Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
File: CVkO754dGvi3LlGOxsz1nNf3UfU.mft (raw, json)
Hash identifier: t5bf3Io7k20pn/f6q8divlspQIx/1agINMt0ZvtvGDI=
Subject key identifier: 8C:D4:6C:F4:D6:B9:38:7B:87:9D:EC:77:8A:C1:0B:A9:41:4C:25:E9
Authority key identifier: 09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
Certificate issuer: /CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Certificate serial: 019A70DBFD4399297D0027DCD0E5A8711260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 03:00:56 +0000
Manifest this update: Tue 11 Nov 2025 03:00:56 +0000
Manifest next update: Wed 12 Nov 2025 03:00:56 +0000
Files and hashes: 1: 1NnPIelPhTu2KqOrRaVheTjGDtA.roa (hash: rysz73IInmOVJuH+riwA3J47+EGtI1eXu44kPUE1b4E=)
2: CVkO754dGvi3LlGOxsz1nNf3UfU.crl (hash: 1RxHj4ApeNTUfDSmxNbQVZiHsKP0UIxbkMw0sPsDI7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:fd:43:99:29:7d:00:27:dc:d0:e5:a8:71:12:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09590eef9e1d1af8b72e518ec6ccf59cd7f751f5
Validity
Not Before: Nov 11 03:00:56 2025 GMT
Not After : Nov 12 03:00:56 2025 GMT
Subject: CN=8cd46cf4d6b9387b879dec778ac10ba9414c25e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:f0:5b:5a:dd:ba:ca:67:1e:b3:3a:55:32:
2d:40:4c:4d:e4:3b:9d:5e:f0:34:4e:fe:2b:22:dc:
7c:5c:cb:60:e4:8d:e0:27:8a:53:cb:40:31:63:b9:
15:3e:ea:29:76:91:0a:b2:ae:b8:51:bc:64:0f:65:
28:70:55:da:6a:10:b0:5a:58:46:f4:27:a2:36:61:
e9:89:c9:d4:19:40:a8:21:9d:cf:6c:5d:00:43:e3:
16:d8:aa:ae:7d:bf:71:d0:79:ed:e3:3b:d7:3c:df:
76:e8:9b:bc:a9:cb:65:9d:ef:ee:d4:27:b6:3d:47:
8d:7e:88:d8:a4:c7:cc:ef:c6:9d:8b:7a:39:8b:f1:
a9:44:57:67:0f:ed:ba:64:9c:e2:7c:cd:f6:b5:1b:
62:7a:ac:a5:ec:d7:9e:10:6d:d8:36:11:3b:67:ef:
e3:aa:17:24:e3:a2:71:a0:5d:b0:7b:d0:ab:1e:73:
0f:33:46:8d:4d:8d:b3:44:05:8c:21:66:80:ba:3e:
6c:7a:2c:c5:54:ee:95:2b:c6:fe:44:ab:81:f6:1d:
c4:73:2a:bf:16:42:6b:53:13:39:54:13:96:ef:c5:
b7:45:df:97:79:db:2b:2c:63:a3:1b:c7:0b:69:6b:
63:aa:cb:8d:ca:db:d9:67:20:1f:29:0c:ee:01:c0:
d9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D4:6C:F4:D6:B9:38:7B:87:9D:EC:77:8A:C1:0B:A9:41:4C:25:E9
X509v3 Authority Key Identifier:
keyid:09:59:0E:EF:9E:1D:1A:F8:B7:2E:51:8E:C6:CC:F5:9C:D7:F7:51:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVkO754dGvi3LlGOxsz1nNf3UfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/77f2c5-412a-4e4d-8cbf-e4d8cf733ec9/1/CVkO754dGvi3LlGOxsz1nNf3UfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:da:6a:ac:61:18:84:3b:4f:f6:2f:e9:9e:0a:27:3b:19:16:
e1:2d:29:7b:4d:89:5f:17:f3:30:56:d1:39:87:59:28:a2:b4:
6e:1f:c1:32:35:19:3e:1d:f0:82:29:d8:57:03:6a:f3:ca:c7:
fa:e3:be:c3:8b:b7:ba:01:98:54:6e:51:7a:9c:d9:24:61:c0:
fd:8c:8f:f4:a6:61:b8:c8:9e:3d:af:f6:dd:c2:79:bc:11:a0:
f2:f9:14:72:8b:23:c3:48:87:6c:dc:48:84:1c:16:f2:24:cb:
70:a5:f4:fd:cf:57:5e:83:29:47:b5:de:dc:11:0f:09:26:b3:
61:f2:50:a4:cf:12:aa:6b:eb:4f:78:7a:01:ce:0c:38:4a:fb:
6c:18:6e:ef:ea:6d:91:8b:5d:cd:3e:13:04:e3:73:6e:c3:02:
bf:17:73:33:6e:49:3a:b1:fe:20:49:85:7d:b4:91:59:9b:34:
fd:07:1e:af:67:42:94:97:c2:5c:ff:86:d4:46:2b:a0:61:d6:
8a:cc:81:7a:36:4d:4b:c6:e3:de:4f:fa:a2:f7:51:45:df:71:
97:fc:4d:68:18:c6:03:e9:25:3d:d4:74:d6:ed:c5:3c:45:b8:
46:77:a5:35:d5:d4:97:88:43:bb:f8:68:fa:41:e8:7d:a8:5a:
62:b2:2f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:41 2025 by rpki-client