Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
File: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft (raw, json)
Hash identifier: iBfX/mEUBbvbV1J4WC14fXZmPAfGQLEwmzZ0vUxBoQQ=
Subject key identifier: 0A:A3:57:F7:E3:5D:3A:69:C9:C1:87:AC:ED:9F:F5:8D:99:CC:51:5B
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 019853B2416E23C05555D8CC1663635898AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
Manifest number: 1605
Signing time: Tue 29 Jul 2025 01:00:47 +0000
Manifest this update: Tue 29 Jul 2025 01:00:47 +0000
Manifest next update: Wed 30 Jul 2025 01:00:47 +0000
Files and hashes: 1: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl (hash: 43RB9huVAmJkYMMgmdw0m3S9VzQ4Vt/nS8N/hx7Ibyw=)
2: lmn9m784OLvYNEmoODCEhtK7M6Y.roa (hash: SMHhc3f9U107wkgd7T3SBk2Npa8W1MMzuYgHU/NZOn8=)
3: thiVarAMBeEnqBDpZfGbu3w4ANA.roa (hash: dysQvxWNncFFefbso/9XEjKk2c3ldxSqvGZG35iip3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b2:41:6e:23:c0:55:55:d8:cc:16:63:63:58:98:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Jul 29 01:00:47 2025 GMT
Not After : Jul 30 01:00:47 2025 GMT
Subject: CN=0aa357f7e35d3a69c9c187aced9ff58d99cc515b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:9a:81:ff:1a:30:2a:5a:2b:50:af:b7:11:
70:2e:3d:d9:db:78:db:61:e7:c7:74:8f:e9:29:bb:
d6:67:08:4e:a3:a1:d4:3f:f7:ea:ba:06:e1:7c:ee:
0d:2d:f0:c0:26:95:a4:f8:64:99:f8:b0:74:7c:74:
e1:36:f2:74:9f:df:f5:66:fe:1d:27:ad:41:38:ad:
b3:b2:34:77:72:b7:be:c5:75:d4:4d:f5:34:14:b1:
ed:f2:d2:e8:68:85:19:0b:ac:b7:8e:6c:14:90:98:
95:39:2f:4c:96:df:01:1b:74:d8:77:a0:26:81:fd:
bc:7e:0f:99:46:4a:55:80:98:57:b7:99:6c:61:dc:
90:00:8f:b1:f7:1d:17:87:c2:81:5c:95:64:1e:d6:
da:5d:17:db:8d:05:33:12:f0:05:49:df:eb:4a:88:
1d:26:5b:8a:3a:76:13:0c:40:9c:ec:03:87:f9:f2:
d1:bb:9f:1c:60:86:d8:56:aa:dc:29:dd:45:a4:e8:
dd:a6:4b:9f:50:06:1b:1e:26:d7:dd:72:d8:79:e6:
25:eb:7d:8f:e3:fc:76:c2:09:dc:b2:ba:ce:2c:b2:
20:c2:5c:f3:56:ac:cf:5b:8a:45:3d:b2:f4:29:82:
d1:5b:0c:ef:98:4d:27:74:75:70:63:19:17:2d:43:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A3:57:F7:E3:5D:3A:69:C9:C1:87:AC:ED:9F:F5:8D:99:CC:51:5B
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:17:e2:11:ae:95:01:c5:6d:a8:27:13:5d:3d:45:5c:68:82:
86:05:a1:93:0f:8b:cf:4b:0c:26:c9:46:a3:52:3f:6b:c4:13:
d6:c5:b0:3b:2c:80:33:58:82:a1:c7:57:73:3e:4b:54:99:44:
32:d3:67:1b:bc:20:5c:e5:a7:ce:12:54:b5:1e:f8:34:10:8f:
06:f5:21:f5:99:b8:d3:93:0b:ef:6e:ad:06:3b:ff:f3:90:b9:
2b:5e:af:71:bc:13:d1:6d:1e:83:73:bf:d7:89:e4:83:bd:14:
7b:a2:1b:31:c5:ef:3c:89:61:b9:31:79:34:4d:77:48:8b:bc:
e7:60:ad:23:83:fe:43:4e:96:97:de:e2:31:88:d4:18:8c:44:
f1:19:a7:23:5f:eb:a1:f9:fe:e1:5b:64:c3:95:d9:f4:37:bc:
e5:b0:62:6e:4d:4c:73:4b:e2:85:5d:dd:4d:2a:cb:af:f0:48:
dd:c4:d0:3f:dd:38:90:af:39:e1:44:ea:3e:7d:28:b5:40:28:
44:55:d7:0f:78:53:43:56:78:ae:d7:6e:a5:47:f8:1e:ba:1f:
5e:fa:a7:a8:ca:e0:0d:7d:1d:b2:20:08:09:d6:82:6a:4d:df:
28:ce:5b:55:95:9a:f9:25:0e:d2:93:6a:bd:68:c6:a9:23:c3:
25:41:e5:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTskFuI8BVVdjMFmNjWJitMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZjQ3NTM5ZjE5ZjBmNWExM2IwYjY5YmM3OTYyNzhmMGJm
NGFlYTQwHhcNMjUwNzI5MDEwMDQ3WhcNMjUwNzMwMDEwMDQ3WjAzMTEwLwYDVQQD
EygwYWEzNTdmN2UzNWQzYTY5YzljMTg3YWNlZDlmZjU4ZDk5Y2M1MTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhqagf8aMCpaK1CvtxFwLj3Z23jb
YefHdI/pKbvWZwhOo6HUP/fqugbhfO4NLfDAJpWk+GSZ+LB0fHThNvJ0n9/1Zv4d
J61BOK2zsjR3cre+xXXUTfU0FLHt8tLoaIUZC6y3jmwUkJiVOS9Mlt8BG3TYd6Am
gf28fg+ZRkpVgJhXt5lsYdyQAI+x9x0Xh8KBXJVkHtbaXRfbjQUzEvAFSd/rSogd
JluKOnYTDECc7AOH+fLRu58cYIbYVqrcKd1FpOjdpkufUAYbHibX3XLYeeYl632P
4/x2wgncsrrOLLIgwlzzVqzPW4pFPbL0KYLRWwzvmE0ndHVwYxkXLUPxTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqjV/fjXTppycGHrO2f9Y2ZzFFbMB8GA1UdIwQY
MBaAFHL0dTnxnw9aE7C2m8eWJ48L9K6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81NzNkOWQtMzJhZC00NmZmLWFlMjMt
MmVhNmVjMjg1YTE1LzEvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81NzNkOWQtMzJhZC00NmZmLWFlMjMtMmVhNmVjMjg1YTE1
LzEvY3ZSMU9mR2ZEMW9Uc0xhYng1WW5qd3YwcnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRfiEa6V
AcVtqCcTXT1FXGiChgWhkw+Lz0sMJslGo1I/a8QT1sWwOyyAM1iCocdXcz5LVJlE
MtNnG7wgXOWnzhJUtR74NBCPBvUh9Zm405ML726tBjv/85C5K16vcbwT0W0eg3O/
14nkg70Ue6IbMcXvPIlhuTF5NE13SIu852CtI4P+Q06Wl97iMYjUGIxE8RmnI1/r
ofn+4Vtkw5XZ9De85bBibk1Mc0vihV3dTSrLr/BI3cTQP904kK854UTqPn0otUAo
RFXXD3hTQ1Z4rtdupUf4HrofXvqnqMrgDX0dsiAICdaCak3fKM5bVZWa+SUO0pNq
vWjGqSPDJUHlCg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 06:03:11 2025 by rpki-client