Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: B9PoPtIzeMteAsd+OzdnMUPGx0SFZ+26+XwzUybRg8w=
Subject key identifier: E1:AC:85:D6:C8:74:C9:A8:CF:D1:A6:78:81:86:E2:95:58:B0:7C:0B
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 019A4DE1F37A43A8D424B496E875936A92BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 03D9
Signing time: Tue 04 Nov 2025 08:00:44 +0000
Manifest this update: Tue 04 Nov 2025 08:00:44 +0000
Manifest next update: Wed 05 Nov 2025 08:00:44 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: 8pK+ZO/OMaXgpYS0juu4Xtl60B+RM2i3YGPV9LTBok8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f3:7a:43:a8:d4:24:b4:96:e8:75:93:6a:92:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: Nov 4 08:00:44 2025 GMT
Not After : Nov 5 08:00:44 2025 GMT
Subject: CN=e1ac85d6c874c9a8cfd1a6788186e29558b07c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:2c:bb:e0:b3:aa:34:38:06:7b:2e:98:9d:
ed:e7:7f:62:f1:93:e1:52:f5:3e:2f:02:08:45:e7:
9b:f5:c8:5d:43:db:6a:bf:78:6d:a5:2b:b2:7e:ae:
e4:f6:17:cd:15:51:36:24:3c:e4:38:6c:a3:f8:61:
58:d5:bc:bb:78:11:4d:cd:aa:d8:e7:42:43:79:47:
da:07:e7:55:4b:44:6e:e4:85:d1:61:93:75:65:57:
45:cc:9d:52:ae:ce:e5:5f:c6:f7:89:24:52:d7:cc:
97:80:f4:f7:57:f4:af:d9:b6:05:6b:4c:62:9d:d2:
ed:8b:7b:1a:50:0c:a1:a2:44:1f:f8:f3:f1:b2:e8:
34:cd:5c:c3:59:77:0a:44:c1:77:54:41:10:ec:c1:
5f:b3:fc:24:25:d8:26:54:30:2d:41:b6:d5:e1:15:
aa:68:69:ed:97:5d:21:19:93:e4:1f:9a:82:a8:e4:
3e:83:3c:47:36:bf:04:5a:8c:3b:38:34:0f:62:35:
17:f6:65:64:56:6a:99:2b:16:ee:29:8f:05:40:7d:
5f:17:22:da:b5:69:d6:11:a5:5f:cc:30:90:f0:41:
f3:82:75:83:51:22:0c:0a:f4:42:e6:19:b2:5e:aa:
f9:48:79:37:58:eb:b6:5f:ec:ba:30:db:06:84:fc:
76:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AC:85:D6:C8:74:C9:A8:CF:D1:A6:78:81:86:E2:95:58:B0:7C:0B
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:83:c1:eb:74:3e:42:0b:8a:8d:d3:bb:23:f8:4b:37:12:e4:
36:ef:04:eb:4c:c4:84:5a:fd:62:5c:0b:53:f6:e1:17:2e:3f:
6e:dd:96:d1:ef:e6:98:22:e4:3e:44:11:59:a3:69:80:30:02:
e8:d4:59:f6:9b:e9:53:1e:32:81:cd:0b:b8:89:3c:3a:8d:c4:
4c:76:d0:14:89:98:63:06:2d:95:c5:ed:c3:c2:09:5f:df:d7:
03:35:6e:d0:78:8a:b8:bd:6c:18:92:24:dc:24:82:52:33:31:
2a:c3:c5:54:ca:06:89:44:47:b3:da:a7:92:9c:8f:94:a5:93:
54:c2:7a:73:0e:d4:d8:17:a4:cf:6f:9e:98:cc:2c:87:53:9b:
7b:6e:83:ec:48:a7:a7:9f:2c:b3:5a:c0:38:67:30:c5:e5:fb:
20:26:92:6e:c4:73:cf:8f:49:5d:a6:a4:a0:be:95:43:7b:fa:
c7:fc:9e:29:06:47:59:74:97:38:a7:bf:cb:4d:c7:60:96:a9:
0e:a0:38:d4:0f:b2:cf:bc:56:02:0d:98:0d:bb:7e:05:29:18:
a4:a1:f4:ed:7d:9f:84:5b:78:ac:0b:cb:b7:98:7e:8d:d7:4b:
59:9a:5a:d8:a5:60:f4:78:8c:e4:0e:57:b0:80:9a:58:43:22:
f3:54:46:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:01 2025 by rpki-client