Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier: iLOQa1bUdiIcdAsT3CSuCqU3BehuBAZRO1kKbwIRNNk=
Subject key identifier: 95:96:35:54:6E:45:99:96:93:DA:B5:C8:69:CF:CE:21:F3:13:F9:27
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial: 0197B88FE7759787A501D72A07F87684D646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number: 08A5
Signing time: Sat 28 Jun 2025 22:02:07 +0000
Manifest this update: Sat 28 Jun 2025 22:02:07 +0000
Manifest next update: Sun 29 Jun 2025 22:02:07 +0000
Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: wow/8MNNDyeGZ5uyOWky5VGDdAi6OIZTVwIAOuhZjSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:e7:75:97:87:a5:01:d7:2a:07:f8:76:84:d6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Validity
Not Before: Jun 28 22:02:07 2025 GMT
Not After : Jun 29 22:02:07 2025 GMT
Subject: CN=959635546e45999693dab5c869cfce21f313f927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9c:24:6b:77:0c:18:63:b2:ae:8f:30:2a:54:
4d:ed:24:09:6f:86:e5:f1:aa:eb:f3:e6:28:01:73:
0d:2b:10:0a:3c:05:11:d1:fe:14:92:33:ce:67:4c:
f8:c8:86:b9:c5:e9:57:b5:3d:98:c0:d2:07:16:53:
1d:ee:b9:70:e3:47:a8:46:b8:39:c5:51:f6:cf:cd:
5f:14:39:de:84:48:f6:11:42:88:5d:69:23:84:f2:
ec:51:2c:f1:24:27:fa:7a:dc:c0:cc:39:a8:58:ca:
3c:05:74:f7:c3:52:84:59:cd:99:8c:09:ef:56:f6:
2b:1a:ab:10:e2:06:50:0b:c4:1e:97:a8:0d:12:30:
08:a8:fb:69:8a:e9:90:8c:35:42:bd:bc:c6:38:49:
c9:b1:ae:d3:83:82:5b:c2:dc:d6:af:ca:bb:5f:e4:
b0:05:11:63:f3:dc:93:69:0f:fd:87:5e:bd:81:73:
48:a6:65:e5:75:5d:88:e5:55:a4:6b:fd:0d:83:19:
3c:78:b4:02:ce:3a:20:d2:20:15:f0:24:a5:69:9a:
c3:a6:bf:da:4e:69:df:62:20:db:f9:aa:75:e6:67:
29:0b:ac:2a:2a:28:6c:bf:c9:24:04:98:59:e2:c3:
b3:bc:08:fb:b9:fb:35:5e:56:a8:d3:ff:2e:8d:f4:
be:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:96:35:54:6E:45:99:96:93:DA:B5:C8:69:CF:CE:21:F3:13:F9:27
X509v3 Authority Key Identifier:
keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:be:12:69:3b:c6:14:42:ad:02:a8:60:de:f0:fc:3d:b9:32:
a7:4f:ad:ea:6f:dc:58:22:2f:8d:be:5e:f9:09:7e:a5:71:89:
f7:e0:6b:8b:32:1d:34:df:10:7d:c0:6d:0d:6e:92:83:8c:8f:
77:2d:44:91:70:b3:1f:bb:09:e1:f7:0f:d6:ec:45:83:96:1c:
50:2a:3e:8e:79:09:77:0b:f4:d2:49:ec:d3:8b:7e:93:ed:d4:
1c:c0:c6:3d:b6:c9:ee:17:a9:5d:71:b5:6e:df:d4:ca:4f:80:
45:fd:d5:6e:8c:82:b3:8a:7c:46:56:56:79:6b:8e:50:35:8f:
0b:45:03:dc:c3:c2:b0:5b:36:12:0e:7e:09:cb:b7:71:91:a6:
26:67:b5:a8:60:2c:c5:e1:c3:86:1c:b7:49:71:aa:48:4e:a6:
3c:13:40:19:e9:31:ce:82:c9:19:e2:5b:1f:44:13:58:b0:37:
9f:d9:fe:0d:e3:bb:ad:38:8d:bf:12:e6:45:c7:15:64:0b:5a:
f0:87:dd:e6:9c:f6:da:b8:f2:57:29:86:8a:f0:ba:7f:9b:e4:
bf:bd:87:7b:c8:07:0e:c9:ba:07:e4:55:50:af:12:b2:47:1c:
e1:89:a9:2e:86:3a:23:8a:24:8f:5f:34:70:e2:58:4c:f6:db:
80:c5:55:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:15:17 2025 by rpki-client