Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json)
Hash identifier: PCYNfU9PBHYbXifzMaOattSLbCLxIQXNXze/bPG3zMc=
Subject key identifier: EE:14:04:96:72:2F:09:6C:E6:4B:49:AE:F0:17:D7:02:2C:C6:B3:0E
Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8
Certificate serial: 019873069C964B0F546DDC3ECF45354EA236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 03:01:09 +0000
Manifest this update: Mon 04 Aug 2025 03:01:09 +0000
Manifest next update: Tue 05 Aug 2025 03:01:09 +0000
Files and hashes: 1: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: kqs0baNLfG738bQ7Dbh2zxz0DskoNEA8ZPSFgmecOBQ=)
2: IXCtEaMNeIUhqXl8Lx3l8-Dir_Q.roa (hash: ZiR3KjxwRefwM+SxQhOx2wRJ2km2w6JI0EvTFa0nnZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:9c:96:4b:0f:54:6d:dc:3e:cf:45:35:4e:a2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8
Validity
Not Before: Aug 4 03:01:09 2025 GMT
Not After : Aug 5 03:01:09 2025 GMT
Subject: CN=ee140496722f096ce64b49aef017d7022cc6b30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ce:08:60:40:70:ab:1f:d1:02:f9:c5:6a:2c:
f7:6e:92:21:8b:53:77:b6:02:5a:30:26:21:2c:6e:
c8:56:47:7d:96:56:8b:b4:46:a6:2d:06:48:30:cc:
a7:f3:ba:db:cc:04:37:c1:c1:93:6d:41:03:81:62:
eb:b8:67:3d:77:ef:7e:9f:5b:f6:5d:90:95:22:f4:
26:9f:b5:28:4a:dc:91:c1:c5:8d:de:dc:b2:b6:94:
da:5d:39:3c:a3:d1:4a:66:64:65:db:56:9c:b6:92:
ca:35:81:68:25:1c:d1:2c:05:ed:76:0c:0b:94:d0:
3b:4c:74:89:ae:fe:a3:71:89:c3:b0:62:6e:3b:af:
3f:10:f0:fc:a5:7d:2d:ae:7e:ee:b4:59:73:5a:17:
45:a9:69:71:c1:1a:51:45:39:87:3c:eb:75:55:fd:
cf:33:48:08:91:05:32:fa:cb:d4:14:ed:9b:48:ce:
aa:14:4c:7e:59:79:56:82:8b:9d:47:2c:57:ae:c6:
74:6a:98:44:ae:44:96:f5:cb:69:e0:2f:bf:41:2e:
9a:4f:a9:82:42:4f:3d:14:fa:cc:9b:fe:1c:62:f0:
da:44:a7:c1:a2:bb:0c:00:fa:77:1c:d8:9a:3f:fc:
87:2d:bb:25:e9:ef:1a:ef:22:05:20:bb:aa:ce:38:
48:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:14:04:96:72:2F:09:6C:E6:4B:49:AE:F0:17:D7:02:2C:C6:B3:0E
X509v3 Authority Key Identifier:
keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ae:d1:70:c7:8e:4f:78:f0:fb:c9:66:90:d6:c9:0d:e2:a7:
66:1e:74:8c:26:7f:16:39:27:66:37:0b:c2:2f:47:be:dc:d1:
44:ee:ca:08:d3:24:60:b7:54:be:44:4f:b2:b4:f2:99:a8:e7:
80:bd:d2:64:3d:be:9f:5d:12:62:be:32:49:b0:91:68:cb:09:
47:bc:69:40:e5:c9:b0:ac:23:23:95:e2:c1:33:5b:8e:0d:76:
cd:43:75:a3:45:8a:f6:7c:eb:e6:ad:30:99:48:10:39:21:7c:
6a:6c:af:cd:4d:9d:17:e6:08:09:5c:d8:8c:d5:e5:de:97:e6:
01:63:94:7e:a6:ef:42:1a:f4:9c:b3:f4:23:e7:d1:74:88:7e:
eb:d3:3b:55:58:e7:9f:25:9b:fa:df:99:4f:5e:14:e7:7c:40:
cf:3c:f6:c4:de:0d:f8:b4:d6:c8:73:eb:c9:e2:55:25:cf:3f:
55:d1:a0:25:c7:4c:c4:73:32:2a:99:50:b8:9a:6e:7c:87:5c:
0c:8b:0e:1a:2e:f9:c8:3e:03:02:95:00:cb:14:4d:21:42:33:
e6:ba:71:16:b8:2b:a7:ad:8f:a5:43:0f:16:6a:9d:91:6e:fc:
f0:97:28:6a:4a:e8:21:1e:48:61:69:bf:d7:f7:5d:ab:1a:2a:
fd:52:98:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:44 2025 by rpki-client