Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
File: CVZUSY4cx7-M4J6uF6zffIg9W0k.mft (raw, json)
Hash identifier: QrrtdVm9jVGt+Jpk8lf5kokpzaiSXGB05WEJagR55ac=
Subject key identifier: 20:3F:05:84:6F:6E:E6:71:B6:91:C7:7D:93:3B:CC:94:B2:95:B1:6A
Authority key identifier: 09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
Certificate issuer: /CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Certificate serial: 0197B8907E1957C36CE7747451FD995E21CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
Manifest number: 09
Signing time: Sat 28 Jun 2025 22:02:46 +0000
Manifest this update: Sat 28 Jun 2025 22:02:46 +0000
Manifest next update: Sun 29 Jun 2025 22:02:46 +0000
Files and hashes: 1: Bk_-tAtBQBDMWsFeWLzWEKqm6r8.roa (hash: WNJKvTpD/DoB8twbES4bI7LJ/l4C3v8zVuuorOHSnjs=)
2: CVZUSY4cx7-M4J6uF6zffIg9W0k.crl (hash: jbo6kVJxQ75Owl1dxD6CEQyZBTMiIXjxGyyg6Vi0f30=)
3: QKYY4pu514sUmDk5ewMC9BudeYM.roa (hash: Xw/leKA1IBGEhTPQThy/3jPwmzjFadxqafY3h81jZnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:7e:19:57:c3:6c:e7:74:74:51:fd:99:5e:21:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Validity
Not Before: Jun 28 22:02:46 2025 GMT
Not After : Jun 29 22:02:46 2025 GMT
Subject: CN=203f05846f6ee671b691c77d933bcc94b295b16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1c:36:e8:df:83:eb:d7:04:69:62:b7:9c:11:
24:85:98:cf:a9:33:22:21:1e:f4:68:10:2e:dd:77:
29:9b:bd:14:ab:93:5c:dd:9c:dd:9d:51:40:19:1d:
84:d7:fd:5f:69:e9:c6:20:46:17:08:c4:19:b2:79:
b5:9f:df:3a:73:35:23:fe:b5:67:f5:44:6f:14:38:
2e:3e:74:27:2f:85:df:9c:c2:90:d9:24:a7:44:90:
22:f3:5f:6b:70:b5:f2:52:d9:45:8f:4d:8f:34:b0:
63:4a:c2:be:ce:1e:e2:6f:98:8d:8e:a5:98:f0:c5:
7d:7e:84:ab:7e:66:eb:51:2e:1f:5f:2a:4c:c5:9b:
b7:69:db:5f:97:a5:bf:f2:5d:d8:a4:f3:c5:d5:b3:
08:2c:19:66:0e:d0:bd:c9:c0:8b:4a:3c:6d:96:ff:
6d:2c:1f:7f:7a:e6:90:dd:7a:c6:e4:15:c5:05:d4:
08:3b:65:f1:86:e8:d1:9a:1c:fd:ae:2d:00:61:fb:
91:4f:76:9e:9a:58:ab:32:c7:63:d9:c0:bb:d8:a6:
17:5c:bf:27:1c:88:1a:d9:77:1a:ef:f3:51:4d:98:
fe:a0:e5:6c:f4:db:34:8f:42:f0:16:a9:02:63:ab:
6f:5b:85:d7:aa:7e:fe:34:70:85:02:d9:dc:9f:53:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3F:05:84:6F:6E:E6:71:B6:91:C7:7D:93:3B:CC:94:B2:95:B1:6A
X509v3 Authority Key Identifier:
keyid:09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b5:4e:82:b1:6a:a4:0f:0a:ec:25:90:eb:29:37:7c:9d:30:
30:a2:ad:b3:b9:15:f1:5d:e9:33:62:a5:87:82:99:ef:4d:f9:
2e:c7:94:7a:df:76:6a:dc:c4:2a:1c:1f:a5:fd:99:94:a3:79:
4d:51:b7:a3:91:32:0d:81:a5:ac:5f:07:11:66:1d:28:22:3e:
c6:83:6d:cd:05:46:84:88:e6:ae:d9:01:da:97:19:16:e9:a0:
8f:53:38:85:0a:15:b1:3a:eb:f1:ac:ed:1c:f3:05:bd:62:68:
78:12:a4:ee:ef:36:0c:07:45:99:9b:97:a2:4e:cf:c8:c6:91:
1e:fd:ab:92:20:b7:73:e6:ff:05:4c:39:93:51:37:5d:f2:53:
4a:5f:d0:64:2e:55:2b:67:50:66:1b:18:f6:24:d4:d1:76:2e:
03:27:f5:2c:fc:c5:fb:11:e5:b8:73:ed:9f:bf:5f:2e:0f:54:
82:c3:91:a3:a0:ec:1f:08:8a:a9:f4:ad:2f:c4:32:e5:91:d1:
e1:d8:4e:c3:ea:d9:da:a4:96:71:8c:ad:9f:39:43:01:50:7e:
0b:fb:d9:d4:86:95:a9:30:f4:13:f1:cc:26:cf:e4:11:73:34:
02:bf:b7:2b:70:c5:75:4d:26:41:3d:35:8d:9d:bd:c4:5c:7f:
9b:7a:4b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:18:39 2025 by rpki-client