Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: 8wsyw7klRmdJ8fvXbyXILYv6wEWC3vm07Dc9GS/Hva4=
Subject key identifier: EB:78:F5:3D:B5:EF:AB:85:29:59:34:A1:47:23:26:5E:13:81:FC:70
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 0198496644AC40B55723A68410D3C16C51AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0CE1
Signing time: Sun 27 Jul 2025 01:01:35 +0000
Manifest this update: Sun 27 Jul 2025 01:01:35 +0000
Manifest next update: Mon 28 Jul 2025 01:01:35 +0000
Files and hashes: 1: 5kFz87V3cREdddc3AsaZImesrc4.roa (hash: GMf/VeYSaAQLAvigW84goiaYuSw8QRXcx94y9RzK0U8=)
2: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: Mmb7Xeh/A/4iC0gpFN1quaBmOQjEP4DX+csAG9ezeC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:44:ac:40:b5:57:23:a6:84:10:d3:c1:6c:51:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Jul 27 01:01:35 2025 GMT
Not After : Jul 28 01:01:35 2025 GMT
Subject: CN=eb78f53db5efab85295934a14723265e1381fc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c3:7e:f9:06:b7:d8:97:22:46:93:d2:e8:2c:
75:69:ff:a5:91:88:0d:25:24:99:57:38:60:be:35:
c6:a2:0d:ce:7e:43:2b:a4:99:65:85:27:6c:0c:40:
1f:7b:a3:24:e2:c6:9d:88:8f:a8:6e:7f:7e:de:ce:
0f:21:da:da:ea:5e:3b:b9:d9:90:00:70:3e:ee:78:
94:a9:78:31:89:59:41:47:30:fe:bb:db:70:d6:64:
24:26:22:fa:e2:9c:c0:85:9e:55:06:bc:a8:c4:20:
a2:09:8f:6e:72:ee:81:91:05:a4:10:75:5d:5a:fc:
fb:3d:f1:af:23:eb:8b:69:6e:48:5b:8c:a3:d8:8a:
52:61:0c:bb:f9:48:b5:2e:b9:26:df:a9:42:a2:6a:
6d:e3:8f:5b:86:5e:85:87:f9:a9:24:52:30:3a:2a:
99:e0:6a:7b:10:0f:66:cf:4c:b8:11:6f:35:44:a8:
16:8d:da:26:e9:98:84:8d:61:12:40:29:d7:d4:c7:
b8:67:d5:b4:dc:4a:bf:ca:b6:a2:83:50:1a:f1:6d:
d1:63:d1:ab:45:31:1d:39:da:aa:7f:df:29:0d:5f:
9c:92:20:a2:01:77:f1:e3:91:7f:86:f3:3e:13:84:
24:b4:94:c1:bc:68:4e:cf:39:92:31:21:c8:2f:3b:
41:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:78:F5:3D:B5:EF:AB:85:29:59:34:A1:47:23:26:5E:13:81:FC:70
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e1:25:f9:1f:2c:bd:9c:82:10:95:7b:94:5f:ff:7a:bc:86:
7b:91:88:85:56:d9:29:19:6c:2b:b0:77:f5:e1:e6:7b:57:51:
21:a6:80:fb:f8:0d:67:ca:ed:8f:e6:4d:10:66:2b:92:20:a3:
b7:78:b6:fc:5e:02:69:12:61:ae:cf:dc:b5:0b:64:37:e9:7e:
12:95:f2:6d:87:85:7b:62:a9:61:b8:92:16:dd:2f:07:e7:38:
5d:29:88:60:54:36:b6:4c:a2:ec:59:72:25:c8:f9:4d:06:9c:
16:b9:27:03:92:19:11:1a:d7:60:df:a5:9c:f3:96:ca:89:ee:
a6:af:fe:11:ba:86:17:77:35:82:91:53:0c:e9:0f:38:65:45:
5b:9f:a4:41:73:aa:d5:63:da:71:1a:26:ca:83:0d:27:fa:c3:
94:c7:dd:4a:e8:c6:b0:0d:db:f4:bd:21:dd:0e:15:23:91:72:
04:75:5a:30:66:59:94:62:a7:7a:af:af:bb:e9:eb:4a:75:70:
e8:b9:eb:4a:57:b3:9e:ee:bd:56:4f:02:6a:5f:b9:81:6d:ea:
ce:44:70:1d:99:0e:fd:6f:ff:fb:c8:ea:45:a3:66:0f:11:1b:
49:e3:9a:b7:6a:a9:44:db:bb:68:2c:6a:e8:20:8b:fc:b6:12:
02:ad:15:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:05 2025 by rpki-client