Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: E4JMFuRwww57eO6MIt1Xv4dXT+JQ9PKHLCfULf623Nc=
Subject key identifier: D4:D5:7A:59:F0:16:47:A3:58:F7:EC:CB:CF:AE:67:B3:4D:58:90:C7
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 019A50E2EE13DC983880F1C67B77D5B8672D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 22:00:40 +0000
Manifest this update: Tue 04 Nov 2025 22:00:40 +0000
Manifest next update: Wed 05 Nov 2025 22:00:40 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: Zk0EeITjbbcUUv1yy+ugHnGfatYRBmtieZgUbq2egH0=)
2: Gs7jpmfMcoM_7G0YMuDGyfM_OJg.roa (hash: yj4gPBjqELyvepP37xZ0hFdHIhYTiec7NS5/dOABF/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:ee:13:dc:98:38:80:f1:c6:7b:77:d5:b8:67:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Nov 4 22:00:40 2025 GMT
Not After : Nov 5 22:00:40 2025 GMT
Subject: CN=d4d57a59f01647a358f7eccbcfae67b34d5890c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:aa:ae:b4:08:01:5b:eb:f1:3a:72:d7:eb:
f5:95:16:4d:ec:58:4d:83:1d:4e:d8:f8:da:6d:ab:
19:fa:3c:52:1c:dc:d3:a1:5a:95:0f:5d:d7:5c:85:
91:7f:be:8d:03:c5:4a:4f:b2:28:e0:fe:4a:6d:0d:
73:42:fc:a6:3f:b9:18:bc:c5:63:d3:e2:e9:8b:df:
66:6b:d0:ca:3b:16:66:5a:9e:58:76:99:ab:11:d5:
5c:16:da:41:37:3f:37:ce:5c:24:d9:2f:03:39:7e:
d9:88:c9:db:e8:4f:d0:5e:29:8e:e7:85:38:78:fe:
89:0e:06:aa:37:29:da:fd:99:35:d2:72:14:0e:0d:
5e:be:50:c9:28:d8:87:6e:bd:a5:96:24:2c:60:a1:
1b:f6:ff:b5:71:5d:f4:93:29:73:2d:f9:55:33:76:
ff:60:07:f6:e7:0d:70:c1:ff:6c:3a:23:93:71:64:
d1:9b:56:f4:62:41:ec:1a:d5:fb:60:aa:d9:8b:1e:
11:b9:17:c8:68:14:19:6b:9b:2d:2a:3b:09:37:cb:
2d:1f:b2:bd:9e:7c:c9:13:4d:1a:f1:1f:14:35:12:
ea:cf:3f:89:2e:fb:3e:35:93:b1:b0:45:ec:76:8d:
bc:13:ae:f6:1e:70:a0:0c:b7:93:c7:df:e7:25:dc:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D5:7A:59:F0:16:47:A3:58:F7:EC:CB:CF:AE:67:B3:4D:58:90:C7
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6d:79:d4:bb:40:9e:3e:0f:db:59:a5:64:17:f0:ae:b4:45:
1f:d3:59:27:1a:f7:8f:4a:d2:fd:e8:a1:59:aa:c9:b1:9b:e9:
a3:f6:b9:ef:57:a0:df:5a:87:d5:ba:da:e7:0e:7a:79:b1:59:
48:8f:80:41:2b:00:b6:74:bc:81:bd:cb:6c:c7:51:40:7b:be:
cf:60:3b:cf:80:bf:b8:55:0d:a5:62:d2:ca:74:f3:73:d2:20:
e4:2f:a3:94:97:bb:7d:01:49:0c:25:8b:a6:ad:06:a9:ed:e6:
a6:84:0d:66:f1:b0:d8:77:f0:cd:04:40:48:28:92:94:70:e0:
4f:cc:a5:de:72:2b:b9:af:55:11:da:bd:0d:7b:4b:59:c4:8f:
ba:c7:25:fe:80:7a:72:26:e2:16:1f:7e:5b:cf:05:b2:c4:05:
5d:c2:f6:d2:0b:93:a8:5e:5a:f4:6f:66:63:33:af:d5:7b:51:
20:17:a0:83:b4:60:21:4d:51:62:d2:13:01:24:ba:e8:f5:17:
8a:0d:a5:30:34:2b:61:dd:f6:9c:0c:c0:54:15:f4:bb:ec:5d:
03:8d:88:62:80:d9:32:cc:9d:f5:c7:3e:e5:d9:0d:9a:6a:8d:
90:42:10:cc:99:0d:c9:7e:85:78:57:d2:a8:1a:0e:6b:42:12:
d2:ae:4d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:02:30 2025 by rpki-client