Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: gpUXVEOYyE6p/2yUH+JDt0fOWf6sqIKkNvKyib/5Y4I=
Subject key identifier: 29:C2:6A:34:9B:D3:FB:06:DE:7A:16:BC:C8:34:4B:2E:4A:F1:0B:94
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 019849657AC1199BE96C882FCC82043137D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 1593
Signing time: Sun 27 Jul 2025 01:00:43 +0000
Manifest this update: Sun 27 Jul 2025 01:00:43 +0000
Manifest next update: Mon 28 Jul 2025 01:00:43 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: CttIQlZ4xCkZ3GUztog+m6jGxNkVsPmUNl9eyfVGSrA=)
2: Gs7jpmfMcoM_7G0YMuDGyfM_OJg.roa (hash: yj4gPBjqELyvepP37xZ0hFdHIhYTiec7NS5/dOABF/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:7a:c1:19:9b:e9:6c:88:2f:cc:82:04:31:37:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Jul 27 01:00:43 2025 GMT
Not After : Jul 28 01:00:43 2025 GMT
Subject: CN=29c26a349bd3fb06de7a16bcc8344b2e4af10b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fa:e6:75:bf:9b:76:b1:9b:50:cd:f1:e0:3d:
19:74:56:07:06:df:9f:41:50:35:b8:a6:d0:f0:86:
cf:16:76:b8:43:ca:28:c6:e9:ef:c5:40:5c:a7:2f:
23:a9:af:f6:ea:d6:d1:b8:fc:19:fb:5b:ac:c3:14:
f0:9c:15:f3:43:1a:c4:7b:66:8d:6a:77:7e:b6:60:
eb:c1:6a:01:92:f6:9f:ea:43:28:6d:80:ab:fd:fe:
5f:ac:8a:67:65:fc:cf:e5:bd:9f:86:18:61:b8:87:
51:24:90:1b:76:72:16:51:46:93:bb:80:be:74:b2:
2c:82:3b:df:7c:1a:62:5d:95:af:ff:3a:02:ab:1f:
aa:af:52:0a:e7:d1:a2:4e:3b:1f:ed:1c:94:62:58:
31:d4:70:f9:dd:bf:39:69:97:a4:35:6e:ad:1a:d8:
bb:11:6b:40:38:5e:ca:64:28:e1:1f:ee:08:bf:08:
88:d2:3d:07:82:cc:23:20:d7:e5:b7:99:0b:c0:16:
56:2d:03:64:79:c3:c6:83:66:55:6a:e9:07:d4:e3:
e2:ad:47:d4:a7:cf:c4:5c:f5:ba:8c:0c:b4:d9:f1:
37:16:48:cf:02:3d:ed:78:45:81:93:e0:0b:d7:07:
0b:4b:10:9c:ce:b1:d2:6b:e9:9c:dd:65:41:c0:e5:
73:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C2:6A:34:9B:D3:FB:06:DE:7A:16:BC:C8:34:4B:2E:4A:F1:0B:94
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a6:c2:d7:f9:b5:58:8d:86:56:61:d4:67:6d:da:c3:17:10:
41:6e:05:2a:a3:b3:b7:bb:f9:03:13:87:9c:1d:6b:2b:2a:80:
ce:2d:cc:22:97:78:f5:32:21:ba:9d:03:0d:d3:16:d6:6b:d7:
ac:67:ca:3c:c5:d5:d9:3f:5d:f6:b6:12:47:e4:9d:75:2c:18:
31:e6:73:c0:a2:2a:f9:bd:01:1f:24:0f:9a:d1:76:a9:ff:d3:
fa:3b:e2:37:00:4e:5c:cc:0d:ff:ac:24:4c:b6:7f:06:a8:a1:
cf:dc:f5:13:28:99:52:ce:47:8e:fb:f6:50:29:f3:39:44:31:
1a:7f:d3:fa:75:21:17:bd:35:6b:e5:91:3b:2a:d8:aa:71:06:
e3:10:05:b8:34:61:ee:36:6d:4f:ef:d5:56:6c:bb:e8:85:67:
3b:73:28:6a:99:8b:06:af:1b:16:6b:26:cd:60:65:82:5c:c2:
a4:09:bc:81:58:a0:fa:21:fb:6b:e1:31:71:e6:bd:db:24:35:
8a:5b:7e:91:bf:11:7c:14:ad:78:27:6d:c1:d3:9b:cb:a7:67:
8a:18:63:8f:ed:ca:8c:dc:38:ea:f0:ef:8e:e6:07:41:2c:60:
a2:e1:72:25:70:ec:8f:5f:0b:85:c7:07:07:a5:27:12:4d:f3:
ca:cb:c0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:27:24 2025 by rpki-client