Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: xhOhmrIeppajgDqGqrfkKqvrA1XZ4yAd4cNY/LVkEvA=
Subject key identifier: CA:B6:F5:20:3E:6B:8A:99:3D:C8:85:0E:45:34:A5:5C:37:76:07:45
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 0198D4740267400A064E85C842A9C253FD22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 15DB
Signing time: Sat 23 Aug 2025 01:03:49 +0000
Manifest this update: Sat 23 Aug 2025 01:03:49 +0000
Manifest next update: Sun 24 Aug 2025 01:03:49 +0000
Files and hashes: 1: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: 8Pf6tGxEGaTqwCmNRmB96i6as5ubmojhPs9AUsln4TY=)
2: dh_JgCZHkTokMGRr7H9M3cKhoRc.roa (hash: 4Kx8qkmvFu9/ph3LEnJvdO/hVDQr2VoTVCm1ptdvoEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:02:67:40:0a:06:4e:85:c8:42:a9:c2:53:fd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Aug 23 01:03:49 2025 GMT
Not After : Aug 24 01:03:49 2025 GMT
Subject: CN=cab6f5203e6b8a993dc8850e4534a55c37760745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:82:63:f0:0e:42:eb:ce:69:2d:97:dd:59:
22:80:23:e6:f6:5d:f9:39:64:dc:8f:b8:a3:43:b2:
31:8e:1d:2a:d8:ec:5c:cc:ed:4d:3b:e3:78:fa:d6:
10:b6:5a:7c:48:79:ac:57:1a:28:1e:41:08:7e:09:
9f:98:24:3f:3a:cb:03:54:96:f1:f1:40:69:3f:4e:
d1:67:f8:84:43:e7:b7:af:06:b6:63:60:14:cd:66:
2b:10:be:cb:47:3e:c7:8e:15:57:ed:4e:97:aa:bb:
6a:2b:95:91:72:12:54:31:aa:fc:53:29:41:86:b0:
b1:c5:b2:91:ac:43:8f:2e:fd:06:1a:76:dd:03:fd:
43:26:43:fb:28:61:9c:00:07:a0:95:5d:5c:f3:f0:
81:e1:61:5d:dd:a2:8a:96:63:61:c3:08:1a:3f:c2:
62:f1:a1:e5:45:91:26:a5:38:31:29:67:47:ad:ff:
cf:52:d4:8c:d5:c7:35:47:06:e3:54:88:04:7b:0a:
10:60:9b:66:19:9e:31:50:04:27:ea:78:76:05:c1:
69:c7:60:ae:90:01:10:95:65:cd:41:b3:8f:27:02:
08:79:9e:fb:99:50:39:f9:d9:72:cc:c2:10:f0:e6:
9a:7e:c1:eb:b4:2b:54:a7:d9:67:ea:e3:40:57:38:
be:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B6:F5:20:3E:6B:8A:99:3D:C8:85:0E:45:34:A5:5C:37:76:07:45
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:40:31:86:08:e9:36:31:52:14:55:de:cb:b7:32:e9:4e:e4:
da:fe:0d:f4:21:43:20:c2:99:2e:d0:64:9e:74:00:5a:23:d4:
ef:93:2a:8d:4f:ea:f7:f9:88:fb:9b:e2:15:28:16:22:9d:07:
0d:91:b0:2d:85:26:72:0d:5b:00:bd:b9:f7:53:b5:8c:4d:67:
7a:ad:5b:85:d6:7f:77:01:c2:19:57:71:38:51:d0:3f:20:07:
93:b9:78:41:d6:24:d2:be:80:54:35:10:1c:6a:b7:b2:0a:f2:
73:b3:dd:9c:f9:ae:ae:df:4d:d4:19:99:d3:48:85:1d:e1:5f:
6b:18:d2:72:e9:f2:aa:44:ef:96:0c:b4:43:26:19:d7:e5:65:
e9:72:b7:cf:88:76:3a:47:36:6e:0b:69:5f:fd:c2:56:15:28:
9b:39:88:1f:0f:11:1d:f1:77:f0:da:ae:3c:11:61:cf:95:3f:
63:51:5b:a1:23:5b:a8:09:68:bd:cd:84:05:1b:32:f9:3a:f1:
ec:a7:da:9a:a9:75:b3:77:2a:1d:b1:4a:26:aa:6a:c1:fb:e3:
6e:1f:a7:48:b2:fd:0a:f4:d3:09:e3:aa:92:3e:e0:f6:4f:01:
2d:01:66:2b:d0:4d:d5:22:53:11:e6:c0:32:8a:4f:09:29:6f:
8b:a2:d0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:26 2025 by rpki-client