Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
File: CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft (raw, json)
Hash identifier: 2+qKRmMJWVgVSn5jPP5Qzbw9VrJll4gNZ3oFdav+M0A=
Subject key identifier: B4:C5:64:1A:22:CB:A7:41:D2:B2:53:82:AA:12:BE:29:9C:2D:2D:FB
Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
Certificate issuer: /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Certificate serial: 0199FCFD8210BE67367F15AF31A236AD0CD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl (hash: ymcUVQD7LIYhNcPbIUV9ivHJBkLdD3I5y2flkoFjWSs=)
2: eEiaQt6Ze9WxjrZL-d6aNqKJOCY.roa (hash: uCPWdRUrjQcc9uIJEuG8eyiVfoHC/vX0+wXoSm20VqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:82:10:be:67:36:7f:15:af:31:a2:36:ad:0c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=b4c5641a22cba741d2b25382aa12be299c2d2dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:a3:13:42:68:15:53:e7:43:c3:f5:6e:95:
eb:14:01:af:7d:96:c1:34:a8:eb:21:84:51:7d:9a:
3a:2b:b5:b2:d5:34:7b:47:5b:f8:cd:24:49:5b:bc:
40:d7:82:db:0d:5e:44:a8:46:cd:ca:d7:f5:ba:d8:
25:94:ab:aa:4d:32:a7:4f:3e:2f:b5:cd:db:13:a3:
5d:bb:85:1b:84:ff:b2:a4:9d:76:84:5a:70:8d:8b:
19:7d:66:b2:1d:b0:73:a5:02:08:49:f6:bb:e7:ad:
11:2d:de:34:eb:8e:b2:0a:55:90:62:f8:23:ad:66:
c3:13:4c:e5:0d:6d:f0:ed:de:31:42:d1:bb:a7:b2:
1f:68:ae:9e:16:0b:cf:7f:fc:dd:51:b7:0e:55:78:
9f:aa:79:cb:d7:2a:7c:02:1b:1f:53:64:66:f4:f7:
b3:ce:8b:e8:7d:a3:7e:c0:36:98:7d:2a:cb:cc:4a:
e6:fe:2a:e8:ad:02:99:1e:20:c5:a9:63:29:cc:24:
9c:ff:5e:91:4b:be:45:ca:bf:31:86:54:ca:f1:f0:
d7:46:fe:ae:c3:be:7d:f3:22:67:5a:a1:da:5a:a7:
1c:69:61:37:fa:d9:8b:b8:fb:61:a3:b3:af:4d:8b:
1d:4e:1a:f2:71:92:22:e4:c1:01:9a:37:3c:5f:6a:
9d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C5:64:1A:22:CB:A7:41:D2:B2:53:82:AA:12:BE:29:9C:2D:2D:FB
X509v3 Authority Key Identifier:
keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a3:0b:26:1c:26:60:59:b0:a6:fd:c1:98:19:cd:80:f7:42:
00:cc:5f:14:04:af:52:ea:ba:cb:1c:66:ee:b6:5e:0d:c5:75:
a2:37:8c:aa:eb:dd:03:24:d0:8a:de:b9:e0:f9:48:d1:e3:94:
cf:0a:bc:fc:e7:04:a5:2c:80:78:e5:66:06:05:2b:5c:3e:d0:
f4:b7:49:f8:b7:fb:da:7b:3c:d2:6f:e2:5a:ad:5b:d5:2a:37:
e7:41:26:12:18:44:0f:49:f5:08:2c:7c:76:be:a7:f6:0d:f0:
2a:15:ac:fa:2c:c8:85:ba:48:55:79:97:68:ee:63:db:26:db:
ad:af:4b:8c:67:9a:c9:38:9b:23:62:12:0a:db:00:ab:dd:9b:
93:e4:14:67:be:16:08:86:c4:5e:81:c2:67:81:88:55:c2:b3:
63:46:02:9b:03:18:05:39:88:35:8c:09:9b:53:74:09:2d:e8:
7b:41:75:90:2e:59:e8:d9:6b:5e:3e:71:04:6f:f8:6d:06:84:
43:1e:b5:68:c7:c4:89:5e:41:db:80:36:ae:13:29:09:03:e9:
2e:64:1f:59:40:08:7f:23:4f:ce:bb:f4:38:6a:26:dc:18:32:
fb:9b:63:35:0d:db:bb:1e:0a:37:e3:ef:84:26:b6:eb:7f:3f:
1d:42:6d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:09 2025 by rpki-client