Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: 0c2T5FnFVG1wulGct9bu1QOlecCf1HjObbVKOaEIZjo=
Subject key identifier: A7:A5:1C:5A:5D:66:16:44:F5:9D:89:F7:E4:97:78:E5:A6:F0:04:92
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 019873E33862BAC432532EBA6B34D54C8621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0CF7
Signing time: Mon 04 Aug 2025 07:02:07 +0000
Manifest this update: Mon 04 Aug 2025 07:02:07 +0000
Manifest next update: Tue 05 Aug 2025 07:02:07 +0000
Files and hashes: 1: 5kFz87V3cREdddc3AsaZImesrc4.roa (hash: GMf/VeYSaAQLAvigW84goiaYuSw8QRXcx94y9RzK0U8=)
2: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: 4ZFm/GsEMu2r0XWKz7iqlHVRGIBiOXl+i/EbDPWdmak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:38:62:ba:c4:32:53:2e:ba:6b:34:d5:4c:86:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Aug 4 07:02:07 2025 GMT
Not After : Aug 5 07:02:07 2025 GMT
Subject: CN=a7a51c5a5d661644f59d89f7e49778e5a6f00492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:0d:aa:1b:53:de:0c:ea:b3:14:8b:0b:c3:
45:17:ca:a6:92:aa:78:57:8b:cd:3e:eb:bb:5d:c9:
4b:f4:51:97:df:88:6e:ef:8c:d4:28:88:3e:ab:a8:
7f:af:ce:20:60:13:55:68:60:48:15:50:34:25:0b:
12:83:48:62:23:62:1f:9c:2f:3a:e8:7e:f7:6c:cb:
9b:62:22:49:6b:7c:a1:0d:1d:f8:1b:01:d2:b9:d8:
af:e3:b0:ab:c1:28:ee:0b:1c:ef:e7:e2:78:d4:8e:
fb:8d:b5:fb:e4:7d:6d:44:5a:da:fb:c2:4e:41:35:
10:cf:d8:24:c9:10:e3:be:69:5c:fc:26:7b:37:eb:
a4:5f:2e:1c:6d:b9:1b:62:c8:13:17:20:fc:fd:aa:
5d:9b:a8:23:6d:98:3c:a8:95:83:bf:f7:e2:61:82:
96:67:a2:e7:c8:23:cc:63:03:71:4c:54:8a:47:6a:
2e:61:58:bb:29:89:c6:d5:30:bf:55:d8:dd:b3:98:
f8:14:bf:f5:ef:af:54:d7:4a:a6:dd:42:05:2c:61:
71:92:ae:16:09:72:59:4c:1b:74:bf:84:3f:cc:63:
c7:0e:d8:3f:bf:ec:ee:58:64:43:2b:c4:e6:63:bb:
79:7d:2a:a3:92:66:59:80:9e:0a:3f:ae:a8:27:d9:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A5:1C:5A:5D:66:16:44:F5:9D:89:F7:E4:97:78:E5:A6:F0:04:92
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:44:d6:4a:f5:a1:4d:72:57:2c:99:96:1c:87:c9:66:1b:e9:
25:f2:5b:f2:2c:e1:45:89:fb:a8:d7:05:9f:4e:bf:15:9c:1f:
77:5c:01:ef:e3:a7:5a:31:40:d2:c2:ae:3e:35:ef:32:77:77:
f2:db:f7:25:71:27:18:c9:b9:59:63:f5:6c:fd:8b:c8:de:72:
46:13:62:5d:40:0a:a5:f4:43:66:e9:9f:a9:7d:af:14:bd:63:
7e:4d:5d:b7:65:09:c0:54:f9:88:ad:68:63:33:fd:0c:06:70:
97:e0:47:01:3b:78:ee:39:03:56:92:50:22:ca:d5:cf:f3:1c:
a8:ad:f6:23:a6:6a:6c:e8:57:2c:aa:a2:d7:18:61:32:9f:29:
d9:5a:a2:e9:2c:08:9a:46:63:ab:c8:78:d8:70:18:65:0a:eb:
b2:1f:38:51:30:0d:e6:2f:2c:a7:84:d1:be:d8:00:a4:39:9e:
af:8b:80:3d:98:55:ed:38:b0:19:ad:48:5d:a8:bd:56:a9:da:
6e:7f:da:4b:63:be:63:18:ca:f4:22:b5:0d:ba:a7:10:b8:4c:
3e:d9:bb:29:1d:fe:e6:3d:cf:4b:9a:fc:d9:2d:43:c7:9c:ee:
f2:cc:15:95:98:41:49:7c:a3:30:ef:b7:82:d9:5b:48:ba:57:
5e:e3:f1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:00:53 2025 by rpki-client