Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: 236l5fi2GZFd/atjFCaFoliAD4LB0UUMHchthGe3wu4=
Subject key identifier: F5:46:79:39:90:E4:E7:19:6C:61:32:2D:39:A1:9F:6E:D5:F4:32:38
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 0198D84F54C98291E82DA92172FCDF5B28C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0D2B
Signing time: Sat 23 Aug 2025 19:02:14 +0000
Manifest this update: Sat 23 Aug 2025 19:02:14 +0000
Manifest next update: Sun 24 Aug 2025 19:02:14 +0000
Files and hashes: 1: 5kFz87V3cREdddc3AsaZImesrc4.roa (hash: GMf/VeYSaAQLAvigW84goiaYuSw8QRXcx94y9RzK0U8=)
2: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: 3VNhMttI5FLbOLCYOhEym/FO7l9tqvMrHfyim2HVoRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:54:c9:82:91:e8:2d:a9:21:72:fc:df:5b:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Aug 23 19:02:14 2025 GMT
Not After : Aug 24 19:02:14 2025 GMT
Subject: CN=f546793990e4e7196c61322d39a19f6ed5f43238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:06:7c:34:8a:2c:89:50:27:78:7e:45:36:71:
61:81:8d:18:0b:d5:66:57:20:42:22:9a:2d:36:86:
a5:4c:8e:60:73:e2:fe:73:d9:bf:39:1c:25:f3:b0:
db:15:48:ff:01:54:3a:40:d0:d9:65:fc:bd:79:25:
04:10:80:b7:63:c9:05:2b:23:b3:69:13:83:bc:0c:
ca:9b:c6:7e:7f:9f:80:c1:ca:ba:ce:88:6b:62:5b:
79:6a:6a:52:e5:9f:e3:74:43:55:88:e6:ea:b0:66:
f0:18:52:40:bd:36:de:62:ba:a0:f8:33:27:e1:bb:
b3:ed:e3:e2:ec:ce:ed:71:94:cb:6c:21:f8:64:fb:
f0:8d:a9:47:7e:38:3d:c8:87:ef:46:1c:cc:cb:30:
4b:4b:45:ce:77:10:d3:da:69:32:18:47:38:29:ee:
e0:09:ee:ee:aa:37:cd:b6:27:de:8e:6d:7a:b9:05:
0f:3b:7b:be:5a:09:59:ee:f8:55:24:40:f0:a4:b1:
1f:19:d9:a7:49:76:fe:b7:93:3f:fb:20:ab:68:38:
59:c1:f5:78:b1:a3:13:a3:21:1f:3c:d5:f0:3c:6a:
6c:f6:06:9a:6e:1f:ed:cc:53:99:2b:19:5b:d9:f6:
bc:03:4f:e2:99:7a:4e:a7:ea:f6:69:37:f4:11:92:
8b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:46:79:39:90:E4:E7:19:6C:61:32:2D:39:A1:9F:6E:D5:F4:32:38
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:60:6f:6f:2b:f2:ad:9a:a4:3c:56:5f:a9:fc:48:d4:67:a3:
ad:9d:76:db:f7:da:b1:2d:04:a4:0f:b7:98:5d:4d:2f:cb:a1:
4d:df:c7:1d:94:77:0f:8d:e8:f5:71:68:79:c4:fa:2f:4b:1a:
84:db:dd:39:ef:38:e5:c8:c9:bb:77:32:71:29:75:4c:55:a7:
0c:33:67:82:0f:09:cf:9a:af:be:e8:41:ee:bc:13:5b:ff:3a:
4b:a1:7e:c4:08:b2:b9:56:3a:55:a2:6e:10:17:0c:6e:10:b4:
92:40:02:17:ae:fc:d2:41:fa:d5:ff:4d:f6:37:5a:7b:bf:e7:
cb:d6:27:c7:07:67:66:69:44:72:36:e4:db:1c:b8:4c:28:b1:
bd:09:9d:56:22:f4:09:83:e7:ef:34:97:be:9b:1d:a2:61:d5:
02:b6:7f:af:b4:a3:3d:8c:59:26:1c:de:8f:5f:85:a8:e2:c3:
b6:06:23:d6:ef:47:b8:5a:a7:4d:d2:6f:8d:13:de:1f:f2:c4:
b0:67:42:06:57:12:80:75:05:0a:e6:2c:78:ed:3d:0c:7f:46:
a8:69:80:fd:29:4e:5c:28:ff:9b:a9:1c:91:23:8d:b1:2b:3a:
0a:fe:68:b8:24:05:01:25:0c:91:a9:85:16:57:8e:ba:3b:10:
82:9f:9f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:23:17 2025 by rpki-client