Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: oYN+o3Z9qrVUUPLGfmVECy5a2xoLEGJBz/55bE7e+qc=
Subject key identifier: 6C:07:7A:7B:B2:C8:BC:5D:CB:20:1B:A5:FB:BD:A1:B3:82:D0:79:25
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 0198D54DDCC1DB400791934D369B8E0D74FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 0316
Signing time: Sat 23 Aug 2025 05:01:46 +0000
Manifest this update: Sat 23 Aug 2025 05:01:46 +0000
Manifest next update: Sun 24 Aug 2025 05:01:46 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: 0DzRdgK+uJcrHFn5pm3JhMO0SmkktbHflk5tSjhlbwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:dc:c1:db:40:07:91:93:4d:36:9b:8e:0d:74:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: Aug 23 05:01:46 2025 GMT
Not After : Aug 24 05:01:46 2025 GMT
Subject: CN=6c077a7bb2c8bc5dcb201ba5fbbda1b382d07925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:03:6c:ad:ee:e9:d3:39:a1:ce:d6:b3:47:37:
75:9a:5f:66:42:02:15:bd:f3:c3:55:c2:00:74:ec:
c8:86:35:cd:00:38:b6:15:28:c7:49:76:2c:94:11:
37:c7:f6:e7:44:73:95:6c:90:0d:10:e8:06:00:20:
3c:c0:55:39:0e:56:b8:4a:7c:6c:f6:3c:6b:35:2e:
85:03:cc:a4:fd:b3:cc:ab:8c:d6:4a:4a:a5:95:d4:
ad:83:8c:c1:2f:ac:1f:39:93:00:78:10:57:ef:9a:
e6:c2:df:9a:1d:46:97:91:f8:8a:75:75:19:3e:42:
4e:87:17:89:99:7d:be:83:bf:8c:51:49:7f:16:3f:
35:16:7f:ac:93:e8:2d:d3:a4:23:9a:2a:3e:a8:74:
d2:10:eb:96:d8:45:8c:74:dd:35:c9:3e:86:62:f4:
5a:c0:8f:96:af:59:fb:89:e6:1c:0d:3b:6a:3e:4e:
a6:08:96:3a:ef:c0:06:d8:2e:f9:56:71:7c:8a:6d:
00:e1:8b:ab:94:a2:4b:f9:da:93:c3:6b:d8:21:78:
13:ad:98:96:73:77:51:21:c9:ed:97:cf:e3:fc:d0:
a5:ff:69:db:ac:33:e8:0d:3c:43:c2:81:83:da:40:
59:43:c5:e7:fb:a0:ec:f9:b4:16:d2:5c:b3:b4:15:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:07:7A:7B:B2:C8:BC:5D:CB:20:1B:A5:FB:BD:A1:B3:82:D0:79:25
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b4:57:76:62:f9:d4:b1:af:1a:b5:8f:58:b3:f3:f3:5f:d2:
4e:d1:43:a3:03:b1:71:2f:db:f9:12:58:9d:49:08:57:42:03:
eb:dc:27:7b:ff:23:e9:1b:5a:a3:0b:fd:0c:92:7e:71:27:f6:
b4:a8:e8:0b:94:84:86:e3:40:8a:1f:c4:10:3a:36:90:8e:75:
f1:ad:fd:32:b3:b9:6d:16:52:9f:0c:e5:c5:d9:bc:4f:6c:d1:
dc:f9:36:22:d5:e3:b0:66:b5:84:f6:2f:ed:bc:3d:a2:29:71:
33:5f:2c:af:52:62:2a:a5:2c:1f:92:f5:5d:24:dc:c4:9a:f6:
f4:e4:b7:11:a3:e3:5f:c0:7a:8b:ed:ef:de:1b:8c:58:32:85:
f5:26:c9:4c:93:4c:a2:40:d0:69:04:d6:6a:ea:1e:ef:74:e3:
d5:b3:95:96:c8:71:ea:c2:8d:dc:65:67:dd:6f:19:d8:3a:e9:
8b:df:cc:f7:4e:7f:77:81:87:ac:62:c3:b5:7f:57:12:ab:47:
8c:93:55:fa:fa:f2:f5:f6:4e:d7:50:42:d2:65:c5:71:25:f7:
b6:df:59:ed:1f:50:e0:43:a0:57:bf:66:9c:7f:34:ea:d6:30:
64:79:e4:84:b4:2a:dc:1b:35:cf:1e:9c:f9:14:e2:a8:ee:d0:
65:3f:85:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:41 2025 by rpki-client