Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
File: CVZUSY4cx7-M4J6uF6zffIg9W0k.mft (raw, json)
Hash identifier: dWWQTVtq98hMFzDBVO/mRDM/eCbqhLLeCJtodtFzLZ0=
Subject key identifier: 9B:49:C2:11:D6:C1:45:4E:0F:E8:5A:8C:87:0F:5D:E7:49:23:81:6C
Authority key identifier: 09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
Certificate issuer: /CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Certificate serial: 0198D660E48826AA9FFDB64C8263196470E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
Manifest number: 9D
Signing time: Sat 23 Aug 2025 10:02:10 +0000
Manifest this update: Sat 23 Aug 2025 10:02:10 +0000
Manifest next update: Sun 24 Aug 2025 10:02:10 +0000
Files and hashes: 1: Bk_-tAtBQBDMWsFeWLzWEKqm6r8.roa (hash: WNJKvTpD/DoB8twbES4bI7LJ/l4C3v8zVuuorOHSnjs=)
2: CVZUSY4cx7-M4J6uF6zffIg9W0k.crl (hash: LJb9h2dXWftfVPyWCa0k6dVMPO5zfZXxbM+QMvgsvEs=)
3: QKYY4pu514sUmDk5ewMC9BudeYM.roa (hash: Xw/leKA1IBGEhTPQThy/3jPwmzjFadxqafY3h81jZnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:e4:88:26:aa:9f:fd:b6:4c:82:63:19:64:70:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Validity
Not Before: Aug 23 10:02:10 2025 GMT
Not After : Aug 24 10:02:10 2025 GMT
Subject: CN=9b49c211d6c1454e0fe85a8c870f5de74923816c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:a9:13:8d:1e:8c:ca:d5:fa:e6:09:8c:9f:
df:29:55:38:8e:2c:81:06:9f:37:5f:ea:bb:ab:f6:
9b:d2:52:b1:53:19:d4:45:f4:83:5a:84:37:e7:b3:
b3:90:18:b9:2d:27:43:18:27:1c:bf:8b:12:e5:7a:
08:0a:5a:84:81:b7:a8:ae:de:c3:90:de:cb:7c:f9:
fe:b8:85:6b:a7:97:e2:71:38:e6:39:21:ac:b6:d1:
77:d7:51:c8:17:b3:6a:20:7b:73:de:26:0b:43:ef:
15:c9:fb:ca:35:14:dd:5e:83:34:e0:a1:e1:98:ec:
ac:75:0a:5a:f0:c3:57:5f:af:58:0d:11:58:6d:d1:
c9:03:ce:35:c6:0f:a4:0a:f7:4f:4d:d0:25:b1:91:
b2:c4:4d:0c:61:14:f8:49:f8:4b:70:74:af:fd:e0:
92:94:b6:3c:26:36:89:5a:40:1f:88:b4:80:a9:a5:
55:02:52:3f:74:5a:17:ee:90:2c:be:0c:1d:65:58:
37:ff:34:39:30:12:a3:b1:75:75:7f:15:9b:4c:5a:
fc:c6:19:26:62:c2:50:8f:41:c4:7d:58:e9:bf:e3:
50:c1:97:2c:3f:54:52:6e:bb:24:46:c5:cc:eb:52:
ee:be:f4:e2:c2:ac:5b:62:2f:55:63:23:bf:54:39:
01:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:49:C2:11:D6:C1:45:4E:0F:E8:5A:8C:87:0F:5D:E7:49:23:81:6C
X509v3 Authority Key Identifier:
keyid:09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:19:7f:d4:77:d4:39:d3:4d:50:ed:b7:ad:7c:de:6d:60:13:
a3:76:89:dd:64:51:28:27:81:31:5c:5e:99:1e:21:fa:a0:24:
ee:07:39:ad:71:af:16:73:4d:45:ac:7d:11:f1:83:be:f7:f2:
3a:07:3f:03:a6:c5:8d:a2:ee:66:bd:89:ee:b8:54:d5:5f:c1:
93:06:8b:33:07:67:f5:0f:46:2e:30:69:44:9f:93:93:b1:64:
07:6d:a0:c0:7d:c7:8f:ac:57:76:bf:a4:65:ea:eb:5d:dc:c6:
b5:10:4b:f0:a8:c6:4d:a9:48:4a:01:8f:f8:45:95:4a:39:65:
52:b5:55:81:3f:3c:6f:5e:41:7c:66:70:d2:29:3e:a7:04:31:
72:a6:58:5c:f3:38:10:fd:16:ef:e2:55:9a:95:b4:bd:1c:f5:
00:24:13:a6:f1:16:f0:8a:f9:39:c7:a2:00:80:c5:1f:02:8b:
41:62:be:1b:67:c4:1d:07:64:8e:45:ef:b9:0a:f3:4f:e8:bf:
e3:d2:31:95:69:12:43:4b:38:62:42:b1:9b:86:d1:57:8e:5a:
31:3c:31:e7:07:0a:11:43:72:69:21:b6:16:f7:8a:95:d5:69:
7e:b7:95:d6:9d:a3:61:d0:4c:12:2f:2c:11:24:ba:5a:72:9f:
cd:a8:1e:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYOSIJqqf/bZMgmMZZHDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NTY1NDQ5OGUxY2M3YmY4Y2UwOWVhZTE3YWNkZjdjODgz
ZDViNDkwHhcNMjUwODIzMTAwMjEwWhcNMjUwODI0MTAwMjEwWjAzMTEwLwYDVQQD
Eyg5YjQ5YzIxMWQ2YzE0NTRlMGZlODVhOGM4NzBmNWRlNzQ5MjM4MTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2GpE40ejMrV+uYJjJ/fKVU4jiyB
Bp83X+q7q/ab0lKxUxnURfSDWoQ357OzkBi5LSdDGCccv4sS5XoIClqEgbeort7D
kN7LfPn+uIVrp5ficTjmOSGsttF311HIF7NqIHtz3iYLQ+8VyfvKNRTdXoM04KHh
mOysdQpa8MNXX69YDRFYbdHJA841xg+kCvdPTdAlsZGyxE0MYRT4SfhLcHSv/eCS
lLY8JjaJWkAfiLSAqaVVAlI/dFoX7pAsvgwdZVg3/zQ5MBKjsXV1fxWbTFr8xhkm
YsJQj0HEfVjpv+NQwZcsP1RSbrskRsXM61LuvvTiwqxbYi9VYyO/VDkB6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtJwhHWwUVOD+hajIcPXedJI4FsMB8GA1UdIwQY
MBaAFAlWVEmOHMe/jOCerhes33yIPVtJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZaVVNZNGN4Ny1NNEo2dUY2emZmSWc5VzBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMmRhYTQtMDg3NC00ZjNkLWJmMjIt
ZDFhZDU0ZDBjMDUzLzEvQ1ZaVVNZNGN4Ny1NNEo2dUY2emZmSWc5VzBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMmRhYTQtMDg3NC00ZjNkLWJmMjItZDFhZDU0ZDBjMDUz
LzEvQ1ZaVVNZNGN4Ny1NNEo2dUY2emZmSWc5VzBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABBl/1HfU
OdNNUO23rXzebWATo3aJ3WRRKCeBMVxemR4h+qAk7gc5rXGvFnNNRax9EfGDvvfy
Ogc/A6bFjaLuZr2J7rhU1V/BkwaLMwdn9Q9GLjBpRJ+Tk7FkB22gwH3Hj6xXdr+k
ZerrXdzGtRBL8KjGTalISgGP+EWVSjllUrVVgT88b15BfGZw0ik+pwQxcqZYXPM4
EP0W7+JVmpW0vRz1ACQTpvEW8Ir5OceiAIDFHwKLQWK+G2fEHQdkjkXvuQrzT+i/
49IxlWkSQ0s4YkKxm4bRV45aMTwx5wcKEUNyaSG2FveKldVpfreV1p2jYdBMEi8s
ESS6WnKfzageEg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:02 2025 by rpki-client