Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: g6sDHFGCjUvFwEWe+AlofziQ0Ix0wZi528VJ7P++0fk=
Subject key identifier: C5:52:B4:7C:DC:9F:2F:AF:2A:AF:E9:47:F5:14:A8:31:83:FC:8C:BD
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 0199FBEAF88535690A11930AB64FD376319F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 10:01:44 +0000
Manifest this update: Sun 19 Oct 2025 10:01:44 +0000
Manifest next update: Mon 20 Oct 2025 10:01:44 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: WZ6+IZB/ZQ0pTGxJ5DVn16nmsKaNvEFG1cqm5UoyBe0=)
2: Gs7jpmfMcoM_7G0YMuDGyfM_OJg.roa (hash: yj4gPBjqELyvepP37xZ0hFdHIhYTiec7NS5/dOABF/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f8:85:35:69:0a:11:93:0a:b6:4f:d3:76:31:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Oct 19 10:01:44 2025 GMT
Not After : Oct 20 10:01:44 2025 GMT
Subject: CN=c552b47cdc9f2faf2aafe947f514a83183fc8cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:f4:d4:e1:0f:94:a6:77:b0:12:07:d3:7a:
d4:3e:ab:e7:41:fb:c9:98:3a:cd:fd:61:83:ad:d7:
94:f8:2c:86:fc:15:da:99:06:04:9e:6c:6e:74:4c:
bd:a0:24:2a:62:0d:12:92:cd:88:45:1a:6b:2a:49:
2f:dd:50:b6:b7:0b:ea:9c:19:57:a6:16:0d:dd:85:
92:83:6e:6e:83:a6:a8:23:64:8f:08:e7:8b:f8:4e:
79:89:82:bd:4b:77:b8:9c:fa:fe:e1:e4:19:0c:66:
eb:51:fd:85:eb:f7:02:91:0d:b1:a6:26:f3:ea:5e:
10:a5:de:e1:87:36:40:3b:4f:65:04:83:b4:fc:dd:
02:30:38:40:eb:77:dd:36:5d:af:c9:e1:25:88:cc:
1e:2f:dc:eb:a3:30:ac:e2:f8:64:58:e4:15:4f:be:
93:ec:ef:f2:ec:d1:0e:87:bd:dd:cb:aa:c8:3a:45:
91:1d:43:b1:c8:1f:3e:a5:a8:3b:61:81:0a:36:78:
25:37:fd:3b:a1:a5:42:ec:eb:01:5a:29:66:24:ec:
68:05:d4:6a:83:4d:89:8a:b1:34:2b:ed:db:ac:49:
0c:1f:4e:da:40:19:f9:91:46:58:ee:e0:3e:36:e6:
65:39:4f:ef:34:44:3b:05:2a:29:60:17:dc:73:ed:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:52:B4:7C:DC:9F:2F:AF:2A:AF:E9:47:F5:14:A8:31:83:FC:8C:BD
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1f:8c:40:92:51:f5:40:80:64:5a:db:dd:7d:ae:03:58:1a:
1c:a2:24:d4:a4:3d:60:7e:dd:37:72:1b:12:72:78:e7:47:c3:
ea:fb:44:5c:b6:d6:6f:8c:88:87:94:6b:6f:65:05:41:67:36:
b4:57:bf:63:9a:2a:f0:05:25:86:9f:23:8a:35:56:56:06:d6:
fe:cf:d4:75:1b:cf:1b:83:f2:0e:3b:c0:ad:c8:ac:a5:9d:62:
13:51:52:5b:0f:d6:48:66:6d:60:ac:3b:f1:50:27:b6:c0:45:
7c:02:17:d2:6d:9c:7c:5d:de:f9:f9:8b:1e:80:de:0b:0a:ba:
47:35:f2:bc:fb:cc:55:b3:97:96:c6:43:c4:de:f5:7a:73:18:
f5:65:77:79:f8:01:09:78:36:3d:d9:fc:19:6d:ae:ae:d2:d7:
ac:91:6b:8a:bc:86:29:6e:11:96:58:62:c6:8c:85:12:87:69:
ab:06:82:d1:0c:1e:9c:bf:48:e5:69:ef:4c:1a:3f:7f:b7:9f:
57:fe:5b:67:85:b6:dc:16:66:20:97:ea:30:c2:5e:88:64:ea:
eb:a6:36:b7:b3:65:10:26:22:af:55:7b:33:9e:d4:89:ca:17:
e8:78:2f:d8:39:8d:71:f6:77:24:30:db:ea:ce:c8:f0:b0:17:
7c:94:37:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:39 2025 by rpki-client