Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: F74yipuaQzH9GFRl7o9ogbcbmvaYx61unuxyGfX89ug=
Subject key identifier: CB:EC:5B:84:AC:DB:55:43:05:72:BF:5A:BB:1D:6B:D8:00:9B:A5:15
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 01988279FCDD9922879472F27AF1F0867A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 1622
Signing time: Thu 07 Aug 2025 03:01:29 +0000
Manifest this update: Thu 07 Aug 2025 03:01:29 +0000
Manifest next update: Fri 08 Aug 2025 03:01:29 +0000
Files and hashes: 1: 1NnPIelPhTu2KqOrRaVheTjGDtA.roa (hash: rysz73IInmOVJuH+riwA3J47+EGtI1eXu44kPUE1b4E=)
2: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: YDfmJw5mUDwpkAmILpCesgJexHCl666900CxTHUfL50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 03:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:79:fc:dd:99:22:87:94:72:f2:7a:f1:f0:86:7a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Aug 7 03:01:29 2025 GMT
Not After : Aug 8 03:01:29 2025 GMT
Subject: CN=cbec5b84acdb55430572bf5abb1d6bd8009ba515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d3:17:ff:10:b6:ba:dd:ec:bf:07:dd:d4:ec:
14:12:b2:fc:09:b7:33:f7:c8:4e:97:f2:41:66:dd:
3f:ab:2b:c5:3a:fb:60:4c:19:9f:d1:77:25:2c:41:
8f:ac:d9:49:b1:8f:9e:e9:6f:5c:41:4b:1e:c3:2d:
b4:b1:be:10:cc:ca:ca:eb:ed:61:dc:bc:28:b0:19:
df:4d:8d:4a:32:1c:90:06:86:7e:12:8c:c2:9a:7c:
20:a7:e6:70:18:0b:8b:77:ec:4e:36:f8:85:f0:13:
33:b6:20:7e:15:06:aa:df:47:a7:6a:28:d2:ac:e6:
4b:44:ad:2d:2e:9d:a0:2e:8f:0f:4b:45:bb:b8:cd:
4b:10:e8:8c:67:52:d1:ae:f2:42:4f:61:8c:88:d5:
46:16:24:d9:00:e5:45:68:f6:19:e4:fa:82:7f:ba:
8a:a0:b9:2e:9b:41:46:6e:73:aa:2e:df:71:9a:7d:
c6:1f:51:d5:62:a8:d0:d1:c3:fb:9e:59:78:d6:ef:
b7:88:77:a9:04:22:67:6b:9b:8e:9c:11:3d:bb:19:
e8:0e:92:41:be:9e:c7:68:da:2a:98:c6:c7:5d:36:
60:6f:bd:70:d6:82:97:18:ca:6f:44:6d:e7:21:d8:
69:a0:f2:ed:f3:02:a8:8a:1a:7a:63:8e:d5:2b:25:
2b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EC:5B:84:AC:DB:55:43:05:72:BF:5A:BB:1D:6B:D8:00:9B:A5:15
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5f:04:79:86:ba:e0:9d:61:7a:8f:a3:93:20:7e:6d:4a:8f:
74:f5:a0:9d:91:2b:c9:d3:2d:e2:82:d3:fa:a0:8e:ac:6a:74:
0f:a7:03:bb:85:43:1f:18:18:dc:38:f8:bb:4b:aa:97:3b:cc:
78:14:aa:6c:dc:05:c1:6f:77:7c:e7:d0:c4:3d:80:ed:46:35:
d9:71:69:e0:1f:c4:9f:6c:45:bf:4d:d8:e7:dc:49:53:56:18:
a9:32:50:b9:38:06:bf:26:76:77:d6:37:29:fb:bb:f1:fa:2d:
af:30:ad:d9:f5:f2:c4:d9:7f:2d:5c:8a:e4:fc:8a:e5:78:d0:
1f:f2:e2:f8:73:47:a6:77:b5:40:9e:5a:9d:b8:b0:5a:52:18:
84:45:48:ba:67:75:a6:e1:15:23:f0:87:49:ab:85:bf:4b:a5:
58:f0:7f:9c:3e:96:ed:23:c3:98:6a:cd:40:3e:dc:cd:2b:fc:
ab:68:f8:1b:d8:d9:5a:0e:6f:4a:4a:13:6b:90:bb:99:2b:b5:
79:df:15:9f:85:fd:fb:13:4a:55:e2:b7:48:ca:b7:15:19:11:
4f:04:e0:e3:bf:a2:a7:d9:0a:a3:d8:d3:e6:b9:fc:34:f2:d9:
c8:e6:aa:23:ea:0a:4a:65:74:53:cd:f8:71:c7:04:bb:01:9a:
05:6a:40:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 13:05:43 2025 by rpki-client