Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: 7w/ZFZgtxcSOLiCWdEXN+2BortmrB9I5vp8UZ8uBJfU=
Subject key identifier: 6B:B1:73:3D:AA:35:0B:58:CC:EA:D5:7D:5B:66:B4:60:4C:A9:0F:33
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 019873E400374C6B7ACB29AEA72F8D26FB05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 15A9
Signing time: Mon 04 Aug 2025 07:02:58 +0000
Manifest this update: Mon 04 Aug 2025 07:02:58 +0000
Manifest next update: Tue 05 Aug 2025 07:02:58 +0000
Files and hashes: 1: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: FcIoAKEKVZ/yS1q5jlyLA9kJOhbHccBGxDOYGH7BWVw=)
2: dh_JgCZHkTokMGRr7H9M3cKhoRc.roa (hash: 4Kx8qkmvFu9/ph3LEnJvdO/hVDQr2VoTVCm1ptdvoEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e4:00:37:4c:6b:7a:cb:29:ae:a7:2f:8d:26:fb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Aug 4 07:02:58 2025 GMT
Not After : Aug 5 07:02:58 2025 GMT
Subject: CN=6bb1733daa350b58ccead57d5b66b4604ca90f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cf:23:e3:fe:7f:9d:f7:15:e7:3c:86:5a:b7:
4d:b8:87:83:c7:b3:e1:7b:ba:ba:cd:5e:e1:62:aa:
00:56:f5:d8:98:7c:ea:5f:53:b9:77:b7:59:58:03:
ec:5a:a0:05:6a:78:28:d0:3f:bf:d5:89:12:ee:6f:
fd:95:25:7e:da:dd:ea:fc:ae:ee:aa:82:f0:4e:06:
10:46:fd:fe:3f:c9:70:a6:4c:97:24:95:12:87:4f:
75:a2:ba:a5:db:18:17:c9:4d:68:9b:53:60:e3:5f:
3a:ca:8c:13:49:a3:7a:bc:b5:2f:95:8b:cc:40:e2:
be:20:a0:30:35:e2:c4:c8:d0:38:0c:52:29:79:3b:
01:f0:67:f6:83:b2:c9:0e:f9:e5:5b:6c:f4:61:28:
57:a3:97:4d:df:af:63:7d:a9:24:6f:ce:0c:93:06:
22:f9:ce:a3:34:55:44:b2:87:27:39:3d:5a:62:82:
74:96:12:f1:5b:62:88:4a:40:15:4d:e6:66:35:a6:
bb:73:52:88:45:08:a8:18:f0:82:89:17:8d:d5:04:
07:4f:ed:6d:e0:10:6f:e0:e9:d9:19:48:99:b9:ad:
ce:c8:ed:66:5e:30:e8:d1:7d:9f:a2:17:d1:f0:7a:
75:f8:a1:d7:ed:3d:b4:76:70:87:78:90:44:61:d3:
dc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B1:73:3D:AA:35:0B:58:CC:EA:D5:7D:5B:66:B4:60:4C:A9:0F:33
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4d:48:01:ca:6f:d9:1a:ac:7b:5c:ce:c9:b1:c1:15:85:22:
9c:bb:5e:62:5c:83:10:d9:13:01:c1:5c:72:6c:e0:74:c0:92:
1e:88:77:5e:b0:d7:ff:da:40:61:63:c5:84:6b:46:21:85:1a:
d4:5d:45:40:05:8c:9b:3d:d6:d6:41:18:5f:75:62:9e:8a:35:
54:df:f5:cd:bc:c1:5d:d1:36:0e:df:49:32:53:2e:4b:77:4e:
1e:4d:34:a1:a7:12:4b:cf:29:4e:db:fd:4a:b5:4d:c8:c8:c5:
ed:4d:f8:93:0b:e9:8c:02:37:51:6e:af:af:23:f5:46:3b:53:
59:96:00:bf:65:39:c4:df:48:00:ea:15:96:1c:a7:5d:ca:0e:
44:72:e7:81:27:c4:46:0a:2a:ad:80:dd:45:ba:6d:50:08:95:
72:94:3c:0f:02:39:2f:52:25:04:09:b5:b4:d3:af:0a:29:d9:
2c:27:dd:05:82:e8:23:3a:eb:1f:dd:3e:22:cd:0a:8e:6f:44:
cd:23:bb:b4:de:dc:96:df:c2:a5:f4:5a:1a:7a:98:1a:d8:35:
cf:82:65:61:f4:64:b7:1f:4b:98:ba:67:66:36:3d:56:ef:06:
ce:27:40:dc:57:3b:cd:99:4f:00:5f:42:d7:ed:e9:54:d0:3b:
41:76:5e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:20 2025 by rpki-client