Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
File: CVZUSY4cx7-M4J6uF6zffIg9W0k.mft (raw, json)
Hash identifier: ApMe0oXjqFOAyutf5DZ7Y8KzZwqPw9LHzXx3B8YNJ0s=
Subject key identifier: 43:DD:30:82:30:9F:1C:71:80:21:B3:4C:B4:22:A3:8F:12:32:37:A0
Authority key identifier: 09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
Certificate issuer: /CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Certificate serial: 01988CFD0EAC51B1A6FDE74E958AEEA62315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
Manifest number: 77
Signing time: Sat 09 Aug 2025 04:00:51 +0000
Manifest this update: Sat 09 Aug 2025 04:00:51 +0000
Manifest next update: Sun 10 Aug 2025 04:00:51 +0000
Files and hashes: 1: Bk_-tAtBQBDMWsFeWLzWEKqm6r8.roa (hash: WNJKvTpD/DoB8twbES4bI7LJ/l4C3v8zVuuorOHSnjs=)
2: CVZUSY4cx7-M4J6uF6zffIg9W0k.crl (hash: 3vholWxEMX5ERhY0lEi/RQplne5ZkQMpNOe3APgO8yM=)
3: QKYY4pu514sUmDk5ewMC9BudeYM.roa (hash: Xw/leKA1IBGEhTPQThy/3jPwmzjFadxqafY3h81jZnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:0e:ac:51:b1:a6:fd:e7:4e:95:8a:ee:a6:23:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Validity
Not Before: Aug 9 04:00:51 2025 GMT
Not After : Aug 10 04:00:51 2025 GMT
Subject: CN=43dd3082309f1c718021b34cb422a38f123237a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:19:38:dd:59:d1:7b:4f:6d:74:31:86:f0:34:
c9:3c:9e:b8:ba:36:ab:96:bd:fa:d2:ee:0a:19:0f:
06:6c:a5:ff:d1:d3:96:e7:48:9c:7e:23:14:60:6f:
8e:31:f3:e8:7c:9d:23:d7:11:f6:b4:33:c1:16:75:
27:f3:9c:b8:1a:81:4e:95:82:cc:9b:49:b9:64:e5:
dc:54:5a:05:1f:98:c7:af:71:3a:07:80:50:dc:84:
18:c7:48:c2:10:d8:b5:4f:73:5e:e4:cf:d3:f7:26:
87:40:cd:0a:fe:ca:30:4b:0d:7a:ef:5c:74:fc:6a:
6e:48:3b:6b:12:10:2d:5e:a6:ad:aa:07:40:f6:82:
e3:c5:57:f0:6f:c3:b0:50:51:70:cd:0f:89:80:d4:
64:23:10:23:da:f7:d5:fe:c5:ed:69:02:13:5f:ea:
a4:0c:8a:cf:b8:77:9e:48:89:e3:ad:d4:fd:fb:03:
77:e0:53:9b:9c:c4:b4:61:5e:80:c7:48:71:de:9d:
8e:2b:b9:c2:da:a9:fa:a5:2e:4c:60:89:03:bb:63:
46:b4:a3:38:6b:81:04:25:a8:2e:0f:c1:6c:71:e6:
7b:f4:37:83:a1:f5:79:b3:36:3f:86:02:d8:f9:0b:
74:ec:4a:22:70:e7:99:8c:c6:13:07:a9:8e:53:6c:
9f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DD:30:82:30:9F:1C:71:80:21:B3:4C:B4:22:A3:8F:12:32:37:A0
X509v3 Authority Key Identifier:
keyid:09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ec:76:9b:be:30:ca:f0:80:83:3f:19:6d:d4:55:4f:77:10:
62:05:51:2f:d9:7b:4d:31:a4:81:6d:c6:f4:b1:1f:42:f6:4c:
7c:f7:ff:25:91:84:b3:97:e2:bf:04:bd:28:9b:8a:aa:57:91:
26:a9:b7:1f:3e:cc:b9:75:77:71:93:20:d3:5c:d6:20:8a:8a:
84:d9:97:bc:5f:bb:71:f9:04:89:8f:87:78:6b:bf:9d:32:34:
ef:26:d8:b0:f1:7d:76:97:b2:ac:2c:09:99:35:a8:2a:3e:be:
fe:86:3a:37:54:12:a3:c5:17:c9:17:f8:4c:d2:17:34:3d:c7:
b1:0e:16:73:ec:32:7f:70:f7:ef:92:40:5b:75:db:23:d7:0b:
e8:e6:24:50:9c:9d:d4:a5:c5:02:20:f3:c4:50:49:63:23:60:
55:47:da:95:8d:ee:2e:b2:d2:e8:94:a7:7e:3a:1e:2f:27:87:
3c:7e:b7:bd:fe:d7:c9:35:a5:42:82:d6:41:01:a2:09:35:8c:
99:0b:97:70:53:f4:8e:b1:94:a4:63:58:d7:ae:c6:0e:ca:ee:
c5:3a:b4:c4:f9:11:ce:23:c4:24:15:23:f3:9b:3a:b5:03:b5:
ef:d1:0b:fc:98:14:30:d8:24:02:59:aa:5e:ed:55:30:b2:0b:
7d:a9:d7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:17:23 2025 by rpki-client