78:72:d1:3c:
73:63:48:26:01:e3:fa:21:ff:92:72:67:c6:a8:f1:
db:8a:08:fd:bc:ca:38:2b:71:27:c6:3e:fa:1b:8e:
33:e0:07:36:3b:a9:60:0e:39:ef:5d:1e:81:25:8c:
df:16:20:ce:84:47:fb:91:67:e8:79:82:68:76:c4:
8e:fa:90:71:c0:12:94:fb:53:66:22:4d:d3:1a:72:
cb:9b:83:57:99:2a:4f:bb:04:03:cf:28:af:9e:64:
e0:99:d2:4e:0f:04:9c:68:92:cb:46:d5:ea:e8:ef:
bc:3f:18:d2:33:17:df:b3:c3:50:0d:87:a1:09:94:
8e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:24:87:DF:33:F9:B7:93:FD:3C:59:B7:4D:40:C8:57:37:90:C2:BC
X509v3 Authority Key Identifier:
keyid:46:8B:D2:97:E8:28:DA:5E:A1:2C:0D:F6:CD:74:26:B7:83:07:46:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RovSl-go2l6hLA32zXQmt4MHRos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9792b0-c9c4-4848-b713-83d09cefbe88/1/RovSl-go2l6hLA32zXQmt4MHRos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:62:45:3f:6a:4f:58:55:fe:0f:09:34:78:5d:b2:5e:2b:47:
df:1f:d6:d3:75:09:7f:3b:60:a1:23:4a:25:e6:e8:ca:df:5a:
d2:a7:e5:0e:cf:59:87:9c:5e:f1:7e:18:e8:66:4c:73:34:66:
e4:34:27:c0:ad:c3:6b:f0:a9:77:36:65:87:88:79:d5:e5:a2:
05:7f:bc:2b:67:da:08:68:99:73:0d:4e:77:73:43:9d:dd:74:
19:da:74:76:1b:a5:ac:05:77:22:b1:a3:42:15:08:0a:e8:4c:
5d:0d:16:84:19:48:6c:bb:bb:34:fc:76:bf:1e:a4:82:d1:b5:
94:6b:e2:43:38:00:63:4c:10:9d:02:e3:4d:31:a6:f8:c7:2e:
d0:67:93:7b:78:7e:7e:5a:74:d3:6e:59:3d:49:c8:5b:37:4c:
3b:fc:11:05:55:87:4c:00:08:eb:54:e5:ad:4b:a6:e2:1e:ae:
84:f5:bb:f0:d7:9f:95:0f:ff:7e:ac:f9:ed:e4:26:03:85:ef:
27:8b:a1:85:ad:44:8c:5a:32:e5:2b:44:3e:8d:f2:98:24:8a:
53:4a:cb:af:25:32:69:be:b6:34:79:36:9f:79:b4:77:e6:7f:
cb:98:b7:33:6b:99:b4:be:c8:40:db:5f:dd:9a:76:14:c6:e7:
01:fe:51:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:05:54 2025 by rpki-client