Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: OdVzo4JydpHuyZCPo0m06IvCR/2IFi6IaSzFHvSIaWs=
Subject key identifier: 30:A8:58:83:4E:DC:C9:CE:42:44:6A:9C:9F:6D:04:7A:03:B9:F5:F6
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 0197B6A2475629A77FECB633EB8236BF9EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 13:02:57 +0000
Manifest this update: Sat 28 Jun 2025 13:02:57 +0000
Manifest next update: Sun 29 Jun 2025 13:02:57 +0000
Files and hashes: 1: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: JHkvQ2st+nzmKLumxroty/hC7JG6CRA4omAjypFnKzE=)
2: dh_JgCZHkTokMGRr7H9M3cKhoRc.roa (hash: 4Kx8qkmvFu9/ph3LEnJvdO/hVDQr2VoTVCm1ptdvoEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:47:56:29:a7:7f:ec:b6:33:eb:82:36:bf:9e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Jun 28 13:02:57 2025 GMT
Not After : Jun 29 13:02:57 2025 GMT
Subject: CN=30a858834edcc9ce42446a9c9f6d047a03b9f5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:0a:00:2c:a0:73:51:63:cd:57:24:3f:b8:
3c:c2:c4:54:b5:09:4a:d1:9f:02:51:10:fa:68:54:
2e:75:a5:37:db:46:8f:65:dc:15:55:a1:6b:d3:3d:
78:3a:a9:bd:e3:34:c2:36:d4:cb:5e:4f:87:9e:a6:
ad:b4:2c:fd:42:a0:9f:2d:ee:3b:45:25:f1:b8:44:
b6:8a:bb:58:4a:95:0e:f3:67:3a:eb:b6:d8:9c:06:
f7:89:c6:dc:08:08:1b:8f:92:ba:d7:57:df:65:b8:
31:ae:b9:ba:b7:30:e6:ff:27:79:23:71:07:d8:4a:
73:10:fc:0b:88:6f:99:55:34:38:dc:ea:8f:2a:13:
d8:08:0b:9d:4e:63:1b:2f:a1:9c:66:b0:f7:59:77:
c3:ad:19:a4:c1:6c:ee:30:2b:e7:2d:3f:9c:25:04:
8c:d0:02:ae:0e:61:78:af:1c:2f:cf:51:ec:60:67:
c7:26:e3:ef:6a:d9:d3:36:f9:9c:2e:3e:8c:4a:36:
4a:aa:58:b6:6e:b4:91:df:cc:54:0b:fd:d8:ae:84:
7b:f8:cb:fe:62:66:fc:9d:83:00:20:33:34:09:0f:
74:15:cc:3d:e1:05:f8:a6:72:11:90:12:a4:47:21:
a3:0c:17:64:c3:87:12:e2:70:d2:7e:0a:dc:f6:ea:
5d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A8:58:83:4E:DC:C9:CE:42:44:6A:9C:9F:6D:04:7A:03:B9:F5:F6
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f8:e7:01:a6:d1:8a:a1:22:10:a0:0c:89:6a:05:23:04:6e:
b2:59:9d:6a:ad:b0:c2:4e:44:c1:f3:b4:e7:fb:c6:ef:d0:dd:
89:4e:d0:75:d3:95:62:05:96:20:34:1f:90:9c:bf:34:d3:96:
8a:c8:a8:34:14:0c:4b:82:38:8a:a4:10:6a:04:17:61:ea:f9:
ba:99:67:df:e3:41:d5:f7:99:2d:bd:20:f8:19:1b:28:93:fb:
31:70:75:9e:d8:09:f1:57:6f:ff:d2:b8:92:fe:ce:a3:13:46:
e9:6d:f6:b6:30:32:8b:e0:2d:0b:ce:75:98:48:b9:7b:0d:ff:
7b:68:7d:c9:ef:a2:27:c0:b6:53:97:54:b7:8d:2d:50:a0:85:
7e:cd:94:18:7f:2f:68:9a:c2:11:3c:a9:af:c5:52:69:bc:fc:
c2:81:aa:a9:a5:02:e1:01:c5:3b:1e:15:58:b6:87:6e:3e:2a:
81:76:0f:31:84:7a:d8:11:89:46:ec:e5:51:94:28:ee:98:e2:
90:12:7f:d6:29:47:6b:61:60:d9:a4:cd:ba:79:ce:87:23:28:
89:2e:f5:08:3a:fc:d9:03:ae:5e:cd:f3:5e:7c:98:a3:64:70:
73:40:22:6c:5a:16:2b:56:b3:85:5f:c7:e2:55:56:63:e8:f5:
42:e8:8b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:52 2025 by rpki-client