Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: fjME184MmGGs37YXpenPeZUZQF4xyd7lRSy5eT9c0Os=
Subject key identifier: F9:D4:71:56:59:79:AD:9D:09:6C:1D:24:B1:BE:3C:7D:3B:A9:DB:66
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 019A2289FC95BC06D74C67502661DEE2D845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0DD6
Signing time: Sun 26 Oct 2025 22:00:59 +0000
Manifest this update: Sun 26 Oct 2025 22:00:59 +0000
Manifest next update: Mon 27 Oct 2025 22:00:59 +0000
Files and hashes: 1: 5kFz87V3cREdddc3AsaZImesrc4.roa (hash: GMf/VeYSaAQLAvigW84goiaYuSw8QRXcx94y9RzK0U8=)
2: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: IYnKg/oAqTaMPfIv1ca0hl7o9+wMm3I+GhA6lzd2eFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:fc:95:bc:06:d7:4c:67:50:26:61:de:e2:d8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Oct 26 22:00:59 2025 GMT
Not After : Oct 27 22:00:59 2025 GMT
Subject: CN=f9d471565979ad9d096c1d24b1be3c7d3ba9db66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3c:7a:7b:a6:c2:54:36:8e:7c:58:1a:16:b5:
f8:9f:7c:34:9c:48:58:76:82:9d:82:0d:85:07:e2:
44:07:c4:e2:fc:fd:df:b6:f3:77:ba:9a:6e:83:8b:
cb:0e:69:fb:6b:eb:93:aa:4c:14:dd:5a:9d:d1:44:
bf:59:99:31:0a:da:a6:00:c7:02:d1:6f:b9:ff:31:
f8:e4:77:5d:d5:e9:6d:40:cf:61:9c:13:78:b0:ed:
0c:f9:0a:ed:e9:1e:a5:82:60:58:4b:9b:00:fb:3a:
ee:23:b0:ee:ff:cc:4e:26:18:81:af:22:c9:c6:32:
85:6a:46:6c:1b:c1:d2:66:f1:dd:17:48:2c:47:b1:
b0:02:73:11:c9:4e:88:63:02:03:d7:dc:54:cb:35:
c7:53:87:aa:fa:27:f0:9b:ab:a2:58:4f:a7:1e:b5:
a2:74:84:f2:63:98:94:10:e5:17:6c:b6:a6:5b:ad:
8a:a6:5e:eb:7a:1c:7a:90:73:02:e2:7a:2f:b7:ed:
f8:79:a8:fb:c3:05:34:84:8e:8f:7e:5d:12:58:5b:
4a:cc:9e:d4:41:23:eb:c8:ab:d4:fc:13:e9:b2:d8:
0d:d8:2e:e2:48:ea:3f:5b:b1:24:f3:31:fc:21:1e:
30:da:da:76:a3:74:f4:3d:1a:69:33:4f:b7:62:80:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D4:71:56:59:79:AD:9D:09:6C:1D:24:B1:BE:3C:7D:3B:A9:DB:66
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a8:68:d1:03:44:cb:cc:21:97:23:4c:b3:0b:ec:e4:bd:e4:
08:b8:68:a3:b5:40:1c:9d:e4:f5:a5:ad:bf:ee:72:72:85:cf:
54:61:10:8a:f1:40:d0:32:2f:21:1d:40:a4:01:6e:40:77:ef:
6c:7e:13:f9:58:72:36:5b:20:62:e7:36:79:56:d3:b9:1c:89:
d6:f7:13:78:68:07:b9:81:8c:4b:53:98:43:e4:00:cd:93:d2:
44:32:92:49:14:0c:67:4b:1d:ab:bc:cd:3c:8d:5c:ca:e7:22:
fb:ee:90:c3:fc:5d:81:16:91:c2:b6:50:fc:e6:1c:4b:88:e8:
e7:fe:8a:96:ea:bb:22:3a:ad:26:4a:0b:78:4e:44:c8:24:d2:
31:c4:98:07:7f:9e:b5:bd:65:5e:3c:e8:ec:3e:af:8d:24:53:
fc:ee:32:ef:f5:a7:b5:02:cc:03:a1:d1:3a:05:0e:13:89:25:
9e:41:1a:c7:d7:a2:76:0a:a4:7f:1e:9c:cb:92:c6:fb:1b:79:
ef:c2:1d:18:91:d1:e1:58:f9:66:6a:24:15:29:f2:c2:92:52:
22:5d:1f:03:6b:82:8e:09:bf:e5:18:fb:2b:a6:3c:f8:c4:ef:
70:28:0e:15:d5:44:3c:8d:34:78:5a:71:8a:88:11:7c:16:0e:
b6:97:4c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:14:59 2025 by rpki-client