Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: WTL9Ius7fFIXSulAjdAXc/lj/mbG7gQcKKDv1d0MK7k=
Subject key identifier: 01:C2:7A:21:0D:6E:EF:E9:30:53:7D:51:70:C9:87:53:A3:ED:53:CD
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 0196D85301A4F24836BB48E2F95452C9A8F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 14D4
Signing time: Fri 16 May 2025 09:00:40 +0000
Manifest this update: Fri 16 May 2025 09:00:40 +0000
Manifest next update: Sat 17 May 2025 09:00:40 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: OsNXhinb++xA53WQGtRCQlzvd8x357Hh1yztFsN+DUc=)
2: Gs7jpmfMcoM_7G0YMuDGyfM_OJg.roa (hash: yj4gPBjqELyvepP37xZ0hFdHIhYTiec7NS5/dOABF/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:53:01:a4:f2:48:36:bb:48:e2:f9:54:52:c9:a8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: May 16 09:00:40 2025 GMT
Not After : May 17 09:00:40 2025 GMT
Subject: CN=01c27a210d6eefe930537d5170c98753a3ed53cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:74:d1:50:55:d8:83:9e:7d:e2:85:a0:24:85:
39:09:ee:7d:77:58:ed:19:c2:f0:29:71:6a:b4:de:
91:63:41:c3:4b:fc:c5:9f:8f:1a:00:f8:ad:af:e4:
41:ee:b4:7e:e7:01:7f:fa:9f:32:19:bd:90:6a:df:
08:ed:f0:8d:6f:38:1c:1f:28:39:fa:97:6e:df:25:
dd:0e:a2:99:27:06:12:f4:a2:13:c3:12:05:1a:8c:
2e:c1:73:03:44:62:a5:94:4b:c7:8c:34:d6:d0:54:
fc:45:f0:9d:5b:90:ec:af:38:27:d8:66:c1:64:76:
fa:e5:f2:3a:db:8e:2b:51:14:66:b0:56:e3:84:6f:
29:b2:1a:19:97:d6:b0:ce:a4:00:09:09:73:19:5f:
24:81:fe:63:63:3f:de:b4:06:7a:de:96:47:b6:da:
8a:25:56:0c:91:70:c9:12:2f:d2:59:69:cd:1a:48:
ef:90:1d:0d:62:da:d1:b2:74:46:05:f8:27:d5:8f:
cf:36:a8:70:c1:7b:ac:e4:c9:20:80:5c:e1:6a:e5:
0a:ee:74:f0:ef:4d:47:d3:02:a7:29:a5:5e:b0:dc:
68:ee:10:b0:90:43:08:eb:1f:25:a0:7d:cc:a1:91:
48:bb:36:c1:4c:cf:d8:4a:53:59:e8:02:52:a8:7d:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C2:7A:21:0D:6E:EF:E9:30:53:7D:51:70:C9:87:53:A3:ED:53:CD
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5b:17:73:3c:cd:4f:c4:52:5f:3a:0a:a8:e7:bb:b8:56:ee:
b1:57:74:61:0e:41:3b:8a:04:44:8c:c2:c2:d1:58:27:67:4e:
13:ea:64:73:a4:0b:c0:0d:35:be:f5:b6:11:1e:d8:54:71:24:
f6:26:e4:42:cf:87:f4:c0:53:ca:7a:c1:3c:d9:cd:2a:b7:cd:
86:52:24:08:92:d7:8d:1a:a1:31:73:17:79:2b:aa:78:dd:e6:
a3:35:b6:1c:b2:12:2b:20:0c:3f:b5:51:48:13:5d:8c:17:8c:
38:dd:8f:24:d3:27:41:b4:be:a8:e0:1a:45:82:3c:e8:9b:c4:
23:65:a9:f9:1c:c8:27:41:be:d0:e0:d0:5e:c0:ec:79:40:53:
ae:8b:2a:23:e8:af:af:97:c8:e3:91:41:be:c5:54:e0:69:a0:
35:52:74:83:6f:1b:e1:4b:bd:56:72:19:c0:e0:4b:dd:7e:0a:
24:e0:34:14:11:a9:ff:13:4d:41:0c:06:63:fd:70:13:02:5b:
01:4d:f1:d5:59:9e:5a:bf:f3:91:47:79:48:e9:a3:f4:b4:ea:
75:bc:e7:dd:8a:9f:3f:b3:85:fe:0b:17:0d:b4:01:1b:d6:ca:
fb:70:8f:77:ff:24:89:da:49:ee:eb:bb:3a:a8:f8:bc:e2:aa:
a7:95:2a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:12:45 2025 by rpki-client