Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
File: CVZUSY4cx7-M4J6uF6zffIg9W0k.mft (raw, json)
Hash identifier: QDIWbQIS/epOD/2o6S0VV2Tg1KLGPai1noMSJKu4onA=
Subject key identifier: 08:A8:E3:DE:4B:15:5A:5A:36:F9:21:AF:76:4D:B9:65:0F:92:E3:19
Authority key identifier: 09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
Certificate issuer: /CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Certificate serial: 019A71B94CB27789D5075A2E72C1D3AE0766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
Manifest number: 0172
Signing time: Tue 11 Nov 2025 07:02:40 +0000
Manifest this update: Tue 11 Nov 2025 07:02:40 +0000
Manifest next update: Wed 12 Nov 2025 07:02:40 +0000
Files and hashes: 1: Bk_-tAtBQBDMWsFeWLzWEKqm6r8.roa (hash: WNJKvTpD/DoB8twbES4bI7LJ/l4C3v8zVuuorOHSnjs=)
2: CVZUSY4cx7-M4J6uF6zffIg9W0k.crl (hash: 0jBZpXuJyF6YpEx/LqIMY7HnZX687aBm2HW11D8JRUo=)
3: QKYY4pu514sUmDk5ewMC9BudeYM.roa (hash: Xw/leKA1IBGEhTPQThy/3jPwmzjFadxqafY3h81jZnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:4c:b2:77:89:d5:07:5a:2e:72:c1:d3:ae:07:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Validity
Not Before: Nov 11 07:02:40 2025 GMT
Not After : Nov 12 07:02:40 2025 GMT
Subject: CN=08a8e3de4b155a5a36f921af764db9650f92e319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:ce:b7:5c:3f:a0:85:ea:6b:0f:89:4d:ca:
1f:b3:7c:88:f0:be:f2:cb:f0:4d:d7:f6:a7:28:9e:
95:d8:de:b4:94:a7:e6:6d:f8:5d:31:0c:b9:06:1e:
f2:e3:f4:12:93:51:f4:ba:a4:f2:ec:83:df:bd:7f:
db:10:ff:ef:e5:ac:79:9e:5c:ff:98:87:7d:57:ee:
0d:56:af:43:b3:1d:1a:e4:73:a8:1a:a5:db:9e:ce:
eb:9a:b3:99:8c:90:ca:37:f5:d9:21:53:a3:71:a1:
81:13:02:e6:23:64:ae:50:60:13:fd:67:15:f4:d5:
fa:86:85:7c:13:a3:9a:0c:da:49:fd:32:bd:21:d6:
7d:37:97:2e:9b:c5:96:41:87:18:4a:fb:9a:53:e5:
a6:5b:b6:30:ec:56:00:d0:5c:75:cd:4f:6d:25:37:
4f:49:6b:c4:4c:2c:4e:32:e1:4a:bd:49:58:0b:48:
ee:c7:72:0e:4c:8e:ef:ec:fc:d8:14:f4:47:5a:a9:
dd:45:8b:d1:7f:5b:bb:de:4a:6c:d2:41:d3:44:28:
bb:3e:4b:79:70:dd:05:d6:57:28:db:4a:56:ff:f4:
71:71:e3:c0:95:29:6c:36:0e:1b:73:fe:24:4f:ea:
5a:3e:e4:be:6f:85:6c:cc:5f:b3:8d:0d:91:11:ee:
49:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A8:E3:DE:4B:15:5A:5A:36:F9:21:AF:76:4D:B9:65:0F:92:E3:19
X509v3 Authority Key Identifier:
keyid:09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b9:24:ff:9b:15:87:1d:6d:e0:28:5d:b8:90:25:d5:ee:f5:
7f:96:cb:84:c7:7c:07:18:f9:ea:de:3b:6f:68:df:0b:b2:02:
45:79:7c:17:25:e7:54:cd:4d:95:16:91:0a:2f:a9:18:12:d1:
4f:74:46:98:8b:a3:c8:79:be:df:c7:20:23:4c:b0:07:d6:99:
dd:39:db:99:fd:9c:09:d4:8f:ff:3b:ad:17:8c:83:57:92:27:
b8:03:b7:2a:ef:28:bd:90:33:d9:07:0f:16:5d:c8:bd:bf:1b:
3b:7a:d8:f0:6d:ca:43:9f:51:cf:e1:66:00:5c:58:65:f8:db:
ab:a2:50:21:a7:11:28:cf:47:a3:c2:ba:08:94:77:24:80:ab:
8a:29:be:12:7f:8c:7f:dc:f9:76:a2:7f:ef:09:8c:9f:9d:d2:
b1:2b:70:13:e8:27:e8:27:d4:86:fe:8e:d8:ac:aa:b4:06:9a:
78:18:81:ca:c7:8f:c7:0f:13:da:a8:1a:94:0e:89:c1:3c:fe:
88:9f:31:88:1b:73:f8:86:2f:61:17:11:5f:47:e5:ea:fc:86:
b8:b8:96:f9:45:13:8b:10:e5:e5:a2:08:d4:a0:7d:d3:71:10:
ed:a6:5c:a4:66:56:f8:90:84:2d:8b:a6:25:97:57:b2:28:bf:
69:0a:14:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:20 2025 by rpki-client