Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: fRiF7unqUB7BAiL0irnOmeW7HyC7VIk/TCBdzxaiXjQ=
Subject key identifier: DE:3A:0C:E3:FD:2D:B2:0D:6B:BA:1B:0F:1F:88:C4:6A:91:03:D5:10
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 01965EA866047A7FA1106D5249D76B1A67F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 1495
Signing time: Tue 22 Apr 2025 18:00:16 +0000
Manifest this update: Tue 22 Apr 2025 18:00:16 +0000
Manifest next update: Wed 23 Apr 2025 18:00:16 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: CtuwilHlHYaRQD0JqSpXNRTTVPet2KlR5K49mKFVmYw=)
2: Gs7jpmfMcoM_7G0YMuDGyfM_OJg.roa (hash: yj4gPBjqELyvepP37xZ0hFdHIhYTiec7NS5/dOABF/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:a8:66:04:7a:7f:a1:10:6d:52:49:d7:6b:1a:67:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Apr 22 18:00:16 2025 GMT
Not After : Apr 23 18:00:16 2025 GMT
Subject: CN=de3a0ce3fd2db20d6bba1b0f1f88c46a9103d510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ca:87:02:ed:36:51:69:b9:a7:4e:22:6a:1d:
ea:87:85:85:11:cc:98:e5:f4:eb:d3:96:59:67:c8:
2c:e5:3d:df:f4:64:35:b0:17:85:39:84:92:a8:31:
3c:74:8c:55:ec:16:05:e7:2e:9e:eb:07:bd:d5:f7:
fb:f3:71:a2:dc:2a:d2:2d:e9:4e:4a:4b:c9:54:a3:
59:d5:86:21:cd:64:1b:52:11:0b:3f:d8:b9:06:49:
40:3f:a8:c2:6f:90:e6:1f:b6:46:35:09:23:e9:33:
18:b8:6b:da:f5:11:a5:33:43:fc:74:3e:7e:65:62:
f1:d9:5c:8d:ae:28:74:69:f0:6f:11:e1:9f:44:92:
05:99:f0:01:b0:28:3c:46:6e:44:cc:e6:a2:9c:64:
4f:07:3c:d9:b0:ef:74:d8:a3:5f:04:11:a6:2d:43:
cb:97:0b:03:2f:b4:c0:3a:cc:d8:79:9d:91:bd:e1:
33:78:55:8f:dc:ab:c3:8f:ee:79:64:b5:18:3e:e2:
75:0a:2b:be:14:3e:02:6e:78:98:18:1e:50:9f:4b:
2c:f0:ac:a5:94:f9:1a:2b:e1:ef:4b:ab:bd:b7:b8:
ee:93:8c:87:dd:2f:ee:ab:2f:84:a8:ea:d2:5a:e9:
5d:5b:03:3f:32:1e:61:4d:21:db:b9:1b:1d:f1:7c:
97:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3A:0C:E3:FD:2D:B2:0D:6B:BA:1B:0F:1F:88:C4:6A:91:03:D5:10
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:fc:d2:d4:71:b3:8d:ac:58:07:1a:ac:75:e8:e4:78:91:00:
c9:36:f8:39:eb:cc:3e:4a:b1:82:cf:91:e3:9c:a0:56:61:5e:
c8:cd:15:3f:b6:b6:7e:7f:b6:04:7a:ae:fa:fa:25:4d:c2:37:
20:0e:fb:0e:69:16:07:1d:59:82:f1:f6:eb:40:1e:4e:83:32:
cf:c2:2b:26:65:27:5a:e1:71:92:9e:f7:13:19:32:8b:66:98:
91:23:e9:16:a9:a3:45:78:47:02:dd:60:e5:d2:38:5c:95:d4:
4a:15:2d:a5:5d:6e:38:ef:1a:88:e6:a4:23:3e:f4:6b:ea:6e:
30:bb:b5:a3:21:e7:31:58:e0:78:11:27:d0:bb:ce:54:b1:44:
f9:c2:f6:ed:86:09:06:04:26:53:d6:4a:61:0b:94:24:a3:54:
a2:ce:97:99:dc:ed:a1:cf:b9:db:bd:e8:1a:cd:5b:73:be:d7:
94:a5:c4:36:03:47:51:63:93:31:6f:ee:01:4b:f8:38:a3:59:
8c:f8:0d:29:8c:15:84:6b:03:6e:f7:de:a6:28:61:82:60:01:
e9:1a:ea:b2:cf:6e:cd:fd:5c:39:fa:95:7a:6c:4a:d8:2c:65:
ed:e9:32:76:55:ea:8e:42:50:f8:61:f6:25:d4:5b:af:f8:d3:
93:5f:5b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:19 2025 by rpki-client