Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: AwtzclD5SucF2tmJRsX9yb2X63CS9ZtE8RYHcR2wIqo=
Subject key identifier: 8B:E0:31:C1:7D:B5:7B:36:1C:85:EB:81:AD:57:7A:D3:97:5A:CC:DB
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 0197B77C0C8F80CD349B8B0CBCB01D968F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 0282
Signing time: Sat 28 Jun 2025 17:00:49 +0000
Manifest this update: Sat 28 Jun 2025 17:00:49 +0000
Manifest next update: Sun 29 Jun 2025 17:00:49 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: K+YVOV502RloWfrmB4YoUFH6+L73jfA/muRjIcpVyyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:0c:8f:80:cd:34:9b:8b:0c:bc:b0:1d:96:8f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: Jun 28 17:00:49 2025 GMT
Not After : Jun 29 17:00:49 2025 GMT
Subject: CN=8be031c17db57b361c85eb81ad577ad3975accdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0f:82:59:e8:e5:7d:0e:6b:b4:80:62:00:a3:
7f:61:02:0f:3c:29:0a:9b:51:fc:52:75:3c:4e:33:
27:ce:0c:0d:3f:97:34:43:42:c1:fb:a7:cd:5c:26:
61:22:d7:f3:0f:ab:eb:4b:cb:72:11:02:37:1a:68:
61:92:e7:75:e5:51:0a:a2:90:f8:d5:3b:ab:c0:87:
ee:c0:11:4d:48:b3:67:b4:ac:25:be:84:88:77:97:
60:9f:bc:53:5f:80:0b:e2:77:7d:85:82:fd:b5:87:
58:6f:64:7c:c1:82:59:ec:82:97:7c:a3:bd:85:e1:
a6:12:4e:13:23:e7:a0:18:14:bf:52:2e:44:98:a3:
44:84:e3:06:41:30:eb:b9:3d:dc:65:3e:ee:8e:5b:
6b:0b:7b:7d:6f:88:ee:49:de:ef:8b:4b:96:0c:60:
bd:f4:df:17:b3:8b:d6:12:7c:32:63:91:b2:99:ba:
3c:82:04:40:14:94:71:96:65:f4:9f:55:89:ea:96:
e4:f1:35:3d:65:54:92:c6:b0:e9:40:0c:c3:0c:e3:
ad:96:40:4a:e6:bf:ff:32:93:85:b1:a3:09:d6:7b:
26:3a:71:98:a6:98:ec:60:bb:bf:bc:5f:eb:85:44:
18:1e:da:32:67:aa:88:27:d9:2e:48:4c:16:d8:6e:
fd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E0:31:C1:7D:B5:7B:36:1C:85:EB:81:AD:57:7A:D3:97:5A:CC:DB
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:64:58:8e:2d:68:30:c1:39:62:55:a6:6b:fd:1f:c6:f2:3f:
3a:b1:82:4c:31:ff:5a:52:0e:d1:a1:01:b7:c4:01:85:44:8d:
e4:66:8f:f8:fd:23:b3:79:88:48:e9:10:ff:16:30:88:0c:f8:
88:86:ca:7f:3a:5d:ad:cd:9b:9e:b4:77:b8:e9:96:b9:02:b3:
62:bd:7f:46:dc:0c:e3:47:8d:b6:2a:b5:02:e4:00:77:d2:ef:
7f:6d:28:37:67:aa:ff:0a:b1:04:8b:f9:e4:12:61:a6:6b:80:
bb:6f:b5:c1:97:cd:b7:fb:3c:d4:c8:d3:54:45:d0:4a:e1:39:
d1:f4:ca:27:db:d7:56:5c:bc:3b:2c:f1:43:52:8c:32:8d:ba:
49:ee:7c:23:84:ad:f6:70:c0:d1:1e:f6:28:63:82:d1:89:9f:
9f:7b:6d:16:6d:8d:f0:78:e4:4f:f7:31:f8:a5:e7:85:89:19:
92:2a:ee:ea:1c:ab:c5:c2:58:fd:fe:dd:59:93:88:31:be:e1:
7d:bc:ae:19:6b:7f:bc:21:b2:13:b3:15:17:f6:94:4a:2f:6c:
c1:3e:82:18:d6:71:70:1d:bd:d3:2b:1a:73:ea:46:26:07:12:
a0:39:22:95:7e:ae:6b:30:78:5d:28:a0:c4:0c:2e:60:89:af:
5f:b6:a1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:19:13 2025 by rpki-client