Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
File: _cv3oqQ7GA1yKzdjHoea-huaXts.mft (raw, json)
Hash identifier: 0cEo9B2NuprtDeQiecbZrzepDgN1twgi7tm29gFqDCg=
Subject key identifier: 1C:EA:D8:1D:37:E7:AC:17:0A:EC:70:89:8E:28:CA:37:76:03:65:35
Authority key identifier: FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
Certificate issuer: /CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Certificate serial: 01984A417829CFF862DE01F7198472ACDB41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 05:01:00 +0000
Manifest this update: Sun 27 Jul 2025 05:01:00 +0000
Manifest next update: Mon 28 Jul 2025 05:01:00 +0000
Files and hashes: 1: _cv3oqQ7GA1yKzdjHoea-huaXts.crl (hash: SaU600i+EqUpZTYXRcRlJSMnf7eEd3sM/gT3jr0qSvo=)
2: t-4cbJi-Ew3u3ipzgXiueic4IR4.roa (hash: bVpOfO45u9FlgP+T8GAth2ynXzQ4yeosDEHag/U9nSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:78:29:cf:f8:62:de:01:f7:19:84:72:ac:db:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Validity
Not Before: Jul 27 05:01:00 2025 GMT
Not After : Jul 28 05:01:00 2025 GMT
Subject: CN=1cead81d37e7ac170aec70898e28ca3776036535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:7c:99:d4:ac:d4:92:73:5e:97:03:0c:48:
f3:eb:f4:e2:83:1f:9e:61:df:e3:6a:ff:11:c2:d5:
f7:5f:7b:6c:66:69:a0:2e:8a:b9:19:92:24:f4:6c:
20:8f:7c:90:d1:ae:b2:3f:9c:8c:6f:55:cb:da:46:
12:f9:7f:7d:76:1b:d9:d8:cb:ea:2a:a9:76:ab:a7:
3c:a8:6a:e6:f5:c5:1b:d2:27:25:f0:ee:9d:47:6d:
81:be:f7:a9:74:a3:6c:b1:95:06:5a:37:96:9a:f3:
3b:82:1f:2c:64:39:48:6b:5e:1a:4a:14:26:99:dd:
c1:bd:da:33:56:5a:75:6f:60:b7:22:cd:13:a7:bf:
51:0c:19:55:91:28:ca:0a:28:e9:ec:07:0a:d8:09:
9c:29:63:33:df:4f:fa:00:93:97:45:02:08:a2:db:
4b:55:35:ac:11:a9:c4:7d:06:ec:fd:52:50:21:d5:
b0:11:0b:1b:77:7d:b5:cd:35:33:0c:83:15:a2:28:
5e:44:f0:43:4a:0a:9c:d7:0b:51:de:70:01:ff:68:
b1:27:bd:99:ba:32:df:ac:f9:30:af:8a:7b:4a:92:
7a:b2:de:4c:e3:f5:65:84:5e:11:c0:cd:1b:59:a5:
1a:00:ca:4a:1e:59:f5:fb:cb:a3:cb:3e:4e:80:75:
f9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EA:D8:1D:37:E7:AC:17:0A:EC:70:89:8E:28:CA:37:76:03:65:35
X509v3 Authority Key Identifier:
keyid:FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a5:54:88:66:2e:e4:5d:05:e1:74:49:e5:00:27:b1:15:4c:
3a:f0:51:df:16:68:a1:d4:e6:a9:17:23:7d:b4:ef:f0:ad:d0:
e4:1b:ab:26:a4:49:24:5d:f7:e3:91:64:c9:66:d2:4e:58:63:
d6:9d:41:cb:82:20:ab:35:70:3d:81:7a:ac:34:01:94:46:7b:
c9:b2:88:a8:41:58:8a:71:5d:a7:d0:ca:b3:62:9f:3f:b0:d1:
fc:db:bd:f4:8a:14:f7:b2:17:65:0d:54:73:03:a1:8e:29:10:
ee:5b:6d:9b:71:14:c8:21:bd:61:8f:77:f8:46:66:98:cd:3a:
61:94:6d:6a:10:ec:02:b8:89:ad:e9:e8:98:8c:ad:5e:7f:be:
95:90:70:93:41:a4:83:0c:db:31:c1:7c:3d:a9:fa:4c:20:52:
c9:af:84:e4:95:2e:c2:fe:49:50:ae:86:a8:e5:29:31:ff:08:
60:df:23:00:21:fa:cd:a5:35:55:3f:4c:45:90:1f:cd:7c:71:
70:a8:a0:13:67:ca:20:ab:c5:a2:2d:c5:08:b2:8f:d8:a6:5c:
ce:ed:15:ef:65:ce:88:e6:8f:c5:2f:83:51:2c:38:cc:9f:1a:
88:f5:01:2e:59:f2:95:6f:68:7a:42:37:b4:97:b6:c7:6c:4e:
db:89:70:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQXgpz/hi3gH3GYRyrNtBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkY2JmN2EyYTQzYjE4MGQ3MjJiMzc2MzFlODc5YWZhMWI5
YTVlZGIwHhcNMjUwNzI3MDUwMTAwWhcNMjUwNzI4MDUwMTAwWjAzMTEwLwYDVQQD
EygxY2VhZDgxZDM3ZTdhYzE3MGFlYzcwODk4ZTI4Y2EzNzc2MDM2NTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhd8mdSs1JJzXpcDDEjz6/Tigx+e
Yd/jav8RwtX3X3tsZmmgLoq5GZIk9Gwgj3yQ0a6yP5yMb1XL2kYS+X99dhvZ2Mvq
Kql2q6c8qGrm9cUb0icl8O6dR22BvvepdKNssZUGWjeWmvM7gh8sZDlIa14aShQm
md3BvdozVlp1b2C3Is0Tp79RDBlVkSjKCijp7AcK2AmcKWMz30/6AJOXRQIIottL
VTWsEanEfQbs/VJQIdWwEQsbd321zTUzDIMVoiheRPBDSgqc1wtR3nAB/2ixJ72Z
ujLfrPkwr4p7SpJ6st5M4/VlhF4RwM0bWaUaAMpKHln1+8ujyz5OgHX5QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBzq2B0356wXCuxwiY4oyjd2A2U1MB8GA1UdIwQY
MBaAFP3L96KkOxgNcis3Yx6Hmvobml7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mOWE5M2MtMGQ2OS00NGVjLTg0NDUt
ZjU4YTViODhjNzNlLzEvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mOWE5M2MtMGQ2OS00NGVjLTg0NDUtZjU4YTViODhjNzNl
LzEvX2N2M29xUTdHQTF5S3pkakhvZWEtaHVhWHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKVUiGYu
5F0F4XRJ5QAnsRVMOvBR3xZoodTmqRcjfbTv8K3Q5BurJqRJJF3345FkyWbSTlhj
1p1By4IgqzVwPYF6rDQBlEZ7ybKIqEFYinFdp9DKs2KfP7DR/Nu99IoU97IXZQ1U
cwOhjikQ7lttm3EUyCG9YY93+EZmmM06YZRtahDsAriJrenomIytXn++lZBwk0Gk
gwzbMcF8Pan6TCBSya+E5JUuwv5JUK6GqOUpMf8IYN8jACH6zaU1VT9MRZAfzXxx
cKigE2fKIKvFoi3FCLKP2KZczu0V72XOiOaPxS+DUSw4zJ8aiPUBLlnylW9oekI3
tJe2x2xO24lw2A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:54:21 2025 by rpki-client