Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: 0eBhO3B2ksOW1DsCmj25XhgCttrj1ZNglH1q/4TrLH4=
Subject key identifier: C8:57:5D:C7:D7:63:1E:37:6C:42:61:0E:57:A1:0E:8B:6B:12:D7:1B
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 01987D8A71D87C50D5877B90E83EA5D07C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 15AE
Signing time: Wed 06 Aug 2025 04:01:21 +0000
Manifest this update: Wed 06 Aug 2025 04:01:21 +0000
Manifest next update: Thu 07 Aug 2025 04:01:21 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: MXUfPhJBUYRxgA8KbvgJvxHsMjIzrcKh+8IIFieMAfY=)
2: Gs7jpmfMcoM_7G0YMuDGyfM_OJg.roa (hash: yj4gPBjqELyvepP37xZ0hFdHIhYTiec7NS5/dOABF/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:71:d8:7c:50:d5:87:7b:90:e8:3e:a5:d0:7c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Aug 6 04:01:21 2025 GMT
Not After : Aug 7 04:01:21 2025 GMT
Subject: CN=c8575dc7d7631e376c42610e57a10e8b6b12d71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d0:32:bb:70:0d:d4:d0:97:33:ca:ba:ec:a0:
de:e3:83:02:03:ed:18:49:26:7b:26:0f:4f:4b:ed:
f6:48:61:84:b2:a7:83:19:a2:dc:26:af:07:cc:67:
d6:d1:8a:6b:ed:f3:e3:de:35:de:89:64:b7:8f:06:
88:da:e4:3c:71:24:a2:eb:ca:a9:7a:78:72:2c:47:
be:7c:6e:bc:a2:90:cd:7f:75:10:5b:38:2a:79:c0:
1c:8e:38:22:2c:87:2d:3e:34:3e:7b:f4:08:be:e8:
5a:07:72:fd:dd:ea:32:f7:68:ca:e2:dc:31:43:fb:
64:79:54:e3:38:08:53:13:e6:98:20:0a:66:d0:6f:
74:b0:3d:d9:ee:cb:ee:1f:99:4d:df:9b:d4:a9:a5:
b8:d4:de:71:11:e2:37:36:fb:a8:eb:aa:d8:5a:1b:
60:6a:ed:f4:22:f1:b0:62:fb:86:a3:72:42:c9:69:
30:9e:b6:51:5b:4c:aa:5b:e2:19:bb:97:5b:52:77:
b0:37:d2:b2:13:cd:05:da:7d:09:ec:1c:55:f8:30:
aa:ed:6c:5f:0e:72:e4:31:be:8a:b0:c5:c3:80:d2:
11:d2:c6:7a:ea:c0:a2:22:e7:5d:ea:16:0f:83:ee:
88:bb:31:c2:58:46:63:1d:2b:4c:8a:99:62:97:d3:
c4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:57:5D:C7:D7:63:1E:37:6C:42:61:0E:57:A1:0E:8B:6B:12:D7:1B
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e3:33:21:04:79:2e:d2:e7:5e:b4:c1:ca:3c:eb:5c:49:58:
55:4b:d3:32:6a:e4:43:1f:19:c9:8a:30:ef:29:fa:77:e0:76:
f9:65:39:ad:5c:41:e8:ed:c5:50:9e:e3:b4:d3:ba:72:48:2f:
06:26:6e:c3:b4:22:8a:9d:5d:0a:fd:78:6c:80:60:b0:42:33:
77:c7:ce:44:e7:7e:0f:73:69:68:54:3c:90:ed:51:59:88:39:
8b:a8:3f:3c:32:d6:67:8f:a6:95:68:6b:6a:c3:51:52:23:c8:
c6:09:b3:64:36:1b:18:20:a5:c0:e5:29:c4:90:38:92:57:ad:
2e:8e:eb:22:ab:94:9c:ed:52:d6:8f:3f:a1:70:ca:34:37:dd:
f5:4a:92:b3:26:91:2b:aa:5c:cf:4c:1e:b6:0e:c3:eb:aa:e6:
61:2e:d4:29:dc:eb:e4:02:51:e2:27:fd:c0:29:69:99:42:dc:
6d:71:a5:30:07:ab:34:3b:1a:6c:0a:4c:44:e2:c7:38:09:78:
e1:e7:77:4a:7c:50:3a:df:c8:c2:b3:4e:e9:95:43:55:a6:61:
06:f4:c6:4c:b9:36:b7:dd:51:b7:92:d3:92:4d:55:cc:65:76:
b8:e6:7b:8f:d4:aa:e4:ec:bb:c3:b8:45:b6:e2:1d:6d:a8:bc:
1c:b5:c2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:08:19 2025 by rpki-client