Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.mft (raw, json)
Hash identifier: KT/CYSXOysOy+hOPf6/OpAWqEHl/Z8JUwehbzBWXeNU=
Subject key identifier: 7B:AE:26:80:68:96:FC:65:52:27:F8:A3:7E:3E:5E:AF:FE:C1:EF:DF
Authority key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Certificate issuer: /CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Certificate serial: 01974666E9B515A42FD315E2CD01E485007C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
Manifest number: 0C5B
Signing time: Fri 06 Jun 2025 18:00:38 +0000
Manifest this update: Fri 06 Jun 2025 18:00:38 +0000
Manifest next update: Sat 07 Jun 2025 18:00:38 +0000
Files and hashes: 1: 5kFz87V3cREdddc3AsaZImesrc4.roa (hash: GMf/VeYSaAQLAvigW84goiaYuSw8QRXcx94y9RzK0U8=)
2: CVi1S_7piWxK2n3Bizt_lxnaBGs.crl (hash: WU4UG6OzpH7sA2+tn/IFVo6eYhcwujLHTMsAtoR3guU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:e9:b5:15:a4:2f:d3:15:e2:cd:01:e4:85:00:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Validity
Not Before: Jun 6 18:00:38 2025 GMT
Not After : Jun 7 18:00:38 2025 GMT
Subject: CN=7bae26806896fc655227f8a37e3e5eaffec1efdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:d8:5d:6e:f5:17:9a:5a:98:4c:ca:88:69:
f4:c6:a1:21:db:d1:04:17:14:85:8d:31:ce:c7:1e:
f9:f9:e6:a8:5f:e0:f3:f8:92:5d:cb:99:d1:bc:12:
16:f5:0c:dc:1d:37:62:fe:33:0f:22:de:e0:ed:ff:
92:60:94:80:75:5f:1e:c9:b9:bb:84:93:e6:75:1d:
88:91:1f:e7:a8:f8:87:7d:8e:95:2a:82:3b:c9:2f:
2b:61:db:bc:98:10:20:7f:f1:02:47:de:48:b2:6b:
33:76:4e:ae:22:77:86:68:5c:ea:ec:e9:79:9b:d4:
7a:e6:6c:d9:ff:98:0a:7f:b6:35:46:8e:6e:7d:b2:
66:63:94:8f:45:f8:66:5d:21:82:31:3f:2a:83:ad:
af:b7:51:06:f2:8c:9f:fd:ea:69:04:38:75:2e:7c:
ae:4b:7f:e2:71:7a:4e:56:1b:d7:bb:df:2c:02:2f:
7c:ed:fe:eb:88:a9:3e:c8:ce:01:eb:59:53:92:e0:
38:50:b5:7b:a0:20:7f:04:6f:a4:19:d2:51:c9:db:
82:ab:d9:de:58:ba:1b:11:29:e3:f5:fb:cb:7d:c1:
25:aa:ef:7d:c8:28:0a:9d:e3:b8:cb:e5:04:c4:f3:
b4:1c:47:16:11:6f:46:b1:0f:84:60:9a:0c:e5:82:
38:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AE:26:80:68:96:FC:65:52:27:F8:A3:7E:3E:5E:AF:FE:C1:EF:DF
X509v3 Authority Key Identifier:
keyid:09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:02:ed:ff:91:af:d5:6d:97:21:0c:eb:3a:1c:f4:df:7c:a0:
80:c2:5b:55:88:c4:d2:b8:14:3a:3a:17:71:2c:34:aa:81:5e:
24:e7:40:2f:ed:a9:39:08:58:35:54:3f:f3:0c:8f:2c:92:31:
9a:f1:97:ff:bd:34:bd:01:f7:2e:4e:d5:0b:ae:78:23:d4:09:
83:98:fd:e0:6d:4a:c0:e4:0b:20:a6:f2:63:28:bd:ee:d5:ce:
9a:bd:4c:03:97:3c:2f:b0:51:68:12:d7:b4:04:5d:ac:31:a4:
26:4a:87:22:69:4b:6e:4b:46:b4:ba:7b:85:fe:2b:43:fd:31:
e9:75:dd:8a:20:79:a4:12:f7:3c:83:cc:fd:ad:1e:fc:57:d1:
0a:b9:e1:53:9b:8e:48:10:f9:2f:44:9a:79:00:72:c7:73:8f:
2e:7c:ef:af:54:81:99:18:06:6c:8e:81:32:54:42:8e:80:b4:
b3:28:0f:9c:50:30:a0:c9:12:52:7a:93:b6:df:93:66:95:8f:
a8:24:62:33:da:a0:cb:7c:40:23:c8:4a:33:08:c2:19:e2:bb:
1b:c2:0d:2a:18:4f:fa:a4:66:a8:ba:24:75:ef:12:2f:42:7b:
f5:66:ef:f6:59:c9:a8:fd:a5:1f:93:41:6f:c0:5c:38:67:90:
1c:b7:5f:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:08 2025 by rpki-client