
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
File: CVZUSY4cx7-M4J6uF6zffIg9W0k.mft (raw, json)
Hash identifier: 2d5MZftG0KQKCGI35YjjV2e/al+rJpe+L17Zprzfccs=
Subject key identifier: 2C:67:38:87:17:9E:C0:8D:57:F7:4F:DF:97:7B:3C:AA:50:BF:2E:C5
Authority key identifier: 09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
Certificate issuer: /CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Certificate serial: 019A059355D3810C3AFE48351A911BAEA006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
Manifest number: 013A
Signing time: Tue 21 Oct 2025 07:02:13 +0000
Manifest this update: Tue 21 Oct 2025 07:02:13 +0000
Manifest next update: Wed 22 Oct 2025 07:02:13 +0000
Files and hashes: 1: Bk_-tAtBQBDMWsFeWLzWEKqm6r8.roa (hash: WNJKvTpD/DoB8twbES4bI7LJ/l4C3v8zVuuorOHSnjs=)
2: CVZUSY4cx7-M4J6uF6zffIg9W0k.crl (hash: eS802ShjZVE32VNzFh3CiNdJ52uaiJFzrvKlhkuKU9s=)
3: QKYY4pu514sUmDk5ewMC9BudeYM.roa (hash: Xw/leKA1IBGEhTPQThy/3jPwmzjFadxqafY3h81jZnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:93:55:d3:81:0c:3a:fe:48:35:1a:91:1b:ae:a0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Validity
Not Before: Oct 21 07:02:13 2025 GMT
Not After : Oct 22 07:02:13 2025 GMT
Subject: CN=2c673887179ec08d57f74fdf977b3caa50bf2ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:7d:dc:36:3b:a5:91:07:3e:98:48:b7:0f:
6f:93:57:94:2f:ca:37:08:56:ef:07:1c:58:62:43:
e9:49:d8:69:88:dc:75:7f:69:29:9f:c6:80:93:8b:
44:59:e1:18:3d:5d:c4:8d:79:a1:a2:7a:cc:ec:eb:
e0:b1:f0:05:f2:7a:8f:a7:36:db:ef:ab:1b:a9:b7:
2c:e1:94:39:10:d3:bb:36:4e:8c:15:ec:9f:f6:46:
7c:0d:64:9a:2b:bc:35:d2:03:bc:ad:1c:48:ae:93:
3b:42:49:f4:0b:ad:78:6f:47:96:0a:d9:ea:c4:a3:
b7:36:a9:39:0f:cc:7e:94:b4:13:70:d8:d3:a9:e7:
a1:53:55:6c:49:3c:57:d9:25:83:12:bd:f5:f6:12:
03:b7:14:05:b9:c4:7b:9e:ae:b7:59:50:ea:2f:5a:
5f:f1:dd:bb:74:58:0f:88:19:c5:d0:b2:d0:dc:eb:
57:fd:15:b5:da:ff:0d:89:1f:c9:46:4f:e9:32:37:
d3:82:7a:d1:bd:71:f3:95:01:5c:1f:2e:6d:eb:34:
fd:82:69:53:3c:05:30:68:72:12:db:b5:02:55:a2:
b8:97:e8:84:8e:33:9d:8f:65:cc:3a:af:52:5d:3c:
70:6a:7a:63:a3:d4:bf:2a:b9:e3:af:8a:56:5f:fa:
03:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:67:38:87:17:9E:C0:8D:57:F7:4F:DF:97:7B:3C:AA:50:BF:2E:C5
X509v3 Authority Key Identifier:
keyid:09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1a:3e:b3:bd:f1:57:95:8c:5d:a9:cc:a3:0a:ac:ce:b0:82:
1b:fd:9f:ce:6d:5f:f6:a5:f5:81:39:d1:77:1d:96:4d:12:a0:
5f:16:ac:ec:be:07:6b:c6:1e:8a:09:c8:31:35:f1:06:7c:c4:
03:1e:20:0b:e4:9c:cb:c4:79:73:76:56:e6:df:23:dc:af:4e:
e0:5e:17:76:08:15:4c:db:88:31:fe:a6:36:0e:9f:ef:31:c8:
bd:ac:6b:06:b3:5a:fb:73:77:92:77:f6:b8:39:64:e9:ad:89:
85:5d:78:42:6f:8b:6d:53:4b:d2:56:9d:fb:27:61:0f:4c:81:
56:4a:5d:2d:d9:28:00:fb:08:81:0e:b8:9f:6d:ae:51:3e:9b:
34:a2:28:42:d7:27:03:d6:09:42:56:0c:64:26:18:da:fc:a7:
0d:76:76:8a:8f:2d:21:37:d4:e7:7e:b2:89:ae:bd:d2:bb:d7:
fd:fb:24:af:4a:3c:30:7d:35:b0:10:96:fe:2c:ac:b2:0c:dc:
d4:b7:be:2c:3c:54:c8:e9:22:b2:ab:9d:43:00:12:92:2e:37:
f1:f2:22:bc:c4:71:ed:4d:ce:ef:b6:2c:f5:de:94:5f:f7:5b:
47:81:cf:de:fb:5f:4d:05:80:86:14:59:8e:c1:32:10:4b:f8:
a6:ed:29:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:05:59 2025 by rpki-client