Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
File: CVAiiQS52-tHkqaXcn42qv2E0uk.mft (raw, json)
Hash identifier: 7hj36rg5BRd4T0ETgKwby9aetAAU/oIuwNpoS0ZSSWk=
Subject key identifier: 9D:F4:18:54:87:09:8C:14:03:E4:5C:B0:1E:67:BF:BC:63:CB:14:26
Authority key identifier: 09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
Certificate issuer: /CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Certificate serial: 01984A09F6A41C1FD0BDCC527C626F6518A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
Manifest number: 0D15
Signing time: Sun 27 Jul 2025 04:00:23 +0000
Manifest this update: Sun 27 Jul 2025 04:00:23 +0000
Manifest next update: Mon 28 Jul 2025 04:00:23 +0000
Files and hashes: 1: CVAiiQS52-tHkqaXcn42qv2E0uk.crl (hash: kmCA3XcocsQFP89fxiU/bP25E/RirjXZ76FOExTyoAM=)
2: P2VGtgj0Ve3JifdhxGXEPs8bYHw.roa (hash: krJRUyY9FgbmyjCpGEy7bhvyTA1VoPtEkFekALAvh2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:f6:a4:1c:1f:d0:bd:cc:52:7c:62:6f:65:18:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0950228904b9dbeb4792a697727e36aafd84d2e9
Validity
Not Before: Jul 27 04:00:23 2025 GMT
Not After : Jul 28 04:00:23 2025 GMT
Subject: CN=9df4185487098c1403e45cb01e67bfbc63cb1426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:71:ee:c2:57:e5:52:9b:3b:76:7c:65:76:
1c:b8:c9:73:45:6a:e8:6b:58:4a:ba:aa:fd:60:51:
2c:bb:e3:82:e1:b2:bd:71:a2:f8:d4:ce:9e:d5:ca:
a4:25:a0:77:d1:20:53:cc:ae:a7:6d:76:6b:7d:c2:
97:17:2c:c0:2a:f1:6f:d5:b1:53:92:56:08:e6:ca:
47:10:d9:2e:b6:cb:16:33:6d:3d:fd:4a:f3:de:f1:
52:fa:27:7b:33:13:19:6e:a2:64:0a:df:41:3f:de:
a1:80:45:17:8e:f7:af:fe:4c:b7:f2:7c:25:d5:38:
68:f5:86:48:ea:b4:58:be:90:df:a2:0e:4f:0c:e7:
f2:1b:59:7c:72:d0:ef:72:bf:0f:d6:41:e9:24:be:
82:e3:0f:26:d0:60:ea:54:23:bb:a4:ac:a1:c7:03:
8f:18:9c:d2:31:12:09:a5:83:68:b8:6b:0d:89:15:
5d:d1:8a:1a:81:ac:d4:0f:9d:75:4a:dd:73:73:97:
ad:2e:81:21:4f:c7:79:39:9c:3f:4a:c3:31:16:4a:
8d:d5:ef:79:83:63:6b:3b:ed:80:85:e0:03:04:76:
8f:8d:e2:15:1d:be:6d:b6:6b:85:b1:ef:8a:45:b9:
01:b6:44:df:95:6d:fa:29:67:93:bd:12:47:ff:04:
06:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F4:18:54:87:09:8C:14:03:E4:5C:B0:1E:67:BF:BC:63:CB:14:26
X509v3 Authority Key Identifier:
keyid:09:50:22:89:04:B9:DB:EB:47:92:A6:97:72:7E:36:AA:FD:84:D2:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVAiiQS52-tHkqaXcn42qv2E0uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/64d910-945c-42e8-bb44-62821c2c299f/1/CVAiiQS52-tHkqaXcn42qv2E0uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:5f:45:11:10:09:31:bf:ae:f6:05:f8:d4:36:44:99:0a:53:
4a:96:10:54:53:04:69:26:f0:1d:f8:26:e4:6b:f3:06:2b:db:
bc:aa:ac:88:8d:18:28:48:54:79:75:00:b4:7b:7e:73:98:b1:
7f:97:18:56:8a:dc:0e:fb:5d:f3:3d:dd:04:77:3f:74:73:20:
3d:14:c7:42:91:d6:6a:5d:7f:bd:07:e9:37:0c:82:dd:bb:db:
5f:6b:0e:18:65:19:a3:fc:6c:ab:cb:26:6b:44:8f:7b:a3:33:
c2:c6:85:8c:1e:b0:8e:2b:d5:27:d1:65:8c:36:1c:ee:a6:e4:
ea:36:33:38:87:62:9a:38:ca:0a:ba:77:4f:d6:1c:de:1f:c4:
aa:77:c5:2a:d7:43:ae:34:3c:14:bd:f4:b6:9e:47:e4:4a:52:
0b:cc:26:3f:1c:05:35:38:df:ef:0a:dd:d7:26:68:7d:5a:36:
41:f8:ea:eb:f4:6c:68:ce:52:10:ca:1d:82:9e:28:46:04:01:
bd:5e:99:71:87:58:c3:b2:c0:f2:7c:a9:43:16:cc:4e:42:b6:
a6:f0:3f:29:99:69:89:45:e6:c2:44:5c:9d:c4:82:a9:96:1c:
cc:d5:e3:42:49:1a:1e:5a:16:e0:da:a6:3e:43:66:69:59:22:
e4:bd:cf:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCfakHB/QvcxSfGJvZRikMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NTAyMjg5MDRiOWRiZWI0NzkyYTY5NzcyN2UzNmFhZmQ4
NGQyZTkwHhcNMjUwNzI3MDQwMDIzWhcNMjUwNzI4MDQwMDIzWjAzMTEwLwYDVQQD
Eyg5ZGY0MTg1NDg3MDk4YzE0MDNlNDVjYjAxZTY3YmZiYzYzY2IxNDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7Vx7sJX5VKbO3Z8ZXYcuMlzRWro
a1hKuqr9YFEsu+OC4bK9caL41M6e1cqkJaB30SBTzK6nbXZrfcKXFyzAKvFv1bFT
klYI5spHENkutssWM209/Urz3vFS+id7MxMZbqJkCt9BP96hgEUXjvev/ky38nwl
1Tho9YZI6rRYvpDfog5PDOfyG1l8ctDvcr8P1kHpJL6C4w8m0GDqVCO7pKyhxwOP
GJzSMRIJpYNouGsNiRVd0YoagazUD511St1zc5etLoEhT8d5OZw/SsMxFkqN1e95
g2NrO+2AheADBHaPjeIVHb5ttmuFse+KRbkBtkTflW36KWeTvRJH/wQG2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ30GFSHCYwUA+RcsB5nv7xjyxQmMB8GA1UdIwQY
MBaAFAlQIokEudvrR5Kml3J+Nqr9hNLpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NGQ5MTAtOTQ1Yy00MmU4LWJiNDQt
NjI4MjFjMmMyOTlmLzEvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS82NGQ5MTAtOTQ1Yy00MmU4LWJiNDQtNjI4MjFjMmMyOTlm
LzEvQ1ZBaWlRUzUyLXRIa3FhWGNuNDJxdjJFMHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB19FERAJ
Mb+u9gX41DZEmQpTSpYQVFMEaSbwHfgm5GvzBivbvKqsiI0YKEhUeXUAtHt+c5ix
f5cYVorcDvtd8z3dBHc/dHMgPRTHQpHWal1/vQfpNwyC3bvbX2sOGGUZo/xsq8sm
a0SPe6MzwsaFjB6wjivVJ9FljDYc7qbk6jYzOIdimjjKCrp3T9Yc3h/EqnfFKtdD
rjQ8FL30tp5H5EpSC8wmPxwFNTjf7wrd1yZofVo2Qfjq6/RsaM5SEModgp4oRgQB
vV6ZcYdYw7LA8nypQxbMTkK2pvA/KZlpiUXmwkRcncSCqZYczNXjQkkaHloW4Nqm
PkNmaVki5L3Pbg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:26:47 2025 by rpki-client