Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: tP48P6T4jNSPtE1S+7zYuhGIOIy19mc3DnOild6HvYU=
Subject key identifier: C8:DC:D0:DD:06:C4:90:D0:E8:E2:CF:DE:DC:A1:52:2A:3C:5A:45:72
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 01989F39EE8A6E79E641A9B7B09C8D829290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 02FA
Signing time: Tue 12 Aug 2025 17:00:30 +0000
Manifest this update: Tue 12 Aug 2025 17:00:30 +0000
Manifest next update: Wed 13 Aug 2025 17:00:30 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: 3wwpO9Z/vlzkBbSpiVV0UfLHmU++Qa6og/dO8OHR98o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:39:ee:8a:6e:79:e6:41:a9:b7:b0:9c:8d:82:92:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: Aug 12 17:00:30 2025 GMT
Not After : Aug 13 17:00:30 2025 GMT
Subject: CN=c8dcd0dd06c490d0e8e2cfdedca1522a3c5a4572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:7e:bb:93:09:d6:99:7f:bb:ce:be:bf:ec:
e3:78:2b:a7:83:67:e7:bc:6a:6f:c7:51:5c:fc:f2:
be:48:b6:35:66:99:e4:40:f3:9d:78:e9:7d:51:27:
1e:eb:fa:66:c9:6d:14:88:17:22:a1:95:17:e8:9c:
6f:a6:0d:d6:fc:39:9c:7c:a4:06:3d:2a:5a:b8:92:
b9:39:7f:6c:1e:8a:11:4a:02:82:ce:04:c7:d2:40:
5b:83:3b:ee:fd:bf:a6:c2:a4:b0:30:0c:43:6d:e1:
05:7a:3d:bd:9a:26:80:ea:84:1b:e7:04:cd:0c:50:
d9:6b:f1:e9:38:69:2e:28:7d:20:b2:4c:23:06:e4:
00:02:89:fa:d4:0c:c3:bf:b9:69:22:84:0b:ad:81:
9f:e4:92:48:a0:78:07:72:09:83:ed:5d:47:7d:87:
a7:17:8c:e7:c5:99:db:37:e2:cb:59:43:4a:78:67:
ba:65:6e:55:66:05:7c:f8:ad:20:c4:17:db:5b:6b:
27:8c:b3:52:05:ca:35:35:06:42:a0:fb:fa:47:2f:
1f:47:37:f8:40:3d:7d:22:ef:49:d2:d9:1a:3b:e9:
78:b6:36:64:7f:19:e0:b2:11:e6:6c:16:0d:c0:9d:
41:da:8c:55:15:23:04:bc:c3:1f:be:29:ad:bc:bd:
e4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DC:D0:DD:06:C4:90:D0:E8:E2:CF:DE:DC:A1:52:2A:3C:5A:45:72
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1f:28:37:ab:62:f7:18:5c:30:85:2a:dc:f4:e0:e6:05:a0:
92:b9:f0:92:1a:33:b7:bf:4e:fa:fb:7b:60:a7:90:95:e4:be:
53:bd:3d:cf:54:48:0b:9e:39:5e:1a:99:47:09:20:86:64:9d:
6e:18:9f:35:d9:e9:cd:b6:b7:16:fd:b7:3d:e4:ee:d2:08:1b:
64:ed:a9:e0:36:cb:35:f8:d4:ea:ce:06:e1:8a:17:b8:13:b6:
06:3d:7f:b4:d3:0d:0e:27:6f:23:a8:c7:10:28:bf:07:17:1e:
18:62:fb:46:72:46:b0:f8:6b:d9:2e:f0:5d:d7:4d:d6:0f:51:
df:d5:2b:11:ff:fd:0a:fb:cc:0c:11:72:71:40:d3:78:c3:ac:
c1:2e:5b:4b:7b:c8:19:ef:f4:11:11:86:14:a7:13:16:39:46:
1b:0b:19:74:b7:b6:2f:87:59:eb:e4:3e:1f:2e:02:b4:a2:a5:
a6:e4:79:17:78:e0:a7:b1:50:bf:43:75:ad:ea:7d:44:8a:dd:
94:48:41:f0:c8:2d:84:82:ee:fa:03:b2:8a:51:c9:fc:4d:3f:
9b:f5:e8:6e:46:bf:b4:11:e7:80:6a:b5:1a:e0:59:65:43:91:
d4:a8:50:66:9d:e0:c0:e0:a2:16:b6:f4:02:6c:95:99:f7:06:
0e:f9:c2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:57:48 2025 by rpki-client