Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: riYgVsGxCjciJo2Q9as5n8UKQrKvuwbwN4v4TTbC9EU=
Subject key identifier: 66:DF:6E:52:8C:01:BA:17:06:F1:A6:87:01:97:46:D0:C9:5B:05:6E
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 0199FFC7BF939DA44194C7F57A9774885E64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 1676
Signing time: Mon 20 Oct 2025 04:01:44 +0000
Manifest this update: Mon 20 Oct 2025 04:01:44 +0000
Manifest next update: Tue 21 Oct 2025 04:01:44 +0000
Files and hashes: 1: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: bZIlgRkY6XAh/aeLDugJ8V6yMUpvlYQKCT8uQcLRSzM=)
2: dh_JgCZHkTokMGRr7H9M3cKhoRc.roa (hash: 4Kx8qkmvFu9/ph3LEnJvdO/hVDQr2VoTVCm1ptdvoEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:bf:93:9d:a4:41:94:c7:f5:7a:97:74:88:5e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Oct 20 04:01:44 2025 GMT
Not After : Oct 21 04:01:44 2025 GMT
Subject: CN=66df6e528c01ba1706f1a687019746d0c95b056e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:51:0b:5d:96:04:b5:9a:d1:7a:ad:88:ed:
32:2d:7a:ad:88:9d:a2:9a:87:71:78:d5:ce:4e:a2:
d1:ed:d5:8e:fe:b2:ac:ed:5b:d9:6a:5b:4f:d5:7a:
a3:c9:27:d2:70:02:63:2b:8d:2e:19:08:f9:6f:e3:
0d:88:c5:fd:72:9f:ce:93:11:bf:46:42:6d:12:60:
62:6d:7d:8f:a1:67:25:42:aa:0e:50:0e:c3:cc:f4:
dc:d7:00:de:29:61:ad:9b:c3:51:9b:68:10:a7:60:
8e:5e:08:a2:22:66:1a:dd:47:c7:65:71:b8:23:06:
af:33:be:cb:ea:d7:d9:83:b8:35:2c:55:cd:3b:d3:
67:d2:c0:cb:e0:a4:23:b5:10:6b:78:dc:3f:c5:b6:
ec:c3:dd:12:0a:f2:f4:ea:f8:5f:cf:6a:d2:57:37:
6e:df:47:bf:fd:67:3a:09:a9:78:07:1a:f5:f1:8b:
cc:23:39:6b:ef:22:8d:56:a5:2f:4c:d9:14:c6:8e:
14:2b:00:b2:39:ea:ec:e1:e2:45:42:7f:a9:8f:63:
36:1e:1d:ff:14:55:cf:96:0d:c3:7d:19:d6:c5:9c:
6c:9a:62:55:80:36:ad:f4:54:d1:fb:06:d0:55:c1:
a7:3c:37:77:ed:d1:d2:f8:2d:91:a4:84:63:ed:c2:
c1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DF:6E:52:8C:01:BA:17:06:F1:A6:87:01:97:46:D0:C9:5B:05:6E
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9b:88:ed:14:8b:29:82:52:35:79:d7:8e:92:2d:c1:af:39:
04:8c:2f:85:f5:cd:08:26:9e:01:01:17:b3:5e:af:40:f3:9d:
60:32:29:e3:99:c0:39:8f:e6:1e:b3:44:ec:22:cf:91:12:08:
72:7a:a9:7f:f0:e6:5f:b0:04:93:51:ef:36:6d:07:05:12:19:
49:5f:5a:9c:c9:94:2a:82:1e:60:63:d6:4a:0d:65:fe:c5:d6:
05:db:88:ee:6e:b0:bc:94:ec:aa:3b:2c:a1:3e:e2:7c:73:fc:
0b:c1:7a:ba:8c:6c:df:61:8e:59:11:17:67:ff:98:2c:e5:cb:
f1:e7:87:76:04:eb:55:d4:6d:a0:d8:34:10:5e:c2:fd:ca:41:
fa:09:3a:7b:ce:99:bf:76:05:7c:6e:2c:d7:8c:cc:91:d7:19:
ea:c9:3c:b1:c0:a7:87:72:45:35:2f:1b:7f:b3:25:3a:1c:f1:
de:ba:ce:0a:9f:1b:dd:b9:f6:b4:63:9d:0d:af:07:19:b7:bf:
01:e6:72:59:9f:12:d3:4a:d5:a1:bc:57:bd:d4:28:4d:7d:81:
3f:3a:97:b9:85:0c:fc:59:8a:18:b8:1c:2d:6b:c8:02:5c:75:
54:db:47:03:3c:b0:9f:c3:97:8e:64:01:cd:a7:a5:88:19:60:
c9:4e:21:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:38 2025 by rpki-client