Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
File: CVZUSY4cx7-M4J6uF6zffIg9W0k.mft (raw, json)
Hash identifier: ceuu+iGdVwV9LxfYuKLQSX9rMx7O7se6zUWuCm8TrfI=
Subject key identifier: 4C:C4:F0:15:2E:31:E3:EE:85:5F:95:EA:A9:34:C5:84:A4:93:9B:B4
Authority key identifier: 09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
Certificate issuer: /CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Certificate serial: 0199239EFBED82A7E4563123D2777A513719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
Manifest number: C5
Signing time: Sun 07 Sep 2025 10:00:45 +0000
Manifest this update: Sun 07 Sep 2025 10:00:45 +0000
Manifest next update: Mon 08 Sep 2025 10:00:45 +0000
Files and hashes: 1: Bk_-tAtBQBDMWsFeWLzWEKqm6r8.roa (hash: WNJKvTpD/DoB8twbES4bI7LJ/l4C3v8zVuuorOHSnjs=)
2: CVZUSY4cx7-M4J6uF6zffIg9W0k.crl (hash: mZOPuvSz3yEaMMJRl0k7gjmWr7Wc1nV3HTatS0KChy8=)
3: QKYY4pu514sUmDk5ewMC9BudeYM.roa (hash: Xw/leKA1IBGEhTPQThy/3jPwmzjFadxqafY3h81jZnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:fb:ed:82:a7:e4:56:31:23:d2:77:7a:51:37:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095654498e1cc7bf8ce09eae17acdf7c883d5b49
Validity
Not Before: Sep 7 10:00:45 2025 GMT
Not After : Sep 8 10:00:45 2025 GMT
Subject: CN=4cc4f0152e31e3ee855f95eaa934c584a4939bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:1e:42:af:19:28:8e:ff:d9:55:00:2b:ed:
28:f2:fa:c8:15:5e:70:e6:f0:c0:7d:5b:14:8e:1f:
13:51:2d:24:1c:27:b3:56:61:24:89:87:e7:d9:08:
38:af:2b:d8:24:75:50:95:d5:14:f4:1f:50:61:ad:
fd:c7:6c:6d:3b:51:6b:21:d6:08:aa:0f:5a:4b:f6:
38:b9:e3:1a:ef:51:42:72:f1:06:64:a0:c8:5c:06:
00:6f:87:a5:5b:b2:f9:b3:80:a8:c0:72:1d:4a:20:
31:a4:77:56:d3:a2:b9:9c:c8:fd:97:32:5f:80:ab:
69:cd:86:67:55:15:29:e1:d4:b5:31:2a:c5:89:34:
70:43:87:fd:62:4d:00:dd:86:87:e7:b4:c7:a6:d2:
60:6a:bf:73:cb:e1:92:ba:5f:6a:b4:0f:65:9f:e3:
ee:e1:1d:70:3a:e3:d4:a4:d4:40:ed:94:9a:fb:52:
9b:cc:9e:05:96:c1:ab:8b:a4:ae:20:92:56:38:99:
d7:69:71:58:cf:07:cf:6c:27:3b:fa:53:01:43:5d:
70:b9:6d:82:a6:b2:4c:90:70:1b:da:8e:5e:ff:db:
5e:0b:21:a3:86:f1:f5:45:d6:b0:f4:f4:56:66:eb:
7b:04:1e:b8:d5:60:7b:4f:d8:e9:62:d2:62:c5:1f:
d9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C4:F0:15:2E:31:E3:EE:85:5F:95:EA:A9:34:C5:84:A4:93:9B:B4
X509v3 Authority Key Identifier:
keyid:09:56:54:49:8E:1C:C7:BF:8C:E0:9E:AE:17:AC:DF:7C:88:3D:5B:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVZUSY4cx7-M4J6uF6zffIg9W0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/02daa4-0874-4f3d-bf22-d1ad54d0c053/1/CVZUSY4cx7-M4J6uF6zffIg9W0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:02:dc:0d:d5:65:aa:1d:1d:4b:58:4b:6d:23:2d:ed:b9:39:
d9:aa:7b:7c:06:7f:99:ea:73:e2:72:b5:16:54:82:5d:a3:a7:
26:99:90:35:79:b0:10:19:e6:2e:3c:d8:f9:16:6d:0a:4e:f8:
c5:10:da:97:84:f1:63:10:76:e1:9c:b1:c1:37:15:a3:30:ea:
15:11:aa:bf:31:49:78:12:bd:d7:91:bd:c0:96:3a:01:be:48:
92:e0:3b:82:19:39:bf:42:50:c5:b1:c9:83:cf:e8:9b:e0:7c:
64:aa:ed:cf:2b:e7:93:b6:ce:9e:28:15:95:57:23:aa:1b:37:
9d:cd:64:3e:ed:29:d9:f2:8a:cb:78:29:3d:1c:b4:7f:57:0e:
a1:50:7f:ba:3f:20:15:24:91:c7:76:72:e4:bb:0e:a9:d5:e5:
03:1a:44:0a:1e:f4:85:eb:38:27:bc:43:80:60:7f:a0:ad:ea:
1f:fc:e0:91:43:0a:18:9f:8c:fc:4f:75:34:83:14:77:1d:2b:
d9:51:7c:12:8e:8a:f7:73:93:2b:63:33:b2:95:45:dd:31:e3:
f2:d8:73:68:5f:b3:8c:a1:97:b7:75:d0:96:58:af:0c:88:4d:
88:4b:70:51:b0:f1:1b:8f:06:44:9d:27:75:bc:0e:6a:92:55:
6f:dc:d8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:11 2025 by rpki-client