Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
File: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft (raw, json)
Hash identifier: 7vnzwvlIzoS/RRwI5YM1Yg63JlARD6QqVnhrC++FCgg=
Subject key identifier: FD:D8:2B:27:14:32:A5:51:12:61:50:F1:EF:8D:97:50:12:0A:3D:32
Authority key identifier: 72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
Certificate issuer: /CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Certificate serial: 0197493142E12A77086544A23BE02C8687CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 07:00:54 +0000
Manifest this update: Sat 07 Jun 2025 07:00:54 +0000
Manifest next update: Sun 08 Jun 2025 07:00:54 +0000
Files and hashes: 1: cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl (hash: Fx6qKgN4WOc5jXLkE9jNJXVaTjRySbY+1POzvMUkRNE=)
2: lmn9m784OLvYNEmoODCEhtK7M6Y.roa (hash: SMHhc3f9U107wkgd7T3SBk2Npa8W1MMzuYgHU/NZOn8=)
3: thiVarAMBeEnqBDpZfGbu3w4ANA.roa (hash: dysQvxWNncFFefbso/9XEjKk2c3ldxSqvGZG35iip3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:42:e1:2a:77:08:65:44:a2:3b:e0:2c:86:87:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f47539f19f0f5a13b0b69bc796278f0bf4aea4
Validity
Not Before: Jun 7 07:00:54 2025 GMT
Not After : Jun 8 07:00:54 2025 GMT
Subject: CN=fdd82b271432a551126150f1ef8d9750120a3d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:d9:c6:b3:33:32:ce:70:41:6b:36:30:ea:8b:
c4:b1:bb:e2:b6:3f:b6:c0:c9:77:73:35:3b:99:b5:
29:20:fe:b8:8d:42:f9:7a:46:7d:d9:54:e1:21:c9:
78:d1:13:d0:46:c7:5f:f8:c7:c4:9b:7e:fc:d8:d3:
42:b5:10:38:c2:64:d7:1e:c6:b1:bc:d7:f0:ec:b2:
8a:3a:da:e3:1c:98:1c:a8:dd:a6:46:09:43:5d:43:
13:68:3b:f0:b7:ac:3e:21:49:7c:d1:ca:12:5c:27:
b7:ea:a0:90:c9:f2:59:bf:51:be:6b:8a:9a:23:d5:
ab:b4:aa:24:e8:6e:7d:9e:44:1f:33:2f:e5:56:15:
a2:4d:c8:2f:b8:07:f5:5d:68:b5:f5:f4:a0:c8:ff:
33:88:11:27:2d:02:98:9f:47:03:f5:04:f5:73:7b:
15:2e:87:8e:40:0b:75:15:11:01:f0:0c:99:bf:36:
fa:45:d4:4d:f6:2f:23:38:ce:36:d1:c8:c4:15:bd:
68:95:ef:cf:0b:19:16:40:a3:51:22:0d:af:7f:50:
44:08:d7:3e:e6:5f:a3:24:8c:eb:23:d3:74:e8:83:
6b:fd:d5:30:9b:77:06:d3:e5:30:6e:60:4e:fc:63:
1d:08:21:d1:94:97:11:c0:55:9d:d1:0f:33:5a:e7:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D8:2B:27:14:32:A5:51:12:61:50:F1:EF:8D:97:50:12:0A:3D:32
X509v3 Authority Key Identifier:
keyid:72:F4:75:39:F1:9F:0F:5A:13:B0:B6:9B:C7:96:27:8F:0B:F4:AE:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/573d9d-32ad-46ff-ae23-2ea6ec285a15/1/cvR1OfGfD1oTsLabx5Ynjwv0rqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c6:4e:b9:94:f4:13:0c:60:26:5f:ea:9f:65:36:d1:a0:75:
bc:ca:6b:bb:9c:e8:df:b4:ce:9b:e8:29:4a:99:63:96:c0:51:
70:77:dc:55:aa:4f:90:7f:32:71:12:83:c5:0c:b3:b4:cd:85:
c6:09:3a:c1:8b:11:f8:9e:ca:eb:78:f6:13:1a:4e:19:4c:71:
5c:80:0d:ff:21:9d:89:53:35:be:32:e0:09:72:1e:e4:cf:60:
e2:65:00:fe:53:1a:7a:1a:78:6b:b0:2c:d1:59:2e:07:fc:95:
77:5d:c9:36:2f:0f:9e:9c:37:80:b4:21:32:02:e0:93:0a:3c:
7f:80:2f:ea:aa:4c:a4:d0:f8:15:2f:3b:8a:b2:8a:9c:14:b4:
f0:ab:46:5f:1b:4f:8c:19:3c:c3:9c:71:e9:52:e8:2c:f5:fc:
15:0f:f9:2c:1a:e7:46:33:32:ed:8c:d1:b7:66:64:a2:6b:6a:
e2:c4:e7:ae:42:aa:39:aa:e4:9c:ad:e4:79:82:61:9f:81:21:
db:69:a1:58:ec:ee:4e:42:23:02:10:39:99:3f:b5:6b:50:48:
98:71:6f:e0:f9:ae:4f:8c:c0:97:b9:20:2b:e0:11:3e:d4:c4:
f4:dc:97:dd:39:b7:7f:f9:b3:e5:02:81:a4:13:6a:5b:1e:6b:
cc:32:14:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:27 2025 by rpki-client