Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
File: CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft (raw, json)
Hash identifier: AR5qW7jOCb2eYE2TE6vp/xnLwQlSrIv2js4CocjqlSM=
Subject key identifier: C6:21:28:3E:F9:77:B3:7F:01:15:21:98:EC:D5:0E:32:F6:47:48:86
Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
Certificate issuer: /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Certificate serial: 0197499EE14B69ED7D350C30E256B4A55F55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 09:00:38 +0000
Manifest this update: Sat 07 Jun 2025 09:00:38 +0000
Manifest next update: Sun 08 Jun 2025 09:00:38 +0000
Files and hashes: 1: CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl (hash: E1myF7gTerAX2dQOeBRmXfNSbDnPlICFzPa2x9i6taw=)
2: eEiaQt6Ze9WxjrZL-d6aNqKJOCY.roa (hash: uCPWdRUrjQcc9uIJEuG8eyiVfoHC/vX0+wXoSm20VqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:e1:4b:69:ed:7d:35:0c:30:e2:56:b4:a5:5f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Validity
Not Before: Jun 7 09:00:38 2025 GMT
Not After : Jun 8 09:00:38 2025 GMT
Subject: CN=c621283ef977b37f01152198ecd50e32f6474886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3d:57:69:0b:ff:70:35:7c:87:60:2c:55:99:
08:5f:fe:8e:45:eb:a5:a3:aa:2e:a6:49:2c:b2:cf:
c3:9c:9e:f7:dd:2b:b5:be:7b:a4:39:10:44:50:52:
b5:d0:70:10:64:d8:1b:70:aa:75:c0:d6:36:be:1a:
c9:92:25:41:5e:3a:b8:ed:c4:ed:31:98:1a:78:18:
2d:a8:a9:76:26:a0:d8:25:55:0f:1c:f5:10:06:02:
80:d2:73:dc:a9:9a:b1:92:e8:c1:d5:92:19:fc:0d:
ae:68:b0:5e:c5:61:c9:2f:58:cd:25:b8:5a:d6:51:
03:06:92:a3:94:94:15:5c:c6:1f:77:a3:1b:b9:d1:
b8:9d:37:8f:6a:8e:e8:69:bd:64:ef:8f:e0:35:ee:
0c:08:18:fe:28:7d:38:d0:97:a7:e7:54:93:b4:36:
db:46:ff:1d:5e:cd:bb:86:e7:eb:6a:86:70:81:e1:
84:a6:ce:35:1f:5e:ab:44:b4:4e:ba:ca:b5:a2:46:
f4:fe:c3:10:86:46:be:fe:3b:3d:10:e4:49:b0:b1:
e2:b3:9f:7c:1f:d7:a9:f8:02:75:58:cf:ac:a8:8b:
16:5f:64:56:ef:24:c2:dc:81:27:1b:65:1d:49:d1:
b8:5c:ff:e0:ff:59:15:ef:c6:eb:d0:77:47:89:30:
dc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:21:28:3E:F9:77:B3:7F:01:15:21:98:EC:D5:0E:32:F6:47:48:86
X509v3 Authority Key Identifier:
keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0e:c9:02:94:1b:c1:67:f9:8c:c4:32:a0:5a:60:b9:e5:7b:
88:dc:d9:65:bb:04:3d:0d:16:8f:f9:c7:20:06:e8:a9:ec:1d:
11:c9:bc:ef:c9:41:80:66:dd:f5:54:eb:ac:aa:d5:c1:0b:bc:
bb:d4:8c:ad:d2:cd:f6:97:0a:35:f2:d6:99:f6:80:21:48:08:
9a:85:57:10:dc:1e:9e:de:61:22:45:b6:b0:94:a0:41:6b:85:
60:5a:8a:27:12:4f:a3:95:7d:e8:e7:7a:08:26:5d:85:39:9b:
c1:6d:a5:3d:e6:14:59:de:5b:3f:d7:81:c7:5d:7d:61:40:1e:
d5:4f:e4:ec:dc:ff:db:6e:62:b1:6d:9e:9a:c2:4b:fa:d4:0e:
10:28:da:28:87:8c:3c:f9:da:8d:44:02:bd:15:c1:85:1e:d6:
a4:9b:8f:f8:36:e3:da:35:6d:05:cc:9a:c3:af:6c:a2:3d:55:
d6:78:79:f7:01:fa:12:3e:12:4b:8d:3f:7d:0f:f4:7d:1a:e0:
d9:8f:78:81:bc:76:7f:45:77:65:cf:62:b5:52:46:93:f3:6d:
6c:3d:a0:50:70:9c:e4:58:3a:cd:d9:ac:8c:9a:21:75:d2:d4:
93:80:54:cc:ab:1c:e2:99:35:2c:3a:f0:aa:92:e1:4c:75:69:
11:77:bb:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:46 2025 by rpki-client