Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
File: CVZUSY4cx7-M4J6uF6zffIg9W0k.mft (raw, json)
Hash identifier: Vo8J4nZzMJaZ37dJu6KkLLSzsTzjWrlV6lJgvdS0ZIY=
Subject key identifier: 8F:74:3A:FA:4D:98:76:9F:63:4E:38:3A:C0:92:6F:63:C7:51:ED:88
Authority key identifier: 09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
Certificate issuer: /CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Certificate serial: 019828923CFF8EBA03A650EBAF6C9335EBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
Manifest number: 43
Signing time: Sun 20 Jul 2025 16:02:09 +0000
Manifest this update: Sun 20 Jul 2025 16:02:09 +0000
Manifest next update: Mon 21 Jul 2025 16:02:09 +0000
Files and hashes: 1: Bk_-tAtBQBDMWsFeWLzWEKqm6r8.roa (hash: WNJKvTpD/DoB8twbES4bI7LJ/l4C3v8zVuuorOHSnjs=)
2: CVZUSY4cx7-M4J6uF6zffIg9W0k.crl (hash: y4N/KEnAOgHJ17KNgoHkrMJc+p3t8gigFh4tzTMHxlM=)
3: QKYY4pu514sUmDk5ewMC9BudeYM.roa (hash: Xw/leKA1IBGEhTPQThy/3jPwmzjFadxqafY3h81jZnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:92:3c:ff:8e:ba:03:a6:50:eb:af:6c:93:35:eb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Validity
Not Before: Jul 20 16:02:09 2025 GMT
Not After : Jul 21 16:02:09 2025 GMT
Subject: CN=8f743afa4d98769f634e383ac0926f63c751ed88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:8a:fe:04:63:a7:59:d2:c9:55:71:91:a8:
c3:79:21:ef:10:5f:47:fa:37:bc:19:c1:7c:06:e9:
15:74:16:d0:48:0a:d5:3d:63:8c:26:65:94:b1:7a:
25:f8:af:37:e6:3d:97:4b:ff:47:21:4b:fd:bc:22:
40:c1:12:0e:ce:d6:68:27:60:5a:a4:1a:c5:cd:d9:
f4:9d:00:9d:1f:95:03:11:65:e3:27:2f:ad:c1:df:
b1:82:f8:06:75:f2:d9:d8:3e:6e:48:d9:65:1f:94:
f0:55:31:de:ec:9a:a8:b6:7d:f6:19:29:fe:bf:2d:
cc:71:08:6d:ed:80:98:f2:0d:bf:5f:8e:e2:6d:d3:
fb:1f:a9:f9:d8:03:6d:df:bb:7f:3c:74:da:3c:c1:
f1:20:97:e3:fd:39:6c:7f:a9:49:e0:00:a0:72:2a:
73:c6:d1:9e:96:0c:44:1f:9a:52:77:0b:81:6d:e8:
9b:31:d3:5c:f5:99:2e:66:e9:4d:21:87:1a:1f:9b:
d0:e9:47:a2:91:88:41:1a:ba:ab:f9:e9:09:22:95:
e4:bd:0c:af:da:d8:c5:e9:d7:06:6b:25:c6:df:21:
8c:01:ec:c7:ec:b7:7c:1c:a4:71:0e:e3:7a:05:34:
22:2c:d6:06:92:15:2e:55:de:ba:5c:98:e3:b2:bf:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:74:3A:FA:4D:98:76:9F:63:4E:38:3A:C0:92:6F:63:C7:51:ED:88
X509v3 Authority Key Identifier:
keyid:09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c0:9f:ac:af:56:da:c3:55:e1:74:a4:ee:aa:2e:23:18:60:
bd:52:8a:0e:76:6b:24:95:b1:ff:a6:58:a5:9a:09:16:26:97:
14:16:2c:03:95:35:19:99:28:e7:d0:f6:f1:a1:7f:5e:22:32:
9c:7f:35:89:f4:1e:71:83:aa:9e:61:61:f1:d5:8a:0c:fe:d0:
7f:0e:a2:3b:ad:88:ba:e9:5a:29:95:79:69:28:8c:a7:b5:83:
38:f4:31:9e:ca:e4:33:73:bb:ba:ae:7f:4c:46:93:12:53:8b:
7d:20:64:40:7b:6c:52:95:b4:45:24:b4:76:0b:b4:bd:b4:74:
e0:ed:4a:00:7a:16:c8:6c:fd:e3:88:70:4c:d6:7f:26:43:e4:
84:0f:94:61:a8:ad:03:5d:e1:b0:c0:79:13:7f:64:54:e7:b5:
de:49:92:83:af:30:28:60:a4:9b:d5:0f:8c:77:6e:73:e5:29:
10:81:73:f9:aa:d5:67:0f:ca:77:ba:3b:ff:a2:63:c9:e4:55:
cb:f3:ff:d2:6a:12:91:71:6d:47:74:7e:16:3b:3a:6f:52:23:
63:d3:28:a1:8d:34:a4:d1:da:b9:5f:13:ed:ed:51:54:4a:fe:
3b:d7:11:71:60:a8:43:8a:8a:92:a8:6c:96:ef:c9:6a:0f:7d:
9d:bc:84:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:12:35 2025 by rpki-client