Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
File: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft (raw, json)
Hash identifier: WOa9F2rgyXjwwT3qN415XZR0Ww4wdvbBp1I/mBu3XPs=
Subject key identifier: 24:98:0B:15:A6:DD:DD:16:5F:E4:76:BA:D9:0A:5D:7D:C7:EF:C9:2A
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 0198D705919D96131A1CE3B798C26178398F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 13:02:02 +0000
Manifest this update: Sat 23 Aug 2025 13:02:02 +0000
Manifest next update: Sun 24 Aug 2025 13:02:02 +0000
Files and hashes: 1: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl (hash: yk327c1rsoCd0wJqsOH9OdrR5Q9kHB0AXHDM9IKh0E0=)
2: lmn9m784OLvYNEmoODCEhtK7M6Y.roa (hash: SMHhc3f9U107wkgd7T3SBk2Npa8W1MMzuYgHU/NZOn8=)
3: thiVarAMBeEnqBDpZfGbu3w4ANA.roa (hash: dysQvxWNncFFefbso/9XEjKk2c3ldxSqvGZG35iip3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:91:9d:96:13:1a:1c:e3:b7:98:c2:61:78:39:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Aug 23 13:02:02 2025 GMT
Not After : Aug 24 13:02:02 2025 GMT
Subject: CN=24980b15a6dddd165fe476bad90a5d7dc7efc92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f9:a4:57:84:d0:ba:20:a9:2e:cb:97:c4:c3:
fb:82:33:b0:80:ff:81:0a:38:cc:67:b6:20:e7:fb:
43:25:f5:bd:1e:34:af:70:b2:0f:2c:d6:31:e1:ad:
8b:7f:e4:5c:e0:bf:3f:0a:1b:cc:f6:00:a7:68:13:
7c:9f:48:c9:81:29:38:e7:47:0c:51:79:dc:39:63:
99:9a:3c:dc:92:fb:f0:9c:a3:56:55:ab:01:b6:ca:
9d:4f:09:22:05:05:10:0c:47:6c:6d:a5:3c:17:7d:
70:ff:89:bf:6b:0d:49:f5:9d:ac:19:51:0b:b9:a0:
32:d6:8a:83:4b:93:f7:81:11:24:d2:cd:78:b4:a2:
c0:3c:5a:48:a8:8a:28:ac:a2:53:94:5f:9f:5c:6d:
6c:56:2b:4e:33:43:e4:aa:a4:94:9e:e6:dc:f4:1e:
2d:ab:fb:1d:e8:45:7c:e7:e3:e7:7c:c4:b0:89:18:
d3:7a:29:60:37:2e:77:29:45:74:06:8f:02:fc:d1:
49:c7:cf:9e:27:d8:0a:78:62:6f:ac:5f:d5:a5:f9:
a2:ba:bb:78:9a:79:0c:aa:fa:81:39:93:19:e4:00:
66:d2:90:82:5f:85:33:a7:51:1f:6e:ba:de:53:e2:
ba:ce:5c:1f:f7:93:7f:64:59:d4:72:c3:f2:02:e1:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:98:0B:15:A6:DD:DD:16:5F:E4:76:BA:D9:0A:5D:7D:C7:EF:C9:2A
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a0:15:60:a0:81:e5:f2:9b:9b:99:dd:0e:75:38:51:7f:ac:
42:97:18:cd:0e:0a:cb:18:c5:36:dd:7b:14:0e:96:e2:ea:e9:
45:3a:78:ae:78:43:5f:20:48:6f:a1:11:77:49:a1:58:0a:91:
34:d5:63:19:10:2e:0f:8c:ce:48:39:f7:e4:8a:02:d8:73:52:
bb:6e:71:58:20:9c:9b:94:ec:97:7b:f3:d6:85:3a:76:74:05:
91:fa:a2:26:b8:ae:ef:1c:f8:c6:92:2f:9f:7f:34:e2:74:e6:
c3:e8:41:71:e5:d5:9e:6d:1b:c0:11:b5:5d:67:59:08:61:83:
14:c9:e6:22:03:e7:df:d5:40:87:9a:e9:cf:8e:ae:1e:0e:e4:
75:ec:0a:ff:c5:7e:66:4f:7b:65:0d:9e:ca:03:c0:49:c6:c6:
b0:95:a0:19:cc:69:78:cb:bf:ec:f4:58:90:fa:f4:ed:37:6f:
0f:e3:76:bd:82:69:0e:79:c9:6a:76:56:2e:a0:4b:2b:f6:cd:
58:03:7f:9d:be:e9:fd:ea:db:3f:2d:b5:93:9a:fe:40:ae:ae:
f4:27:27:62:ef:55:1d:76:d3:8d:f9:03:1b:b8:2e:c6:aa:3e:
60:d1:69:bc:13:59:23:7a:c3:33:99:fe:f2:f0:7c:ae:8a:ea:
c2:51:6a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:54:47 2025 by rpki-client