Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier: Od5sMddM5cTxM4bscJ6m7r5Sfgr/67v9X2af+r2lUr8=
Subject key identifier: 54:3A:22:BD:86:AB:4C:2C:2C:B6:EA:BA:CB:F5:B3:A7:9F:1E:03:4B
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: 019A4DAB1B390CD3B2F8E14A7686EC761C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number: 0E20
Signing time: Tue 04 Nov 2025 07:00:50 +0000
Manifest this update: Tue 04 Nov 2025 07:00:50 +0000
Manifest next update: Wed 05 Nov 2025 07:00:50 +0000
Files and hashes: 1: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: eGqJyakaXCTa9GERxU2b/vFmcUmeTS0ROosncIDTOyA=)
2: P2VGtgj0Ve3JifdhxGXEPs8bYHw.roa (hash: krJRUyY9FgbmyjCpGEy7bhvyTA1VoPtEkFekALAvh2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:1b:39:0c:d3:b2:f8:e1:4a:76:86:ec:76:1c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: Nov 4 07:00:50 2025 GMT
Not After : Nov 5 07:00:50 2025 GMT
Subject: CN=543a22bd86ab4c2c2cb6eabacbf5b3a79f1e034b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:32:76:03:6e:6a:4e:fa:db:5e:76:f6:3a:
dd:c1:d5:c1:8e:84:c8:6f:f0:76:fd:0f:6a:f5:bc:
36:74:b4:7a:78:47:2f:d6:be:4c:a9:39:83:33:e7:
2d:c4:ff:ab:f3:ee:54:44:ef:bc:43:82:f3:bf:43:
4e:2a:54:b9:c4:c3:53:66:a8:b4:58:0f:e2:c7:05:
cb:e8:dc:59:63:b8:10:5c:14:b3:03:7b:b6:36:78:
e7:cd:45:95:16:78:1b:bd:b3:3b:f7:4b:f4:5e:f5:
d0:a0:9d:1d:9a:d5:2e:55:ca:1a:f4:25:22:a6:45:
6f:d1:98:69:ad:55:27:5b:c1:90:13:57:cc:5b:fe:
0b:c5:cc:71:ac:2b:f1:a3:59:80:ee:d7:8a:dc:55:
4c:d4:2e:7d:e5:5f:05:b0:00:dd:f2:54:9d:4e:84:
43:b4:94:98:94:7d:3b:b0:c7:54:73:6f:42:58:a8:
8b:bd:55:f9:2e:d6:8b:c5:ca:07:fb:c6:ec:a6:5e:
8e:5e:98:e0:36:74:75:1c:11:0b:2f:0f:4c:60:9e:
45:34:7f:16:f3:54:97:22:0b:e5:06:3d:96:c7:60:
b1:1b:f8:d6:2b:94:c1:e4:67:b4:37:0d:80:13:e4:
94:fa:41:77:ef:54:ce:5a:f1:6d:6d:85:71:e8:01:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3A:22:BD:86:AB:4C:2C:2C:B6:EA:BA:CB:F5:B3:A7:9F:1E:03:4B
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:df:31:71:77:cb:70:fd:6a:85:1d:9b:12:38:46:3f:cb:de:
51:20:6e:a6:16:18:fc:19:6b:c4:34:bc:79:e3:d1:9e:93:36:
0e:38:d6:10:7c:28:06:47:aa:25:6a:06:5e:1d:3f:3c:96:24:
2c:aa:df:5c:98:af:47:bc:b3:62:60:17:c4:8d:25:82:f7:25:
95:82:57:4c:21:29:84:52:ec:e4:cd:83:21:dd:17:00:cb:5c:
71:d8:f7:61:47:ea:dc:11:b7:19:6f:93:a7:ac:ee:a0:c6:c7:
3d:21:f4:89:70:44:ba:55:fe:0b:76:85:2d:bc:28:a9:eb:e8:
f3:98:b8:07:c5:1e:c2:4a:68:ea:a3:60:4e:97:a5:e4:f5:5e:
a6:a1:dd:73:d3:f4:d6:93:6d:0a:0a:c2:c9:5a:ca:0a:c1:53:
ca:7e:f2:0a:85:35:dd:11:42:12:5e:48:99:89:e9:cd:7e:31:
88:41:9c:3e:7d:76:3b:8d:b5:1d:ad:03:a3:94:72:45:3c:95:
24:15:69:e1:5d:5d:00:62:f8:fa:9d:e5:00:20:fb:48:09:60:
7f:0b:69:a1:cc:95:01:bc:63:74:c5:8f:e1:06:19:77:46:ea:
51:33:c8:b9:65:20:00:70:8e:03:8e:54:b4:4a:1c:23:a9:ad:
61:dd:fe:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:25 2025 by rpki-client