Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
File: CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft (raw, json)
Hash identifier: U0Lur2fd2FatfoPvEWQCf9EqJUiQ0wXscbwpHn+zr2s=
Subject key identifier: DF:D5:5F:7E:30:B8:27:1C:67:C3:92:48:45:A7:26:68:2A:F1:FD:83
Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
Certificate issuer: /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Certificate serial: 0197B5C4CA1F67D3781D6083E6F78E1CA19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 09:01:02 +0000
Manifest this update: Sat 28 Jun 2025 09:01:02 +0000
Manifest next update: Sun 29 Jun 2025 09:01:02 +0000
Files and hashes: 1: CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl (hash: qX6aB+TYSHYZJqoN8mgCL2DYHL6Cew+qP6/8Q/n1QRg=)
2: eEiaQt6Ze9WxjrZL-d6aNqKJOCY.roa (hash: uCPWdRUrjQcc9uIJEuG8eyiVfoHC/vX0+wXoSm20VqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:ca:1f:67:d3:78:1d:60:83:e6:f7:8e:1c:a1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Validity
Not Before: Jun 28 09:01:02 2025 GMT
Not After : Jun 29 09:01:02 2025 GMT
Subject: CN=dfd55f7e30b8271c67c3924845a726682af1fd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:08:de:af:5d:c0:9a:c7:dd:93:c5:94:b9:a2:
f5:a2:42:10:46:ff:fd:80:f4:a8:55:9d:a5:1f:39:
38:fc:cc:11:d2:b3:2c:40:6e:40:29:e0:0c:bb:f3:
59:ba:98:89:43:8a:72:35:76:8c:91:dd:ae:17:29:
69:3a:31:66:78:cf:aa:a6:54:7f:bd:95:29:e2:dc:
7a:b6:56:6a:8e:77:26:a4:ba:a7:69:e3:53:fd:c9:
36:30:b1:11:8e:79:74:73:3b:24:f4:03:4d:4a:8c:
01:1b:78:5f:5f:60:79:af:a3:36:9b:b2:c1:d9:0a:
6d:f3:c9:36:52:b4:fb:41:b3:bc:01:77:53:04:22:
cd:5e:40:21:72:40:6a:45:50:07:68:96:fa:48:ba:
62:c1:58:19:0a:2c:ab:cf:1c:58:d2:3d:e8:df:f8:
48:fa:1e:63:70:c0:79:84:05:60:23:10:9a:54:bf:
59:5c:d9:3b:20:7d:cf:5f:89:e6:60:2b:29:58:06:
8f:0f:d7:f6:48:f0:92:c0:64:c3:a8:be:2e:8e:19:
6d:34:24:9b:8e:8c:a3:cf:7f:f1:99:74:1f:c1:62:
27:0a:2e:eb:d0:8f:9a:a0:4a:53:e5:b5:5e:e3:52:
a5:22:b8:f5:54:18:60:a3:32:66:26:fa:b1:91:a1:
ef:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D5:5F:7E:30:B8:27:1C:67:C3:92:48:45:A7:26:68:2A:F1:FD:83
X509v3 Authority Key Identifier:
keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:59:06:b9:ff:63:98:35:9a:d5:9a:06:9b:7b:c1:e8:a5:b1:
18:b9:a4:b2:82:30:3c:70:bb:43:7d:76:c1:ca:fb:e0:10:64:
38:4d:66:8c:b2:79:03:24:9b:b2:5e:f7:86:42:81:d4:2d:cc:
96:2b:95:c1:04:07:98:b0:4e:88:94:7c:1c:4d:6b:a7:60:9d:
3f:2a:a4:a4:2a:a9:06:40:88:b4:0f:8c:d1:eb:0a:6c:93:00:
9e:c4:b7:60:14:fa:a6:f8:02:81:3d:c4:bd:0e:42:ff:87:bf:
46:64:db:e2:e2:58:f9:5f:6f:44:ea:e2:af:37:16:f5:33:e1:
df:95:79:d1:87:22:70:25:33:7a:f1:e9:96:d6:c6:ca:29:ec:
f9:a9:ea:14:dd:68:b5:a9:3a:70:0a:a8:21:3f:29:32:f7:68:
de:8d:33:32:63:ba:61:aa:d4:2d:a5:4b:00:74:81:01:5b:46:
15:7e:b9:bc:43:a3:9f:b8:67:3b:c2:21:de:aa:3c:37:81:a9:
0a:6c:70:d6:41:a7:11:bf:ef:29:f0:bb:94:bf:63:da:2f:bb:
5c:00:cf:02:06:d4:2f:26:2b:38:1c:c9:4d:0f:ed:a8:87:c2:
a5:e8:e5:71:1f:1b:e1:bd:b9:44:05:5e:37:2b:52:47:cd:7a:
47:7a:4c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:25 2025 by rpki-client