Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
File: CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft (raw, json)
Hash identifier: mTielink7JhVEAY83SSYUTundFeJE+ZkFy4gHEI1Q+k=
Subject key identifier: E8:A5:E7:CD:20:C4:15:F4:AA:26:CC:0E:00:71:39:22:B3:43:F8:8D
Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
Certificate issuer: /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Certificate serial: 01987306D8CE025A2FFA68BD3881FDA244BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 03:01:25 +0000
Manifest this update: Mon 04 Aug 2025 03:01:25 +0000
Manifest next update: Tue 05 Aug 2025 03:01:25 +0000
Files and hashes: 1: CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl (hash: XeP5i3yVHCELVgFvY8g23HZPI3XhKcg2QZ/ubfJvxDs=)
2: eEiaQt6Ze9WxjrZL-d6aNqKJOCY.roa (hash: uCPWdRUrjQcc9uIJEuG8eyiVfoHC/vX0+wXoSm20VqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:d8:ce:02:5a:2f:fa:68:bd:38:81:fd:a2:44:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Validity
Not Before: Aug 4 03:01:25 2025 GMT
Not After : Aug 5 03:01:25 2025 GMT
Subject: CN=e8a5e7cd20c415f4aa26cc0e00713922b343f88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:6f:73:a2:09:e5:19:e9:57:c1:a0:32:96:
9b:b7:58:71:cd:a8:ab:51:6d:8c:b1:47:d0:6c:7f:
7f:33:c4:a4:5d:c3:5e:64:04:5a:c0:37:30:17:e8:
ab:f8:bf:67:e0:17:7d:91:71:6a:ca:39:48:83:78:
c4:ee:9f:b4:1e:24:bf:28:2c:cc:75:03:1d:aa:e2:
35:30:ed:6e:7c:05:5d:17:f1:fa:09:15:f7:0c:d1:
36:b4:ee:84:a7:cd:6f:ee:2f:bd:4e:87:6e:6d:0e:
88:20:09:cc:e3:3c:cf:8a:0e:85:ba:5d:c1:5c:1b:
8b:c5:c1:b5:af:5f:3b:40:67:8c:a0:57:c9:d8:23:
aa:4b:bb:c6:9a:07:ce:1b:e6:49:fa:69:af:ce:3e:
fe:60:30:00:9e:a2:b4:a3:9e:cf:8b:18:5d:f8:df:
e8:48:56:01:b7:e2:93:64:55:8a:2a:7b:eb:7e:be:
24:72:1e:54:7d:94:ea:1a:a3:14:d7:c6:52:de:43:
2c:40:15:51:12:10:d8:5c:7e:79:70:ed:24:dc:8f:
b8:bd:9a:d0:ab:8c:0a:b3:8e:24:3a:0d:37:9c:ba:
66:61:21:05:92:83:61:53:d8:f2:d0:e2:9c:c5:69:
c9:cd:38:2d:2c:01:b2:fa:a6:97:82:2c:ba:d8:09:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A5:E7:CD:20:C4:15:F4:AA:26:CC:0E:00:71:39:22:B3:43:F8:8D
X509v3 Authority Key Identifier:
keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:08:31:f8:d3:5c:d3:96:77:a5:f7:29:7e:86:99:a2:62:12:
e8:49:a2:12:38:0a:de:13:7d:ff:51:40:a5:25:67:23:a5:37:
70:d1:4b:0e:bd:e8:0e:dd:1b:98:0c:bc:3d:7b:61:79:d1:16:
63:f4:96:6b:b7:7e:32:b2:4a:29:1b:19:c0:ba:89:8c:1b:9e:
dc:ca:d0:29:97:03:6c:d6:c8:21:86:33:f5:e1:b7:88:1e:46:
21:a8:03:95:4a:78:6c:25:aa:61:2a:41:4f:5c:da:57:52:42:
23:16:62:fc:78:a3:9b:ca:c6:53:d0:2a:f6:58:5c:d1:76:6b:
8b:36:28:e7:6d:5d:e6:88:98:5f:ae:57:5b:6d:5d:3b:91:d2:
3e:b2:69:cf:24:84:f6:fd:a9:9e:44:1b:50:42:33:2e:a9:92:
cf:5c:f3:0d:c5:dc:67:e2:2e:e3:37:86:a9:59:3e:d2:a1:2e:
4b:73:ef:a7:30:88:de:49:9e:c2:26:93:ad:f7:f6:bf:27:90:
9e:8e:7d:c4:05:c7:6e:bf:0f:62:90:48:d6:5c:2d:ff:9b:21:
6d:99:4a:29:a0:cc:6c:21:f9:86:5a:8d:c3:18:91:bd:1e:d5:
4c:61:7a:f7:70:51:bf:9b:b9:bf:9d:18:95:bc:64:96:5f:7b:
cd:9f:5c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:24 2025 by rpki-client