Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
File: CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft (raw, json)
Hash identifier: l7K04GzNX3hI/VlNn++tEkyy2OdKxxE53idIjnvy6Dc=
Subject key identifier: 6B:13:EE:C2:D7:B3:FA:B6:A9:E9:45:00:D5:9E:69:5C:7B:12:C1:A6
Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
Certificate issuer: /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Certificate serial: 01976E505349F23E59BBC7AF9EAFE1C353C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 12:00:47 +0000
Manifest this update: Sat 14 Jun 2025 12:00:47 +0000
Manifest next update: Sun 15 Jun 2025 12:00:47 +0000
Files and hashes: 1: CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl (hash: DJfV4BEfDlvnJNfdgLVlDL+lmHqcUQ+B/pbA19ktQg0=)
2: eEiaQt6Ze9WxjrZL-d6aNqKJOCY.roa (hash: uCPWdRUrjQcc9uIJEuG8eyiVfoHC/vX0+wXoSm20VqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:53:49:f2:3e:59:bb:c7:af:9e:af:e1:c3:53:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Validity
Not Before: Jun 14 12:00:47 2025 GMT
Not After : Jun 15 12:00:47 2025 GMT
Subject: CN=6b13eec2d7b3fab6a9e94500d59e695c7b12c1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:30:69:20:b6:45:41:c7:a8:fa:51:16:eb:
44:93:1e:78:20:84:3b:aa:3b:a2:27:fe:77:1b:85:
35:2e:30:22:50:69:a9:f8:3f:e5:c3:05:ad:c2:fc:
d5:42:c1:ef:78:3a:39:19:e0:1f:00:70:d8:41:76:
33:b8:7f:5b:8e:be:f7:ce:d9:37:4a:1f:59:e5:96:
0c:0c:71:f1:81:2d:af:93:70:a7:54:7c:d6:1b:c6:
67:db:b8:1b:cf:57:bc:7f:01:61:5b:c7:1f:a2:b5:
42:33:75:96:40:c2:bd:95:ad:09:8a:76:99:58:f5:
10:06:74:a2:54:7a:f8:be:41:bf:20:79:aa:9b:eb:
4f:c8:25:53:b9:1f:ec:a0:29:f8:9f:5c:4b:9c:52:
7b:a0:af:6f:fe:90:65:a7:ca:a6:20:b9:c5:7f:b1:
55:cf:f8:52:86:d8:dd:a6:fe:5c:d2:76:05:0b:ed:
7a:62:30:fc:bc:c1:5c:46:a9:16:4c:f3:8e:71:d5:
a1:7c:28:c0:c9:ea:9e:f4:a2:49:1d:26:29:54:75:
84:19:a8:ec:dd:ef:1e:54:6c:6a:ae:8a:0b:a3:f6:
0e:93:3d:d7:46:b6:35:c9:ba:2e:74:de:d2:ce:40:
ac:10:43:89:14:3c:20:84:7c:cf:02:3f:08:31:f9:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:EE:C2:D7:B3:FA:B6:A9:E9:45:00:D5:9E:69:5C:7B:12:C1:A6
X509v3 Authority Key Identifier:
keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:96:0e:4e:7c:c0:e4:0c:89:f3:f0:b5:de:27:1a:9a:ca:78:
05:33:2b:97:aa:aa:d9:5e:8a:85:36:f7:99:bc:d4:c3:7f:2f:
31:59:69:c8:ba:59:49:c0:71:b9:52:c8:9d:d9:9c:8f:03:ca:
98:16:e0:bc:69:a9:3f:f4:6b:11:4a:21:fa:f8:83:f7:e7:b2:
f7:99:5d:73:a7:8e:08:9d:d6:69:6f:bb:09:04:16:17:a0:2c:
a3:f7:1f:86:68:d1:63:d7:d7:bb:cc:05:68:6a:de:f1:84:8c:
3e:bf:bd:18:f3:6c:74:fe:ed:ce:56:10:d6:2c:07:a0:2d:d0:
80:50:fa:50:d6:91:20:72:d9:23:a5:32:a0:67:48:2c:ed:2d:
6c:88:89:3b:4d:47:84:26:ba:8a:24:05:19:d9:1e:3c:3f:ba:
fc:7f:16:53:1d:5a:11:00:42:f4:1c:53:e1:ad:f6:06:93:57:
06:19:8e:a6:71:16:3e:d8:b6:fd:5a:62:18:22:09:28:6d:82:
ef:fb:e7:cf:3b:73:ae:fd:64:72:9e:95:03:f8:4a:d3:b7:41:
5d:d2:30:77:14:0b:d9:f1:68:4c:c5:c7:20:fa:40:2b:bb:d9:
c5:0f:17:c2:3b:71:62:16:4d:f7:4a:32:4a:2e:de:b4:ab:ac:
f4:b6:0a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:16:41 2025 by rpki-client