Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: xnqbqz/UgDVs1DW+gpx6fz3Z1Qg4jUjj5kfFdoF8cWw=
Subject key identifier: 91:40:4A:3E:22:B6:39:3B:51:F6:21:35:85:1A:D4:41:92:84:C9:32
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 019849664E6E7782795AB61B241C58AE6467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 1593
Signing time: Sun 27 Jul 2025 01:01:38 +0000
Manifest this update: Sun 27 Jul 2025 01:01:38 +0000
Manifest next update: Mon 28 Jul 2025 01:01:38 +0000
Files and hashes: 1: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: YpYW+W3FS1Ghtp4mzFQ+DV+A94YSp0t+++OMb3aaPc8=)
2: dh_JgCZHkTokMGRr7H9M3cKhoRc.roa (hash: 4Kx8qkmvFu9/ph3LEnJvdO/hVDQr2VoTVCm1ptdvoEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:4e:6e:77:82:79:5a:b6:1b:24:1c:58:ae:64:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Jul 27 01:01:38 2025 GMT
Not After : Jul 28 01:01:38 2025 GMT
Subject: CN=91404a3e22b6393b51f62135851ad4419284c932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5a:5f:29:8e:1f:00:3e:43:6e:57:9d:94:8d:
6d:bb:03:4f:5a:8f:83:3b:dd:33:8d:f5:45:fc:62:
dc:4d:05:01:78:e2:1f:b1:15:da:e0:16:8f:89:83:
b7:d0:64:b3:6a:31:28:2d:f1:4d:9b:94:44:a9:02:
bd:53:e4:a2:68:74:ed:a0:fd:a1:2c:79:39:04:15:
62:52:d4:15:cd:7a:65:a0:78:d1:33:d7:76:ad:3c:
31:06:3b:89:a5:b2:4a:e0:95:f5:76:6b:51:24:8a:
cb:9a:ac:68:66:02:38:7e:c7:b5:57:ac:26:c7:a8:
74:ae:60:5b:96:91:02:43:62:a4:bf:4b:36:08:e9:
cf:4d:ab:62:53:3f:3e:d8:97:f1:9f:08:1b:4c:ce:
20:60:cd:a7:b3:ab:85:5e:93:5b:82:25:31:11:29:
29:02:47:62:20:2c:cb:11:03:65:a3:f9:a5:87:d1:
1c:43:58:b7:34:61:f9:69:bb:a1:ed:18:9c:4e:da:
0d:54:4b:fb:a5:12:47:33:08:f4:63:ce:e1:24:e1:
68:41:c8:42:bc:37:aa:68:3d:ba:79:64:52:fc:4c:
04:b5:45:35:b9:f9:5a:a1:7e:35:08:b6:c1:97:f4:
7f:f9:f3:3a:f6:90:60:19:84:cf:3f:a6:de:70:aa:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:40:4A:3E:22:B6:39:3B:51:F6:21:35:85:1A:D4:41:92:84:C9:32
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5e:f7:97:61:eb:60:71:c1:5e:8a:8e:62:21:b8:32:65:4d:
55:50:a6:39:3c:60:0a:e6:fc:f2:16:66:33:2f:29:dd:f2:62:
1b:5b:74:cf:52:e1:da:a4:56:38:42:6e:4f:1d:90:49:07:47:
70:98:34:af:49:49:f7:49:1e:48:ac:4b:d0:b1:b3:45:9c:d0:
26:38:31:4e:15:f5:5a:d0:91:7f:a2:84:c2:34:ff:ac:8b:75:
b2:e6:c3:c1:df:b6:b4:fd:76:b7:51:33:96:ec:d1:f5:0d:91:
4d:df:24:ef:39:d6:42:94:75:29:1b:19:2d:7e:e9:d3:f8:ae:
32:23:50:51:20:1d:fb:16:91:9d:7a:c7:7d:36:3a:1b:5f:7d:
a4:19:70:de:06:bd:76:42:5c:cd:3e:05:e8:90:03:94:48:93:
15:f1:8b:be:68:b9:58:d7:86:a5:51:16:92:6f:17:81:b6:83:
f2:da:3f:07:ae:df:69:68:78:c2:0d:ab:94:f3:37:d4:0a:00:
3d:d9:bd:13:4f:25:6e:c7:db:68:c6:98:46:14:f4:62:37:85:
ba:59:80:d3:68:fb:39:d0:3f:3b:19:6f:92:4b:7f:5b:65:cf:
0c:f3:1e:0b:de:a3:47:a5:d9:51:8e:cf:7d:ff:ef:e4:a1:b1:
14:cf:43:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:38 2025 by rpki-client