Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json)
Hash identifier: Q3ptiP6bVNf8bj5FzIuLuidm3QqgdYUqdbxtd+qHeAQ=
Subject key identifier: ED:71:98:6B:70:71:E8:00:25:D3:64:B6:D0:4A:FE:DA:2E:60:6B:37
Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Certificate serial: 0198458969045B134BE2702CA10F22C7C1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
Manifest number: 08EE
Signing time: Sat 26 Jul 2025 07:01:29 +0000
Manifest this update: Sat 26 Jul 2025 07:01:29 +0000
Manifest next update: Sun 27 Jul 2025 07:01:29 +0000
Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: zH9/lUf/Rbs4f5Fhhj/a/P0plI9GKTc2MGzea7GveJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:69:04:5b:13:4b:e2:70:2c:a1:0f:22:c7:c1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd
Validity
Not Before: Jul 26 07:01:29 2025 GMT
Not After : Jul 27 07:01:29 2025 GMT
Subject: CN=ed71986b7071e80025d364b6d04afeda2e606b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:80:db:8e:2f:bb:3a:65:66:95:51:ed:31:
e9:e3:95:25:91:ee:57:1d:d6:83:73:af:8d:f1:08:
e0:3c:df:f1:95:59:08:60:7f:5a:bf:fd:15:8d:a2:
e9:32:36:88:82:fa:4a:43:25:b9:28:51:f0:52:c5:
b4:0c:c1:5a:1b:58:b5:80:6d:dc:ec:28:cc:c1:5d:
8f:b7:49:c0:2d:e2:e4:48:fa:8b:33:9d:08:84:d3:
e8:db:5c:2e:31:ee:33:31:8a:3d:05:54:61:ad:24:
f2:9a:8a:51:33:5a:00:7e:51:a3:c3:bc:17:f5:65:
c8:cd:17:bc:3f:8c:00:6e:b8:0e:b5:f9:29:8f:a2:
75:3e:fe:7f:82:1f:62:ee:24:95:12:99:ac:6d:8d:
f7:02:42:00:22:b0:09:2f:71:e4:3e:84:d7:0c:27:
1c:06:42:a5:42:b6:ad:9f:c1:a9:d4:4e:ef:51:87:
66:82:8c:ac:f3:60:f3:e0:8b:cd:2f:20:b2:4e:30:
75:e9:53:e7:61:bf:b7:6d:62:50:bc:b0:38:cd:28:
57:47:c7:eb:ed:54:b9:fb:d5:fe:d5:da:06:98:74:
4f:c2:3b:77:a2:16:f8:24:70:e2:b3:7f:15:a0:3e:
d9:a9:b1:4b:e3:80:9e:89:76:4f:42:c2:06:74:ea:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:71:98:6B:70:71:E8:00:25:D3:64:B6:D0:4A:FE:DA:2E:60:6B:37
X509v3 Authority Key Identifier:
keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9c:10:c2:13:93:30:a5:9a:59:07:5b:f7:4e:59:19:09:98:
dc:e5:3a:67:90:23:77:a1:f0:a6:ff:58:ed:54:1b:42:81:61:
11:bb:96:97:a1:f4:d0:74:20:23:7e:bb:c2:1b:30:49:f8:ef:
62:5d:e9:7e:52:29:66:1f:53:d0:ef:72:67:0f:36:7b:31:df:
46:29:fc:5f:60:63:9c:e1:e9:1a:e2:d8:93:2c:6f:26:9b:8c:
e2:4d:2a:b4:14:9d:09:f5:29:d1:bc:c5:6a:8a:f5:13:83:04:
90:ea:91:a6:52:82:2f:7b:9d:4b:3c:de:6c:54:a8:42:77:d0:
41:87:50:38:62:62:0d:a1:f6:f4:d1:3b:6b:e2:2e:92:18:4d:
6a:d6:1a:24:19:fa:e9:0b:81:a9:c2:80:ae:7b:87:74:20:08:
81:2d:7f:9f:8e:b1:66:4b:e0:83:85:96:21:4f:d0:99:3e:d0:
da:55:6f:60:50:1a:01:fb:ff:a7:86:40:29:01:41:74:3f:7a:
54:84:dd:dc:8f:b4:84:3f:ea:97:e1:88:e2:a8:c7:24:9a:ab:
cb:b6:24:5e:29:15:da:e3:97:fc:01:0a:72:b6:3e:ee:0f:00:
0f:f2:45:7c:d9:45:11:a6:3b:ba:23:4c:00:00:a3:ce:45:0f:
e8:5f:e9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:28:57 2025 by rpki-client