Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: KEJf7A33yvmvlkJPAEWAfuXLpPHxGJunG9vuAKLvmx0=
Subject key identifier: AF:9E:60:80:97:A5:95:52:2B:6A:3C:4B:F4:97:BA:9F:91:AB:D3:35
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 0199FDD967EB364378FE14E92762B7358850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 19:01:47 +0000
Manifest this update: Sun 19 Oct 2025 19:01:47 +0000
Manifest next update: Mon 20 Oct 2025 19:01:47 +0000
Files and hashes: 1: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: mobyTXO5bviEhz5ZQbK4mvnUJcBat/lVHUkv6F9LqiY=)
2: dh_JgCZHkTokMGRr7H9M3cKhoRc.roa (hash: 4Kx8qkmvFu9/ph3LEnJvdO/hVDQr2VoTVCm1ptdvoEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:67:eb:36:43:78:fe:14:e9:27:62:b7:35:88:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Oct 19 19:01:47 2025 GMT
Not After : Oct 20 19:01:47 2025 GMT
Subject: CN=af9e608097a595522b6a3c4bf497ba9f91abd335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:6b:60:14:e1:a2:16:dd:99:ff:fb:b1:6f:
4a:35:43:00:68:de:fa:86:99:ac:b7:db:e8:b9:6a:
e9:1a:3d:1c:75:9e:1b:fb:74:e1:ce:16:6c:b2:6a:
28:a2:bb:c0:f2:b0:ce:df:37:9e:a7:03:ec:b8:68:
e7:3f:d5:dc:18:48:d8:22:df:93:0f:86:32:e8:5f:
b5:c0:eb:5b:ee:2d:ed:38:de:3c:28:c9:cd:61:a1:
8e:02:c6:8d:40:10:05:1f:37:d0:82:1c:9f:17:7f:
05:9b:70:ad:55:b2:02:a6:30:08:1b:a1:60:e9:11:
02:0c:6e:e6:25:59:5d:55:e4:06:d3:14:ca:34:ba:
e7:18:c9:8c:e6:4d:c1:65:e3:ef:2f:6f:f4:81:68:
a8:9b:2c:16:4a:d5:35:0a:e8:6a:41:03:9d:3d:6b:
96:4a:f8:e2:d2:35:84:7e:b5:c0:31:e6:ab:8c:07:
2d:7d:3d:cf:3d:eb:0a:ef:20:9b:f7:67:9c:3c:d6:
b8:99:dc:49:91:7d:62:99:f1:f5:27:a6:27:3d:71:
94:bc:0c:43:3c:67:c8:30:b6:6f:59:cf:f9:e9:a3:
a7:46:45:26:af:a2:02:13:d9:91:66:88:f8:4f:db:
81:c5:b4:2c:63:6b:6b:bb:48:a9:41:fd:df:95:51:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9E:60:80:97:A5:95:52:2B:6A:3C:4B:F4:97:BA:9F:91:AB:D3:35
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:9f:31:46:cb:52:9c:97:98:77:fd:0e:8c:4b:7d:a6:f3:93:
aa:7a:75:75:33:0c:8e:d8:02:1e:73:c8:b1:1b:3c:9f:1c:8e:
05:b4:da:4f:17:15:ca:e9:25:90:c7:0b:fd:f0:2b:e7:9a:8e:
6a:4e:ff:8f:c2:4e:5f:d8:41:6a:e2:58:1a:d9:4f:5c:19:66:
55:cb:a6:27:f7:1d:b7:46:9b:4f:e6:25:f3:8a:e6:52:5d:5d:
be:5a:a9:a6:e0:04:f8:83:bd:7c:d4:63:ef:c1:f5:87:e9:e0:
72:03:1a:04:cf:78:47:c7:dc:23:c5:66:bb:86:19:75:55:a6:
de:83:f3:9d:20:29:a0:be:ab:30:de:8d:5b:d5:32:86:8d:c2:
fd:6d:3c:b6:9c:1c:93:4c:dc:86:79:ba:73:67:87:26:bb:a8:
48:11:b0:a4:e6:75:55:ee:c2:f1:44:fb:2e:5b:7a:7c:b6:a0:
e3:42:fc:3e:74:b9:a8:ff:03:9c:da:dd:85:28:33:9a:cb:2a:
70:51:70:46:76:c2:23:37:d9:2e:f5:99:00:39:9a:80:8e:69:
39:1e:a5:7f:f2:cc:70:1c:b7:6a:cd:0f:3b:35:af:9c:7f:1e:
51:4f:c0:58:d5:29:54:3a:6a:cf:48:2a:a0:99:02:58:0e:bf:
7d:d5:0e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:57 2025 by rpki-client