Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
File: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft (raw, json)
Hash identifier: G/ZL5AR3SL4qt2ME1Qvh+l0XJ29+oa/lzHxkLiBvLbs=
Subject key identifier: 04:A8:E5:23:38:D9:A9:F3:4D:88:54:94:EC:05:19:40:AB:05:3D:AF
Authority key identifier: 44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
Certificate issuer: /CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Certificate serial: 019873E35C55DED7DA87365198E6B70B2303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
Manifest number: 03D0
Signing time: Mon 04 Aug 2025 07:02:16 +0000
Manifest this update: Mon 04 Aug 2025 07:02:16 +0000
Manifest next update: Tue 05 Aug 2025 07:02:16 +0000
Files and hashes: 1: RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl (hash: KyLu7f321EJzi/IjkaFm9iBFtSV2rh40bGYLeQ3iQWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:5c:55:de:d7:da:87:36:51:98:e6:b7:0b:23:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ed8b8960e87aa66935ad6683bc15f1e47993b6
Validity
Not Before: Aug 4 07:02:16 2025 GMT
Not After : Aug 5 07:02:16 2025 GMT
Subject: CN=04a8e52338d9a9f34d885494ec051940ab053daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:62:72:d1:dc:15:cc:6e:fb:41:a9:c2:d2:
90:f4:3b:0a:b8:09:66:35:72:a9:cd:93:26:14:a7:
3c:54:70:7d:bb:b1:57:9a:26:a2:0c:f4:43:72:a9:
6e:d1:eb:0f:ba:a9:0b:b3:6a:f6:11:9d:04:01:30:
25:e0:b6:cc:9d:9c:5a:d0:3f:eb:51:81:82:df:42:
e4:9a:5b:43:e5:d6:97:b8:80:9a:e4:27:a2:74:08:
29:2d:45:7f:95:61:4f:6a:d6:5d:e7:b5:9d:dd:b8:
eb:05:a9:e4:40:96:de:29:03:41:f2:eb:55:da:b1:
12:63:1f:ef:d7:41:4e:64:3a:a5:56:84:26:f3:19:
bd:a0:e9:e0:cf:5e:02:0b:2f:63:37:ce:ea:67:2d:
ad:d0:de:88:85:97:b9:54:6c:f8:cf:eb:9b:a1:ae:
09:75:3a:17:ca:16:24:26:b3:44:4b:6b:08:dd:23:
c9:f7:ef:5a:a7:d5:d3:8b:9d:66:cd:75:6d:7d:26:
52:4d:20:d1:0c:b6:98:16:82:95:4d:a0:13:09:ef:
72:96:b9:96:eb:d3:26:1f:f0:81:9f:9c:df:d6:54:
89:94:e3:86:2a:f4:90:f0:d9:71:ab:26:64:e4:88:
3d:33:48:91:1d:3b:ae:43:a1:05:7b:0e:a6:2b:ad:
70:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A8:E5:23:38:D9:A9:F3:4D:88:54:94:EC:05:19:40:AB:05:3D:AF
X509v3 Authority Key Identifier:
keyid:44:ED:8B:89:60:E8:7A:A6:69:35:AD:66:83:BC:15:F1:E4:79:93:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/8f9db5-e9ad-464f-aba9-bd1ba4c19f76/1/RO2LiWDoeqZpNa1mg7wV8eR5k7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:dc:0c:a9:9a:2a:2f:3c:23:69:a3:c8:c0:c6:1a:68:d4:8c:
82:78:61:c5:08:9e:16:49:e8:4d:75:32:f9:79:0b:b0:ad:48:
b4:fb:30:7f:76:1c:a4:e2:f9:46:f1:32:af:ca:e8:90:84:4f:
a7:35:4a:45:71:c7:e2:a2:a0:9b:aa:18:97:dc:0c:b9:f6:9e:
ee:d2:91:3b:12:3f:7a:1c:76:48:17:58:70:71:df:77:76:9e:
b9:38:be:8e:a8:b8:cc:f5:f0:be:41:cd:e4:65:fb:2e:25:90:
2e:4b:b6:ee:27:4d:11:96:81:eb:f9:d4:c6:45:93:02:45:d2:
cf:a5:f4:fb:4e:4f:52:89:c9:57:b8:5d:10:41:1d:6e:e0:6b:
35:c6:da:8f:5b:d3:97:53:a9:a1:e9:65:0c:6a:88:94:0d:7a:
ea:b8:13:75:35:88:35:d2:43:71:2d:2e:81:d2:ef:39:34:d0:
23:fb:30:bd:40:a2:de:86:48:f1:4f:6b:4d:8c:7a:f4:cd:29:
22:00:25:8f:d7:e3:84:97:c0:5d:6a:c2:a3:1c:a0:a5:6b:63:
0b:a2:6c:7a:54:44:e5:fa:9d:5c:32:e2:cb:b1:2f:4e:04:75:
5c:5a:dc:30:d7:4d:ca:fa:87:22:00:a9:b9:9e:07:15:22:6d:
03:48:f4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:07 2025 by rpki-client