Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier: kftJqzalkP7G5d/bdttG50jsZRxkDG75Gdgjix0caxU=
Subject key identifier: D4:D5:8E:34:BF:32:6A:25:C1:C8:10:78:E6:EC:59:C3:83:2D:01:F2
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial: 0198D473D45740151F0DB75A1579FCBA9D68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number: 0938
Signing time: Sat 23 Aug 2025 01:03:37 +0000
Manifest this update: Sat 23 Aug 2025 01:03:37 +0000
Manifest next update: Sun 24 Aug 2025 01:03:37 +0000
Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: LgcXLaxhHx0WaHbMrBhanU/KM6j9nFNozb9b6XJ/9iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d4:57:40:15:1f:0d:b7:5a:15:79:fc:ba:9d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Validity
Not Before: Aug 23 01:03:37 2025 GMT
Not After : Aug 24 01:03:37 2025 GMT
Subject: CN=d4d58e34bf326a25c1c81078e6ec59c3832d01f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:be:9f:21:23:ed:b3:e9:46:fa:5b:ac:53:c5:
62:c6:3b:f4:94:e0:ad:df:2f:4c:2d:e0:bf:59:39:
57:66:69:93:69:bd:ce:24:af:4e:5a:c3:5f:c7:3c:
60:d0:32:eb:58:20:d6:29:2d:be:78:fa:fe:62:2e:
3b:7b:ac:7a:f3:00:ad:d3:bb:89:ab:b7:f6:93:c8:
34:0e:b8:db:0e:b0:da:23:b2:2f:4b:0d:49:3c:23:
75:87:02:0e:b7:7b:ad:b9:37:47:27:8a:c4:34:aa:
1e:64:12:b7:16:41:45:a7:01:b6:71:08:1b:b5:85:
7a:db:f6:37:d1:ed:93:ce:75:1a:4b:a8:06:9f:b0:
4e:6a:7f:c9:35:97:a0:db:ac:dd:c6:d1:c3:7b:57:
bd:dd:70:d5:1e:2f:88:2f:f4:a4:59:05:d0:1b:fc:
76:2f:ad:dc:b2:97:68:32:31:14:d3:26:e4:eb:63:
dd:e1:84:a5:18:d3:ec:9c:46:4b:16:cc:d4:41:ad:
5d:07:9c:b4:6c:b2:d6:91:f0:0a:3c:b4:55:41:f6:
aa:36:28:e6:a9:0d:ed:e5:8b:db:52:75:c6:01:8f:
60:a7:52:16:97:45:24:cf:34:78:e2:e5:57:a8:b9:
53:34:6e:82:8f:94:18:73:dc:6d:9e:89:40:52:f9:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D5:8E:34:BF:32:6A:25:C1:C8:10:78:E6:EC:59:C3:83:2D:01:F2
X509v3 Authority Key Identifier:
keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:7f:79:8f:62:c2:79:4f:55:5e:06:78:8f:66:3f:ce:5d:51:
e3:ad:3e:c1:aa:7d:6e:58:7b:ae:71:b2:57:1a:56:f6:b9:2b:
f9:92:94:39:29:e9:a4:63:53:c7:c3:5a:54:bf:f6:f1:25:52:
5e:aa:05:a6:61:2f:b6:43:ee:ab:d9:fd:4c:7c:43:41:e6:8a:
6b:c9:28:99:74:ff:ee:85:e7:bd:a0:1e:3b:56:47:36:c6:40:
43:57:79:4d:d2:24:76:af:40:65:35:f0:f8:3f:e2:bd:49:d4:
ce:a4:da:42:7d:ab:b7:4a:57:7b:d7:19:33:0f:57:53:79:8e:
a6:b6:f8:f5:e6:12:aa:c6:34:5f:7b:26:ee:26:2a:a5:92:9e:
2e:ea:33:d2:ed:47:f2:98:72:c5:53:0a:d2:e7:3d:e8:6f:e1:
0f:43:50:b7:b8:a2:c5:1c:92:02:f9:49:41:ee:7a:49:82:a5:
da:29:63:7c:0f:cf:94:83:90:7f:6e:11:46:27:37:ea:d9:62:
0a:2e:67:7b:74:c5:7f:f5:96:02:11:ea:33:75:5f:3e:0f:f5:
cd:9e:57:3c:48:16:8e:f8:b2:6c:3e:7c:81:40:8c:61:a5:1f:
38:e7:ac:5d:33:20:e6:8c:d1:ff:46:d2:a7:c4:91:43:c9:71:
f9:bb:f1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:20 2025 by rpki-client