
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
File: _cv3oqQ7GA1yKzdjHoea-huaXts.mft (raw, json)
Hash identifier: dJSJ92uKCbmW+LfmwBYVR5FGD6beawjLg9hWD+wNB88=
Subject key identifier: B2:02:90:B4:C0:0B:A6:3D:62:91:5C:F3:98:7F:0C:1B:9B:BB:C5:7E
Authority key identifier: FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
Certificate issuer: /CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Certificate serial: 019872CF8818133073C371F4E95F3F3EC7F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 02:01:00 +0000
Manifest this update: Mon 04 Aug 2025 02:01:00 +0000
Manifest next update: Tue 05 Aug 2025 02:01:00 +0000
Files and hashes: 1: _cv3oqQ7GA1yKzdjHoea-huaXts.crl (hash: PLKjIi4Vj9eXTt4pq4OSp0BGFWmTKBBE2aCVEieLEn0=)
2: t-4cbJi-Ew3u3ipzgXiueic4IR4.roa (hash: bVpOfO45u9FlgP+T8GAth2ynXzQ4yeosDEHag/U9nSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:88:18:13:30:73:c3:71:f4:e9:5f:3f:3e:c7:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Validity
Not Before: Aug 4 02:01:00 2025 GMT
Not After : Aug 5 02:01:00 2025 GMT
Subject: CN=b20290b4c00ba63d62915cf3987f0c1b9bbbc57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f9:f9:8d:36:63:47:0d:c1:f8:ca:a4:61:93:
64:0e:9c:ff:17:e6:34:6d:f7:22:66:21:9d:4f:88:
5d:7d:3c:c1:57:6b:70:df:44:64:4b:d0:f4:79:8f:
3e:53:94:b9:52:0c:85:0f:10:26:f9:11:1b:7d:77:
07:7f:35:6c:eb:53:f1:31:6d:42:ac:65:82:ac:99:
58:8d:d1:2a:b6:56:2d:b9:7e:82:d7:93:ae:a2:f6:
7f:4b:30:6e:74:d1:e3:6d:4c:fc:3e:29:de:f6:dd:
43:75:93:af:49:5f:5e:3f:d4:7f:9f:8c:38:f6:87:
b4:a8:14:ce:94:b2:5e:51:91:50:de:5f:26:c3:40:
50:25:0f:89:d3:5b:72:9f:3a:5b:49:06:2e:33:2a:
e6:18:a3:37:48:b9:e6:e1:26:7b:13:7d:a4:a9:a8:
3a:71:dc:b4:fb:a2:ad:55:93:4d:38:47:1c:14:03:
67:97:7b:b0:af:63:9c:f5:bb:c4:4f:fd:8b:97:27:
c9:8a:db:fa:d1:69:33:de:96:c2:19:75:f4:9e:41:
b6:65:fd:09:ca:1e:55:0d:a8:7e:c4:bf:27:1e:87:
15:f2:44:4e:27:b0:f4:1c:dd:eb:61:73:51:6d:91:
07:1a:0d:93:43:26:2e:3d:4b:a5:21:fc:0b:f6:81:
59:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:02:90:B4:C0:0B:A6:3D:62:91:5C:F3:98:7F:0C:1B:9B:BB:C5:7E
X509v3 Authority Key Identifier:
keyid:FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a3:b3:a1:16:9e:b0:21:4c:d3:e8:f2:dd:09:0c:3e:51:91:
f6:1b:5d:a1:d1:da:44:ea:ba:f5:38:9b:65:fc:9d:94:3b:bd:
22:96:26:e9:05:56:8f:ce:dc:2c:e1:80:4e:a6:cb:37:5b:77:
fd:06:86:11:e0:1f:68:24:bf:20:b5:b5:fd:1d:7d:a3:68:ad:
22:4d:c4:0a:25:37:2e:f4:33:3d:88:55:4d:89:42:19:52:28:
93:7a:b4:a2:08:1d:65:96:a6:81:dd:a4:c8:d1:1b:2e:3c:ae:
1c:dd:1c:1b:23:f7:17:dd:cd:23:29:35:d0:35:f4:83:ea:de:
ab:d9:7c:70:f1:90:f2:c5:bd:09:d4:4d:91:4d:e9:f6:4d:51:
f7:29:b8:79:f8:c3:01:ba:b8:da:90:48:ad:e2:56:b1:78:94:
8b:e9:7a:31:d3:9f:3d:e8:1e:12:65:44:b9:7c:63:4d:ce:7c:
7a:0e:8a:0e:74:07:3a:a1:ac:0b:c3:12:3b:31:9f:20:3d:b8:
55:69:96:8c:8c:46:d2:22:a6:a7:f4:4d:06:ea:32:cc:94:e3:
73:fb:86:63:e5:f0:f3:f7:0f:55:8f:3d:53:03:28:41:df:7d:
3f:19:1f:71:ab:ca:c2:ea:5b:f6:b6:41:6f:53:49:6f:4b:02:
df:60:0f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:32 2025 by rpki-client