Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: oaAtGbe8wGtOpync4TvjyKL98OQjSnngfakl3nhUBQw=
Subject key identifier: 7B:49:56:A4:87:97:6D:B2:EC:4D:3F:3B:D4:E8:42:72:99:CB:AC:AB
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 019A4EF45BF32BAFA20E57944C30CEDC6D66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0DED
Signing time: Tue 04 Nov 2025 13:00:28 +0000
Manifest this update: Tue 04 Nov 2025 13:00:28 +0000
Manifest next update: Wed 05 Nov 2025 13:00:28 +0000
Files and hashes: 1: 5kFz87V3cREdddc3AsaZImesrc4.roa (hash: GMf/VeYSaAQLAvigW84goiaYuSw8QRXcx94y9RzK0U8=)
2: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: Dul8hZbHkIw7gBiZLKZR0g9UB+lMdbldV8jmfk8PhBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5b:f3:2b:af:a2:0e:57:94:4c:30:ce:dc:6d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Nov 4 13:00:28 2025 GMT
Not After : Nov 5 13:00:28 2025 GMT
Subject: CN=7b4956a487976db2ec4d3f3bd4e8427299cbacab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:64:42:91:db:c5:93:24:87:e7:ca:ad:39:
a9:89:ff:c4:cb:3d:65:ad:29:41:75:30:2e:0b:96:
cc:76:50:79:67:f3:78:f7:42:80:62:7e:9f:5c:97:
97:2f:1b:2b:31:4b:c8:44:cc:7e:a7:6e:bc:3c:07:
bb:eb:de:4f:b0:69:a5:a4:af:bd:98:22:cd:6a:14:
17:18:ce:f7:61:ca:fe:41:d7:f1:3a:bd:31:45:ed:
f2:1f:6a:e8:fc:06:98:c1:23:d7:3e:ba:ad:03:ff:
fa:6c:9b:72:a4:d1:c0:bd:df:e3:45:9f:3d:f1:f9:
a1:d0:df:e9:70:2b:88:a5:77:7e:e1:86:87:44:da:
c4:aa:07:da:7e:48:7b:3c:2a:ba:84:04:9b:d3:30:
12:bf:da:0f:e0:75:3d:90:f2:aa:26:b3:37:ff:f5:
3a:42:55:83:a3:92:a5:2f:78:98:99:b8:23:e1:e5:
25:e1:58:c4:27:2c:9a:d3:8a:8b:72:e1:e6:05:2f:
6c:30:5c:e7:01:fe:49:3f:5f:3a:10:c9:4a:a5:71:
1d:40:97:d2:c0:f3:0c:bd:d9:20:99:d7:c0:35:bc:
f3:57:2f:2c:b0:d0:3f:85:db:ef:54:f4:39:77:dd:
84:c9:65:cd:cb:24:91:5e:e3:35:f7:f0:ea:d3:f9:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:49:56:A4:87:97:6D:B2:EC:4D:3F:3B:D4:E8:42:72:99:CB:AC:AB
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:eb:cc:62:8e:c2:9b:15:80:1d:a4:a9:a7:17:25:59:4e:6c:
71:f9:bf:6b:cf:72:ab:f5:dd:a6:57:0f:71:f0:7b:15:bb:38:
8c:2a:5f:6e:79:db:95:c5:14:3d:e5:d8:c0:e7:37:b4:48:24:
bc:ea:4f:e8:89:9b:44:73:48:20:50:c6:49:99:d2:eb:29:ef:
43:db:ff:a7:d5:05:7f:dd:db:81:75:f9:b4:2e:7d:37:ad:24:
2a:59:3e:fc:bf:61:f8:99:ff:de:de:be:f9:64:85:c2:46:35:
1a:97:81:1b:20:a1:bc:f0:29:05:d3:37:e6:fd:93:7e:b4:d5:
9a:d9:c6:cb:ae:36:d4:ac:b0:d4:21:e7:02:a6:5c:fa:b2:5b:
1a:04:f8:b1:90:92:57:67:d0:e0:25:35:6d:75:26:58:ac:f3:
20:84:a9:00:b2:a3:13:76:4c:04:e6:ad:1f:67:96:4d:3c:33:
0a:af:7f:4c:94:c0:40:cf:3f:f9:d6:03:15:29:10:e0:15:82:
d7:08:15:3f:05:96:f4:e2:e5:57:ea:ba:c3:f4:69:e7:8f:b5:
8b:1e:70:dd:86:7d:6c:ed:a7:c2:99:24:22:79:92:d6:19:a3:
90:95:27:2b:40:07:dd:de:01:5f:ba:b4:da:36:2c:d9:d5:28:
8e:37:26:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:20 2025 by rpki-client