Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
File: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft (raw, json)
Hash identifier: Jp1U4E3sd6Gw1FGkacO7d+W+dGnTk1lehjuzf37LU3E=
Subject key identifier: 7F:76:A4:7B:BD:3D:E6:C7:B5:FE:6F:1F:1E:11:80:20:8C:35:2E:F6
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 01987486D3F1F964741AC568B8D1E03B2906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 10:00:49 +0000
Manifest this update: Mon 04 Aug 2025 10:00:49 +0000
Manifest next update: Tue 05 Aug 2025 10:00:49 +0000
Files and hashes: 1: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl (hash: mxuE85QY+/H2QC4UuKSahwvt+p3zMOVDG962rCAVob0=)
2: lmn9m784OLvYNEmoODCEhtK7M6Y.roa (hash: SMHhc3f9U107wkgd7T3SBk2Npa8W1MMzuYgHU/NZOn8=)
3: thiVarAMBeEnqBDpZfGbu3w4ANA.roa (hash: dysQvxWNncFFefbso/9XEjKk2c3ldxSqvGZG35iip3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:d3:f1:f9:64:74:1a:c5:68:b8:d1:e0:3b:29:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Aug 4 10:00:49 2025 GMT
Not After : Aug 5 10:00:49 2025 GMT
Subject: CN=7f76a47bbd3de6c7b5fe6f1f1e1180208c352ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:96:e2:74:03:b3:d5:3f:91:09:e3:b7:42:1f:
e9:af:03:5d:86:8a:1b:f3:99:10:e7:a0:52:3e:7a:
29:3f:75:70:e1:b6:41:90:10:76:a7:f2:32:2e:a3:
9c:fd:e7:d4:6f:11:fd:7d:da:81:6a:de:60:b2:b6:
a1:df:cc:36:7b:f7:29:e4:95:c6:82:82:6e:eb:30:
27:40:b4:25:39:45:3b:96:09:7d:99:28:91:cb:19:
c3:53:e5:7c:11:d2:a1:97:22:48:3f:d4:14:58:c8:
e6:8c:81:bc:1b:9d:9d:2d:c5:3e:7a:47:3f:02:77:
81:98:dc:e1:5a:26:6b:41:57:15:64:c0:ba:14:23:
80:38:94:41:20:f5:78:9c:7c:2f:28:03:6b:2c:2c:
59:da:ea:8f:0e:8a:5b:20:87:b5:8b:54:18:37:fa:
43:d9:4c:fd:28:be:a2:06:02:3f:39:45:58:1a:46:
35:4c:ba:ed:98:d6:ff:4e:50:2d:2e:01:f9:04:9e:
b0:d4:73:7d:52:28:21:79:f4:ad:62:ae:e7:b9:23:
a1:8b:46:0c:c6:d8:13:2a:89:ae:5d:15:34:b8:23:
44:f9:3a:b8:18:c1:70:dc:f5:77:c0:f0:e0:03:71:
27:f5:74:7d:2e:23:9f:c5:2f:d2:b7:17:ef:b3:43:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:76:A4:7B:BD:3D:E6:C7:B5:FE:6F:1F:1E:11:80:20:8C:35:2E:F6
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:75:7d:1c:37:0d:93:41:71:7a:7c:51:9e:74:80:54:85:e6:
4c:fa:91:36:31:a4:2b:5f:6c:ec:c1:5c:90:b4:dd:ac:71:75:
7d:50:f1:0f:15:80:5a:ca:68:cd:33:7e:a2:14:41:fe:4f:10:
18:5b:60:19:e6:81:fe:7c:54:bf:49:00:dd:00:3e:03:75:da:
dc:d5:e0:97:27:28:b8:dc:60:6d:09:74:94:44:a1:90:81:fb:
ba:2b:f5:72:63:e5:3f:c1:2d:ba:db:c7:7d:25:da:02:bb:95:
2c:bc:78:e1:ec:e6:83:71:c4:42:12:34:f4:10:6d:92:e6:cc:
fd:50:dc:65:08:b9:fa:ff:51:ab:1d:57:7e:5e:51:22:9e:c3:
14:72:5c:46:da:f9:d8:ef:a8:43:00:3d:9f:9d:54:87:f6:05:
ea:49:7a:0e:11:b7:c8:a2:6b:aa:f9:12:2b:61:48:01:f2:ef:
2f:4c:44:08:cf:5d:7c:2c:cb:4d:74:cb:0e:c3:96:0b:5e:92:
54:4c:b5:7a:b4:3f:7e:89:00:9e:3b:bd:50:70:2a:8a:2f:a2:
4e:1e:31:f9:3a:ee:1b:fa:07:93:b7:bd:ae:45:1e:f0:96:5b:
3f:fb:aa:77:1e:89:ec:70:91:11:b7:f5:a8:d1:67:67:3d:80:
7d:1d:0d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:41 2025 by rpki-client