Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
File: S-CVOnswPWoemgKHFgwvRg8H8iY.mft (raw, json)
Hash identifier: KKviFWrGQQuHYTqfCmDpOwupSLe7cSTiQVrsHwHFBHw=
Subject key identifier: 8B:17:CE:91:96:43:7F:23:36:C9:45:C8:37:81:12:2A:8F:0F:CF:A0
Authority key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Certificate issuer: /CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Certificate serial: 0198496635B2517CEA07EEBE3C82C7F7B077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
Manifest number: 14D4
Signing time: Sun 27 Jul 2025 01:01:31 +0000
Manifest this update: Sun 27 Jul 2025 01:01:31 +0000
Manifest next update: Mon 28 Jul 2025 01:01:31 +0000
Files and hashes: 1: S-CVOnswPWoemgKHFgwvRg8H8iY.crl (hash: NvXu/NtYT04SxioA4TRaQReeeSXr+tZikW0DkIgSCec=)
2: oeCxzVDUfHaJOXyvnKDzLrak4gk.roa (hash: IomvdIa0fgMjIoUuc5morX/DBZMfwMxLqyV3hq96Pqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:35:b2:51:7c:ea:07:ee:be:3c:82:c7:f7:b0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Validity
Not Before: Jul 27 01:01:31 2025 GMT
Not After : Jul 28 01:01:31 2025 GMT
Subject: CN=8b17ce9196437f2336c945c83781122a8f0fcfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:e7:9d:7a:84:a1:8c:a9:38:e9:ae:57:b9:
5b:a2:a1:fe:e1:35:ab:aa:97:46:a8:44:a9:ab:5d:
16:a2:83:b5:cf:e3:29:b3:eb:db:b5:50:64:a6:43:
72:54:c4:a7:ec:d1:dc:7c:4e:b7:71:56:e7:65:c7:
e3:97:1e:37:33:e1:00:ca:90:89:85:1d:e7:ef:c4:
e7:6f:07:a4:b6:64:e0:7b:74:f7:c1:99:4d:9d:18:
3f:4f:b9:ed:74:51:cd:cf:90:c9:5e:b3:01:71:ac:
38:34:71:81:bf:dd:78:3b:8a:3b:05:1d:df:07:19:
96:c4:7d:71:40:85:e0:8c:42:14:96:9c:e2:d4:5b:
64:b3:1a:e1:97:8e:8a:f9:d6:12:59:be:cf:86:ed:
8a:b1:bd:1d:97:7e:26:8f:f5:c9:5a:5f:59:1c:a3:
ec:a8:83:ee:ad:0a:d7:11:bb:83:1a:f2:c5:a4:aa:
a9:b0:33:3a:8c:e2:b2:f4:d5:09:e4:8c:47:66:e8:
5b:00:8f:7f:08:8c:68:a6:f3:0f:61:20:04:0c:3e:
4d:f1:3b:7f:04:eb:a7:99:2f:08:0d:b4:cf:e0:1a:
66:2e:2f:5b:cd:b0:9b:e5:c6:e4:a6:d2:ab:c5:d3:
a0:2f:30:49:6b:89:48:19:37:51:1b:c9:83:b0:2c:
89:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:17:CE:91:96:43:7F:23:36:C9:45:C8:37:81:12:2A:8F:0F:CF:A0
X509v3 Authority Key Identifier:
keyid:4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:75:8d:3a:25:6a:af:9f:12:77:e5:69:d2:54:0e:c3:26:35:
6b:af:d6:60:eb:ff:0a:dd:e3:e0:c9:a1:e9:1c:6d:f9:e8:4f:
f7:e2:92:be:e6:2e:d7:41:2c:2a:38:74:81:fb:03:d7:0f:cb:
fc:ed:c1:fc:8d:6b:eb:d7:df:44:02:27:06:5c:93:e0:35:65:
c6:00:63:41:7c:dd:bf:e4:d0:fc:3d:a9:6f:55:75:c3:c4:09:
69:3c:ff:13:4f:77:a5:7f:33:bc:c1:84:9c:56:9d:a3:57:67:
03:4e:7e:04:9b:51:e6:63:c2:f6:98:1b:6e:44:86:a8:6d:be:
ef:71:f9:52:b3:aa:21:2c:b0:c9:33:ff:36:98:e7:b2:04:fd:
02:72:df:40:ee:cf:23:af:77:09:92:6b:72:57:e6:4c:1c:5c:
b5:18:58:20:3a:54:d1:2f:00:5e:89:a5:b4:3d:d5:94:93:29:
60:f3:d0:50:24:c7:03:19:10:19:b3:3a:b8:5a:54:51:a3:35:
7b:6f:71:c6:e5:f1:b8:90:0f:37:ea:70:95:cb:8f:91:12:ba:
58:ce:76:64:65:b2:e6:13:87:7e:d2:2d:82:27:b1:5f:0a:0b:
2e:35:3c:22:02:4b:7b:b7:5e:8b:1f:00:10:dd:cc:31:95:58:
20:a6:3b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:31:28 2025 by rpki-client