
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
File: S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json)
Hash identifier: sxkRJRv0mqAfKBASIiW5Uu94SNj+xYWJLtbAIJ4Qbqo=
Subject key identifier: C4:1C:50:84:CD:A9:4F:6B:40:2E:F9:1B:8F:59:11:F2:EF:F4:B5:4D
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial: 01988544EF850A4C351016A62CCDBDBD47EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
Manifest number: 14F3
Signing time: Thu 07 Aug 2025 16:02:24 +0000
Manifest this update: Thu 07 Aug 2025 16:02:24 +0000
Manifest next update: Fri 08 Aug 2025 16:02:24 +0000
Files and hashes: 1: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: Je9pS4VvTaTbFeNGnC9mbqM2aOCNdxCyadxjpC6i4dc=)
2: oeCxzVDUfHaJOXyvnKDzLrak4gk.roa (hash: IomvdIa0fgMjIoUuc5morX/DBZMfwMxLqyV3hq96Pqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:44:ef:85:0a:4c:35:10:16:a6:2c:cd:bd:bd:47:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Validity
Not Before: Aug 7 16:02:24 2025 GMT
Not After : Aug 8 16:02:24 2025 GMT
Subject: CN=c41c5084cda94f6b402ef91b8f5911f2eff4b54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:56:91:7c:44:08:2c:e6:3f:63:77:ce:3d:
2e:82:0d:82:3f:15:75:35:cf:64:c6:8e:5f:1d:9a:
90:1b:40:17:96:e7:60:bb:9a:76:fc:fc:34:d2:5e:
c7:e0:04:8c:39:0d:4a:7d:a0:07:c5:31:09:1f:4c:
ed:31:a3:9d:65:0a:b6:8e:02:ad:0a:82:a0:37:ee:
77:b3:d6:99:9d:4f:b6:f8:24:45:6d:e7:c0:69:35:
99:9e:31:3f:81:17:bb:68:30:e4:51:68:b1:58:a6:
58:a2:a8:0b:f4:36:94:3c:a9:89:00:92:69:e4:7e:
c9:e7:74:d6:bb:13:b3:5e:6f:e5:24:3d:6a:6c:52:
b3:62:a3:7d:42:45:4c:83:25:db:fa:32:27:84:bb:
40:ed:b9:45:97:9f:71:0b:c4:b2:b8:ec:74:9c:19:
b7:a8:99:b5:19:12:d6:f6:7d:c8:a8:17:c4:ea:08:
ba:8f:a2:be:40:37:9b:91:e7:f3:33:eb:f3:71:7f:
cf:50:31:59:18:e4:67:a0:31:71:b3:7d:c0:aa:22:
37:86:58:94:98:df:20:83:58:9b:73:50:bc:8b:98:
28:1e:19:3b:08:9e:ba:e6:d5:d8:d4:3b:a7:90:3d:
f4:97:3c:60:40:fe:60:ce:7f:4c:17:f0:6c:5a:d5:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1C:50:84:CD:A9:4F:6B:40:2E:F9:1B:8F:59:11:F2:EF:F4:B5:4D
X509v3 Authority Key Identifier:
keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d2:0e:95:5b:9e:f6:84:94:b5:d9:69:ba:10:d7:69:5c:f8:
83:98:7e:0f:7e:e2:1a:f3:af:2a:59:4b:77:00:33:e0:af:d3:
3f:25:cc:2a:68:5b:be:db:aa:e1:58:ca:7a:53:db:85:80:28:
51:d2:f2:04:ca:27:1b:2d:d3:ac:5c:a3:04:43:44:bd:91:6b:
ff:3b:da:9b:c8:94:aa:cd:e4:03:18:21:66:96:ca:b6:64:91:
ff:44:12:e7:c7:f4:8f:98:27:56:ef:b3:4b:71:66:33:29:a6:
65:ac:cf:c1:1d:24:73:28:de:9c:36:0d:de:14:b0:e2:d2:ca:
12:72:d1:d9:d6:ee:80:cb:55:d1:0d:2d:ce:98:3f:38:50:c6:
16:61:f1:9e:33:93:d6:f8:61:ed:2d:e1:af:4f:27:8e:d6:c9:
24:e5:8c:26:5e:2c:dd:95:ec:04:ca:fe:8b:0e:cf:64:3c:2a:
37:00:27:e5:bf:15:88:83:f7:68:e2:10:3f:83:86:8a:77:17:
f2:d7:7b:28:13:a6:48:0b:7f:80:d6:5c:5b:7f:58:32:19:21:
55:41:37:f7:e1:d9:0b:fd:c8:06:d3:99:5f:69:7c:89:e7:7b:
0c:38:5e:f8:0f:7f:93:8e:28:e3:26:ea:b0:3d:05:f4:3f:74:
20:65:43:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:17:18 2025 by rpki-client