Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier: 2iluF85osi9cphohSw3F+sSX2zE9RvfaXe3Jt84/kCE=
Subject key identifier: C7:B4:63:C9:6C:FA:9D:37:4D:B3:D0:A9:BD:9C:F2:86:DD:37:09:B1
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial: 0199FDDA34653B9C9E4DDC2B412EA0C158BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number: 09D2
Signing time: Sun 19 Oct 2025 19:02:39 +0000
Manifest this update: Sun 19 Oct 2025 19:02:39 +0000
Manifest next update: Mon 20 Oct 2025 19:02:39 +0000
Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: oNhpFiROAXA9OdmU6FZ+OhmVezeUKGi/Ob/VT0rZLbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:34:65:3b:9c:9e:4d:dc:2b:41:2e:a0:c1:58:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Validity
Not Before: Oct 19 19:02:39 2025 GMT
Not After : Oct 20 19:02:39 2025 GMT
Subject: CN=c7b463c96cfa9d374db3d0a9bd9cf286dd3709b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:b3:9e:89:1f:86:03:a1:2e:1d:42:8f:22:62:
b6:1a:eb:aa:24:98:53:e9:cf:31:71:f6:4e:28:43:
11:f1:b4:8d:c1:18:2d:31:20:28:a6:99:5b:c0:7b:
7f:f0:0e:91:c1:f5:b8:b1:e0:1f:12:ad:48:42:85:
8e:1b:47:4f:e9:49:d4:cb:0e:bf:15:6f:66:58:b4:
26:cc:e2:78:f7:94:79:62:1e:06:68:ee:76:fa:67:
98:71:31:43:b3:03:58:15:f4:fc:02:cb:a9:bc:83:
2a:db:d4:ac:0b:c6:a7:81:a1:4d:71:ef:0e:f5:9f:
e8:f9:41:84:24:e0:f3:9d:b5:45:f9:ca:9d:85:3b:
8b:0b:35:80:c0:d6:ef:a9:56:36:f1:b1:79:39:7e:
d1:a3:a4:ba:3d:8e:40:4a:91:84:a7:17:4e:e1:f6:
8e:e9:44:88:f7:0f:60:bc:16:fa:49:c0:bf:18:98:
8b:61:b5:d6:95:94:51:14:8d:20:04:c2:06:79:b3:
0f:89:65:f6:dd:81:ac:bd:b1:97:31:88:ae:ba:50:
81:ea:9e:3b:16:30:e3:19:27:d2:3a:e3:e0:31:56:
3f:62:36:8d:e0:21:4e:dc:43:75:f3:93:a5:ae:86:
eb:a8:99:2e:ab:69:a8:a3:7d:7a:84:78:5a:eb:eb:
29:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B4:63:C9:6C:FA:9D:37:4D:B3:D0:A9:BD:9C:F2:86:DD:37:09:B1
X509v3 Authority Key Identifier:
keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:27:49:d9:49:c4:77:21:82:e6:11:79:09:49:fc:fa:e6:11:
a4:3d:d8:6b:f2:f6:74:e9:48:59:92:8c:3d:10:07:80:ac:7e:
76:98:a9:e9:d5:31:74:9e:ec:39:90:86:43:fc:86:36:0d:b9:
fa:85:ad:32:ea:9d:04:ae:1b:4c:d1:a6:c8:1c:00:e9:2b:77:
71:11:26:8e:73:e4:d4:ce:99:91:e2:c0:a3:a6:8d:ed:59:12:
7f:99:3d:da:a3:b9:2a:9d:b2:42:d5:57:e6:b4:01:dd:4f:e2:
00:a7:63:29:3d:0a:ef:18:59:23:c6:49:0e:d0:ac:08:e7:b1:
2e:82:73:60:43:85:fe:de:98:3a:8c:85:75:fe:b0:49:2c:c9:
be:3b:39:7a:23:c2:1e:b7:e7:ac:e5:46:fb:64:6f:e5:50:c1:
c4:48:fb:ae:5e:75:7e:a7:74:79:ca:65:1d:72:60:82:48:d5:
47:3d:54:a1:da:0d:6a:78:15:05:04:bf:59:13:ac:51:03:98:
4f:1c:5d:5a:5b:ee:f4:1a:d4:34:5c:69:2c:16:3e:75:3f:4f:
51:d6:82:eb:23:a4:e6:be:c4:a4:51:93:95:5b:11:18:40:cd:
5a:09:b6:cb:92:2d:55:85:e0:fb:6e:06:2d:7b:a0:e4:c2:b0:
b2:6b:e6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:50 2025 by rpki-client