Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: mfU6Vr9WZ1KYJqM9HOy+nAvAmiEdaJmHO0XFetSCV+A=
Subject key identifier: 29:FE:76:25:E0:14:8F:8F:61:D3:CE:A0:BC:DF:49:84:89:11:F2:05
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 01984889BA27213867B77844E3902E04BD8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 1604
Signing time: Sat 26 Jul 2025 21:00:42 +0000
Manifest this update: Sat 26 Jul 2025 21:00:42 +0000
Manifest next update: Sun 27 Jul 2025 21:00:42 +0000
Files and hashes: 1: 1NnPIelPhTu2KqOrRaVheTjGDtA.roa (hash: rysz73IInmOVJuH+riwA3J47+EGtI1eXu44kPUE1b4E=)
2: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: wX42+cXY0SvMQlRThFcmmDiCR1mak+jlJZVa2EiWWmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:ba:27:21:38:67:b7:78:44:e3:90:2e:04:bd:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Jul 26 21:00:42 2025 GMT
Not After : Jul 27 21:00:42 2025 GMT
Subject: CN=29fe7625e0148f8f61d3cea0bcdf49848911f205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:a0:fa:32:a9:18:5a:d4:a1:e5:83:41:16:
8e:47:80:d4:21:a1:14:89:03:d1:d2:b3:84:46:7b:
59:76:8f:e2:a5:40:df:d9:45:17:79:83:06:19:fb:
59:ec:b1:b1:80:c3:66:95:e4:1b:d3:2e:e3:9f:c0:
97:05:ef:61:4a:e9:f4:19:66:30:eb:7b:43:e2:55:
db:4f:5a:a3:f5:9c:37:cb:96:85:6b:5a:02:b2:6c:
d7:ce:bc:d5:50:ab:c7:05:33:79:c3:87:be:7e:e0:
2b:a1:7b:63:24:65:05:bd:b9:59:e6:67:05:c9:f2:
af:36:77:86:5d:73:ce:6a:5a:3c:2d:1a:65:9c:94:
d4:2f:ec:b1:1c:7e:34:55:2c:e4:1f:41:f2:4e:52:
81:32:17:b5:a3:8f:95:5d:15:e2:69:2c:cd:f4:b6:
30:55:92:d5:57:38:19:f2:ce:99:ce:a6:9d:e3:62:
02:d7:43:86:90:2c:e0:5e:ca:38:e6:87:bc:f1:1b:
eb:b7:45:91:df:ad:e6:f6:f0:60:95:a6:a3:c0:cd:
cf:63:98:75:03:10:b2:44:6d:34:4a:a2:ae:fa:f9:
5c:db:10:1b:1d:3e:aa:f5:1c:7c:fe:b8:ec:38:38:
75:a7:17:66:3a:ba:60:6f:26:c4:cc:42:23:73:39:
b1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FE:76:25:E0:14:8F:8F:61:D3:CE:A0:BC:DF:49:84:89:11:F2:05
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:8e:8f:e2:64:26:56:34:77:26:b0:e2:2a:a0:62:98:0b:5c:
37:a5:9c:b4:7e:8a:89:0e:0f:b9:f0:c1:93:d2:82:8e:9f:31:
8e:e6:b8:07:b8:a7:71:0a:9e:01:dd:74:1e:05:14:01:77:7f:
09:9e:2c:63:1a:9e:de:b0:e7:3a:68:9a:12:dc:14:d5:d8:6d:
df:8a:dc:95:e7:2d:c4:04:26:da:b7:12:96:53:8d:e3:71:7c:
34:8b:b3:68:cb:8d:6c:2c:70:74:ab:88:5e:1b:6e:ba:46:e2:
ba:fa:1a:ea:8e:0e:c3:56:30:76:e2:bb:6e:ad:96:04:f6:92:
52:91:be:b4:c0:84:57:ae:a6:79:68:e8:4d:55:b7:af:a2:4d:
f8:24:22:f2:56:a9:16:f2:b6:f8:91:8e:39:b6:b9:25:b1:9d:
b4:09:76:71:e1:85:4a:b6:8e:a3:2a:74:77:50:af:90:26:e0:
5c:dd:11:bc:4c:ec:22:5b:3f:f0:a0:d1:86:d4:ff:b4:4f:ca:
18:bf:5f:b2:52:dd:2b:c9:66:d3:25:df:01:c8:65:9c:7e:de:
a9:59:f1:11:fd:74:fd:31:b1:a0:62:6e:de:df:6b:dc:11:fd:
a1:28:9d:43:a6:0d:fb:fa:39:3d:00:56:cc:4c:2d:25:a3:11:
47:c4:f6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:30:06 2025 by rpki-client