Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: rJejhRkDrav6Mth31FCORAzUaB7hs5q7CmOqo/vfCKk=
Subject key identifier: 52:1F:D0:77:69:79:A5:87:4B:C1:96:E8:51:4C:A9:B0:80:F9:1D:7A
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 0197B6A1CF632C58295D0583D381663AFAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0C95
Signing time: Sat 28 Jun 2025 13:02:27 +0000
Manifest this update: Sat 28 Jun 2025 13:02:27 +0000
Manifest next update: Sun 29 Jun 2025 13:02:27 +0000
Files and hashes: 1: 5kFz87V3cREdddc3AsaZImesrc4.roa (hash: GMf/VeYSaAQLAvigW84goiaYuSw8QRXcx94y9RzK0U8=)
2: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: lomRyYusX0IDaZNeAP70NGqYilxgRYVQhwQI8i+39qA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:cf:63:2c:58:29:5d:05:83:d3:81:66:3a:fa:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Jun 28 13:02:27 2025 GMT
Not After : Jun 29 13:02:27 2025 GMT
Subject: CN=521fd0776979a5874bc196e8514ca9b080f91d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:cc:a8:eb:c7:c8:0f:44:63:48:60:99:db:
91:5d:90:9b:a1:4c:e9:aa:03:92:96:84:54:2a:78:
f3:fe:7d:0e:81:49:3c:7d:24:7a:5e:db:8d:9c:e5:
7c:ba:98:7c:ea:9f:55:a9:ca:18:d3:d7:65:19:13:
3a:1f:3c:ec:18:f6:11:41:0d:a7:f7:ee:31:29:7a:
d0:76:14:b1:be:dd:bd:66:3a:31:fd:58:7d:a2:4c:
85:61:d8:54:e0:51:a3:c9:fe:54:00:b5:4f:83:87:
3c:70:7f:49:57:0b:91:eb:55:7c:4f:1d:fa:d5:ba:
09:ad:dc:9e:9a:dc:2e:62:d6:99:1a:08:5c:d5:d5:
81:6e:5d:46:65:42:4b:19:4a:de:aa:7a:25:8b:48:
11:d2:d5:1a:b4:bb:91:4e:06:c8:4d:0c:2f:43:cd:
c0:8c:14:15:0c:e7:f4:8b:35:77:cb:c2:1a:34:1f:
ac:e0:f8:30:a7:ce:96:04:b2:04:84:f2:35:75:ff:
65:bb:9a:72:fe:a9:01:13:6f:c7:9e:cf:9e:e2:34:
19:6a:ad:7f:c0:7a:7e:6c:d1:f3:32:3c:5e:3b:c5:
9e:9c:82:6b:b8:da:89:1c:5a:ee:00:bd:53:a5:8d:
2a:5f:9c:b9:1a:ee:4d:27:db:50:18:69:2b:01:0e:
c7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1F:D0:77:69:79:A5:87:4B:C1:96:E8:51:4C:A9:B0:80:F9:1D:7A
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a4:8b:cf:99:05:ef:59:b5:8e:1a:08:f3:36:59:82:65:fc:
9e:e8:35:1e:6e:41:a5:93:ef:59:35:d4:71:13:5f:7c:19:70:
ac:c2:d0:29:0b:a0:e4:e2:20:df:8c:af:cd:46:87:49:c5:85:
ae:25:8c:56:0c:fc:d9:6e:fb:d6:a1:ea:e3:3b:e1:9c:b8:fd:
ab:f6:bb:5d:90:66:f9:89:0d:61:21:7c:9f:bf:d5:0c:2f:9b:
12:82:45:2c:2c:6b:62:75:c4:e7:16:f7:68:28:93:b7:f8:f5:
87:77:b8:86:38:44:86:c8:9a:71:15:c7:0e:19:2c:4d:ee:fc:
fa:69:18:ae:cc:91:2a:de:8d:f4:8f:f6:58:34:de:4f:0f:f0:
f1:47:75:ab:09:ad:1e:df:a2:95:b8:30:b5:38:f5:7a:25:6e:
e0:07:ba:ba:b8:bd:be:24:93:6b:ea:d2:79:92:86:40:98:e3:
07:99:90:3d:13:30:2c:42:12:d0:24:7a:d2:09:b7:f6:f5:fc:
91:bf:c8:e1:fb:9f:d5:11:a7:1e:4b:b4:75:9e:96:67:6b:54:
77:34:92:03:b8:88:c4:3f:14:63:7f:a8:72:af:f2:7b:3a:24:
68:5a:c7:80:b1:75:d3:e6:12:38:7c:81:03:ba:59:93:80:b6:
ce:85:43:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oc9jLFgpXQWD04FmOvr6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NThiNTRiZmVlOTg5NmM0YWRhN2RjMThiM2I3Zjk3MTlk
YTA0NmIwHhcNMjUwNjI4MTMwMjI3WhcNMjUwNjI5MTMwMjI3WjAzMTEwLwYDVQQD
Eyg1MjFmZDA3NzY5NzlhNTg3NGJjMTk2ZTg1MTRjYTliMDgwZjkxZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNPMqOvHyA9EY0hgmduRXZCboUzp
qgOSloRUKnjz/n0OgUk8fSR6XtuNnOV8uph86p9VqcoY09dlGRM6HzzsGPYRQQ2n
9+4xKXrQdhSxvt29Zjox/Vh9okyFYdhU4FGjyf5UALVPg4c8cH9JVwuR61V8Tx36
1boJrdyemtwuYtaZGghc1dWBbl1GZUJLGUreqnoli0gR0tUatLuRTgbITQwvQ83A
jBQVDOf0izV3y8IaNB+s4Pgwp86WBLIEhPI1df9lu5py/qkBE2/Hns+e4jQZaq1/
wHp+bNHzMjxeO8WenIJruNqJHFruAL1TpY0qX5y5Gu5NJ9tQGGkrAQ7HbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIf0HdpeaWHS8GW6FFMqbCA+R16MB8GA1UdIwQY
MBaAFAlYtUv+6YlsStp9wYs7f5cZ2gRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEt
ZmY0YzcxODMwMjRmLzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hNjBmODYtOGI5NC00MTBhLWJmZDEtZmY0YzcxODMwMjRm
LzEvQ1ZpMVNfN3BpV3hLMm4zQml6dF9seG5hQkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaSLz5kF
71m1jhoI8zZZgmX8nug1Hm5BpZPvWTXUcRNffBlwrMLQKQug5OIg34yvzUaHScWF
riWMVgz82W771qHq4zvhnLj9q/a7XZBm+YkNYSF8n7/VDC+bEoJFLCxrYnXE5xb3
aCiTt/j1h3e4hjhEhsiacRXHDhksTe78+mkYrsyRKt6N9I/2WDTeTw/w8Ud1qwmt
Ht+ilbgwtTj1eiVu4Ae6uri9viSTa+rSeZKGQJjjB5mQPRMwLEIS0CR60gm39vX8
kb/I4fuf1RGnHku0dZ6WZ2tUdzSSA7iIxD8UY3+ocq/yezokaFrHgLF10+YSOHyB
A7pZk4C2zoVDgA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:38 2025 by rpki-client