Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: ieCFf4UKPLFz323E6fcLOEzooxv54xE4gj5jAEESaCI=
Subject key identifier: 63:AB:01:FD:AE:4F:55:7A:97:4A:25:A0:FF:A2:EF:A5:BC:DA:84:A8
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 01976EF4BB40D2989595ACD19ADA9207B4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 1522
Signing time: Sat 14 Jun 2025 15:00:21 +0000
Manifest this update: Sat 14 Jun 2025 15:00:21 +0000
Manifest next update: Sun 15 Jun 2025 15:00:21 +0000
Files and hashes: 1: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: l1XcztfVm0vjoi3wH56QfCEZ6VCRj0+By4Arq+Lab3Q=)
2: dh_JgCZHkTokMGRr7H9M3cKhoRc.roa (hash: 4Kx8qkmvFu9/ph3LEnJvdO/hVDQr2VoTVCm1ptdvoEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:bb:40:d2:98:95:95:ac:d1:9a:da:92:07:b4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Jun 14 15:00:21 2025 GMT
Not After : Jun 15 15:00:21 2025 GMT
Subject: CN=63ab01fdae4f557a974a25a0ffa2efa5bcda84a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:09:f9:1b:2b:21:4d:70:4d:d7:71:9c:a2:
90:63:be:5d:b4:7b:85:30:2b:6f:55:c7:b9:3e:f0:
d2:37:7c:7c:73:0f:df:07:73:88:f1:a4:41:98:a3:
ab:16:90:74:ac:b8:98:e6:ac:ec:55:d4:93:80:e5:
11:3e:67:6e:f5:c3:20:af:f9:55:cc:1b:15:12:71:
39:51:a9:b8:85:49:5a:44:79:bd:4b:c2:ff:5d:9a:
2e:d7:31:71:11:9f:98:74:98:70:39:58:9a:c0:b5:
20:2a:35:51:a5:ef:e1:4d:5a:3f:ec:ce:14:6a:47:
ad:c7:d8:f9:b2:a0:98:91:c2:8f:2e:03:ac:e8:bc:
0c:d1:55:01:db:a0:e6:bb:4a:b8:ff:5f:1f:1c:31:
d6:b7:d6:9b:c1:5e:4e:c8:0a:b6:00:be:e9:12:e2:
76:38:8c:21:99:be:a5:ac:4d:27:09:bb:e7:0a:72:
c4:5c:96:e1:6d:6a:70:ee:12:d1:97:b7:fa:94:ac:
00:66:5a:0a:64:5f:a7:53:c9:c8:19:62:e0:66:f5:
74:9c:11:57:53:12:ef:be:c8:dd:48:33:97:c3:06:
63:f2:01:7b:02:09:1d:06:34:23:81:5b:c5:28:6d:
f5:31:e1:be:ae:31:5b:cd:56:7f:ef:1b:05:11:04:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AB:01:FD:AE:4F:55:7A:97:4A:25:A0:FF:A2:EF:A5:BC:DA:84:A8
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3d:f1:58:48:94:07:28:4a:c4:d4:73:60:5b:0e:e3:e8:66:
82:5d:c1:5b:fa:ac:60:28:25:2e:e5:3c:e8:1d:db:ac:1f:11:
8a:db:ae:78:75:c6:e2:42:f0:4f:41:65:37:21:df:e1:38:37:
23:0c:71:46:f0:00:c1:45:b9:5b:cb:62:3e:0c:0b:0d:49:ee:
6f:a8:e7:8d:95:44:c9:8d:9b:da:66:a8:65:d6:a5:69:20:8a:
d0:cd:0c:91:91:84:e2:af:d1:e9:50:ec:7e:55:a9:f8:99:5a:
1f:3a:52:4a:66:4c:04:4d:eb:f3:b1:e9:d3:33:a7:6f:59:67:
b9:47:7e:d4:3d:3e:c9:5e:79:5c:6d:4a:50:0b:e1:2e:61:a6:
3f:c6:86:fd:86:9d:2c:d0:c2:2b:5f:0b:49:ea:e8:50:cd:96:
f1:e8:a4:44:1c:dc:7f:fe:4f:c6:b9:b4:6d:ae:1c:b9:17:36:
c4:a4:a0:55:fe:ed:8b:63:7e:fd:5b:06:a5:0b:14:13:f4:01:
c7:f0:75:33:1b:77:ed:1f:ec:c7:e5:7d:29:b9:f8:cd:ea:92:
dc:7b:0d:49:50:fb:2d:11:c1:c0:28:2b:83:da:0b:49:b9:b0:
ed:31:d9:07:0b:ac:90:5f:be:1e:11:d2:0c:2a:a8:3a:7c:f9:
63:a7:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:58:07 2025 by rpki-client