Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: 4K2eAWjsbS8X2p/31rpVzJUvF+u+3iYWxjcIdrTB2d8=
Subject key identifier: 37:E2:1C:29:F2:8C:EC:30:88:BD:A5:FF:36:36:07:BF:D4:03:7E:A8
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 019A029089AA01E4AC56C9B8A6D06DF570BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 03B2
Signing time: Mon 20 Oct 2025 17:00:18 +0000
Manifest this update: Mon 20 Oct 2025 17:00:18 +0000
Manifest next update: Tue 21 Oct 2025 17:00:18 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: PvD3bsBIS26kSMf7nc8N9i0Bc8kMQ3kUci7bqKA7/uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:89:aa:01:e4:ac:56:c9:b8:a6:d0:6d:f5:70:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: Oct 20 17:00:18 2025 GMT
Not After : Oct 21 17:00:18 2025 GMT
Subject: CN=37e21c29f28cec3088bda5ff363607bfd4037ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:7d:a8:61:bb:aa:bb:21:d0:eb:25:b3:f6:
ee:61:ea:1f:85:6b:0a:c7:b5:d4:20:db:fc:b0:53:
b5:87:59:22:9d:81:56:a3:4c:6a:37:73:a8:28:ab:
b7:40:f4:ae:f1:2b:c1:c9:29:03:a5:dd:34:9b:9f:
60:9e:6d:90:7c:09:20:6c:70:87:cb:d8:46:72:55:
8c:86:06:e9:ad:f5:d5:a3:aa:ab:88:e9:ce:94:2c:
14:34:af:af:fe:2a:15:da:51:d0:da:b0:30:4e:3d:
63:27:64:8a:5b:1c:95:a6:36:89:86:9c:17:50:05:
ed:61:ba:6f:f5:fc:ca:02:60:e4:e8:fa:8d:cd:30:
18:00:34:bd:46:4a:31:91:16:bb:1b:53:ef:ab:41:
2f:8e:d9:f2:63:ea:f3:d8:fb:73:c3:c6:f4:22:e9:
64:a4:b6:0a:b1:f9:4b:61:60:6f:2f:8d:8f:4e:89:
ab:1f:df:e2:d6:7c:47:01:5e:0a:8a:6c:36:a9:9e:
f4:ac:53:1b:47:a2:d4:a8:6f:af:b4:fe:e3:41:e1:
00:21:f8:56:57:23:bf:cc:dc:c0:e1:43:51:95:86:
be:15:4d:6e:ad:2e:af:eb:8b:5d:ae:62:59:75:3e:
3f:75:af:82:33:e7:f3:a8:44:3f:0a:bb:b0:85:ba:
ee:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E2:1C:29:F2:8C:EC:30:88:BD:A5:FF:36:36:07:BF:D4:03:7E:A8
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9a:d9:cc:93:48:58:82:9a:42:c7:f8:3d:03:f7:0d:a5:af:
bb:0c:76:fb:a0:56:6a:82:d1:44:3b:1c:c1:e1:36:c3:1c:1a:
b8:59:75:84:92:26:19:16:f2:a5:52:18:2e:d6:c2:74:03:53:
5d:19:d8:04:1e:0a:4b:47:87:dc:93:5d:7c:c3:7b:23:4d:10:
4d:dd:61:b4:80:bd:b9:eb:a1:72:22:49:49:08:81:20:35:bf:
ab:55:02:72:58:b5:b7:c7:80:26:5c:92:cf:ea:4a:29:17:50:
c6:b1:1a:26:a7:91:27:22:71:8b:94:d0:20:60:a5:b5:7b:5d:
ec:9b:4e:13:d2:72:28:57:38:17:65:49:24:b6:dc:37:f1:58:
31:bf:2e:ab:f8:b3:43:25:35:9e:30:f3:37:52:2c:76:ba:f7:
80:6d:4a:74:a4:98:a5:43:d5:75:3c:06:22:14:bb:0e:e9:dc:
60:e9:93:4d:83:a1:50:26:d7:3b:32:18:5b:d5:84:62:7d:e0:
a2:08:ae:3a:3d:cf:32:75:59:ec:0e:65:6e:c2:d9:54:30:da:
a4:a2:18:8b:de:e9:05:de:aa:52:70:75:e7:7a:ea:30:70:9b:
52:92:cc:46:a0:17:93:7b:f3:a3:9e:ee:c4:53:6a:ff:34:12:
2d:b2:67:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:40 2025 by rpki-client