Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: 7zpzSn0W8BX5ShGHdOUwqLQ2fFB/ZbYt72N+ZaAgsuo=
Subject key identifier: A1:AA:9D:6A:51:7A:CA:22:A7:7B:06:E9:CD:EB:40:D5:A0:D6:C9:2A
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 019A1EACF1ED5426ADA18C77B81C4C674C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 1686
Signing time: Sun 26 Oct 2025 04:00:41 +0000
Manifest this update: Sun 26 Oct 2025 04:00:41 +0000
Manifest next update: Mon 27 Oct 2025 04:00:41 +0000
Files and hashes: 1: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: EkIdMa7gLTFicJYzfQCcyrNU9DXBbF8ajLr1kFiseKA=)
2: dh_JgCZHkTokMGRr7H9M3cKhoRc.roa (hash: 4Kx8qkmvFu9/ph3LEnJvdO/hVDQr2VoTVCm1ptdvoEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ac:f1:ed:54:26:ad:a1:8c:77:b8:1c:4c:67:4c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Oct 26 04:00:41 2025 GMT
Not After : Oct 27 04:00:41 2025 GMT
Subject: CN=a1aa9d6a517aca22a77b06e9cdeb40d5a0d6c92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:a8:3c:43:ec:61:a4:7c:07:90:3f:43:d6:
bc:2d:90:1d:9f:06:38:c4:e1:fc:35:a4:c0:e1:c8:
5b:16:d0:cf:d4:5e:ba:66:92:9e:bd:e6:09:75:10:
c0:f2:2f:43:08:76:d7:99:a4:d4:0d:6c:a3:b5:2e:
ef:7d:6a:8f:ea:ba:87:ac:bf:93:3c:a6:c5:3b:4e:
84:65:b9:14:69:f2:67:6e:aa:68:b5:fc:7c:ee:59:
8b:0c:d5:cf:75:ce:51:3f:8d:3b:c1:30:5e:6a:ed:
89:f3:a2:5e:3b:52:59:3d:78:46:53:d8:d8:8e:89:
15:63:a8:06:29:9a:95:74:1e:cd:99:39:0e:9b:0e:
5f:ee:59:06:23:2f:d9:c7:6f:cb:95:47:d0:2f:87:
3a:9f:94:84:5e:b1:0a:24:41:f9:57:9d:f4:2d:71:
fc:93:3b:12:b9:be:84:bb:77:81:f3:f5:81:4c:c2:
87:44:14:b9:38:2c:2a:69:29:2e:58:23:bc:17:39:
2c:ce:3a:ff:01:c3:0e:77:01:ef:8c:03:82:b9:18:
42:75:fa:f4:94:c4:d0:57:e6:8b:1c:3f:13:ce:18:
81:32:b3:13:24:48:ba:ce:bb:be:c3:00:51:4e:21:
65:e9:ad:c1:bf:28:bb:0e:45:8c:b9:6a:c1:39:5c:
85:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AA:9D:6A:51:7A:CA:22:A7:7B:06:E9:CD:EB:40:D5:A0:D6:C9:2A
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:37:d0:f1:fc:c0:8f:70:29:fd:38:56:1e:f5:63:54:51:db:
2d:b4:9e:35:19:14:b9:a4:91:26:61:91:da:ff:fd:c7:3d:80:
34:69:6b:2d:ac:70:07:3a:d0:07:a0:57:8e:64:d7:41:69:7a:
2c:11:55:c4:97:61:e6:2e:a8:c4:83:d5:27:5b:bd:5e:9f:55:
7a:54:9f:da:ad:ca:f1:74:b5:25:d9:ec:e2:b7:33:80:b3:87:
f8:4d:2b:4d:b8:cd:3a:f7:b5:1b:7c:be:37:46:7f:30:ef:7f:
f6:7b:9d:47:33:9c:51:73:ff:b2:43:3d:c8:a6:3a:93:d2:ab:
1b:4b:9f:c5:6e:73:c6:4c:6d:5e:cf:7a:80:a7:cd:4e:50:1a:
02:c4:02:81:fc:76:7a:6a:83:cd:e9:f2:9f:87:75:0a:ff:9e:
e7:20:2f:01:62:85:3d:36:f7:a0:7a:d1:9d:c6:7c:79:22:4e:
91:6f:e5:8f:4f:a5:52:52:51:52:59:23:b2:6a:2e:d8:5d:03:
aa:f8:59:30:7c:de:90:09:0f:a2:cd:91:b8:2f:ba:5f:1b:8c:
a8:d5:0e:39:f0:a5:cc:d5:3b:df:23:3c:aa:34:15:56:71:da:
c6:c6:aa:d2:25:c7:79:59:67:29:17:2d:b2:8e:07:71:80:53:
02:ef:01:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoerPHtVCatoYx3uBxMZ0wnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZjdmMTQ3NmZmODI5MWVmYWYyODQ5Y2QzZjIxNDY3MjI2
N2IwMDEwHhcNMjUxMDI2MDQwMDQxWhcNMjUxMDI3MDQwMDQxWjAzMTEwLwYDVQQD
EyhhMWFhOWQ2YTUxN2FjYTIyYTc3YjA2ZTljZGViNDBkNWEwZDZjOTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+SoPEPsYaR8B5A/Q9a8LZAdnwY4
xOH8NaTA4chbFtDP1F66ZpKeveYJdRDA8i9DCHbXmaTUDWyjtS7vfWqP6rqHrL+T
PKbFO06EZbkUafJnbqpotfx87lmLDNXPdc5RP407wTBeau2J86JeO1JZPXhGU9jY
jokVY6gGKZqVdB7NmTkOmw5f7lkGIy/Zx2/LlUfQL4c6n5SEXrEKJEH5V530LXH8
kzsSub6Eu3eB8/WBTMKHRBS5OCwqaSkuWCO8Fzkszjr/AcMOdwHvjAOCuRhCdfr0
lMTQV+aLHD8TzhiBMrMTJEi6zru+wwBRTiFl6a3Bvyi7DkWMuWrBOVyFmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGqnWpResoip3sG6c3rQNWg1skqMB8GA1UdIwQY
MBaAFHL38Udv+Cke+vKEnNPyFGciZ7ABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ZmeFIyXzRLUjc2OG9TYzBfSVVaeUpuc0FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGVjZDEtMWUyYi00MmQ1LWFmNzEt
MzkxZDEwZmY5NDdjLzEvY3ZmeFIyXzRLUjc2OG9TYzBfSVVaeUpuc0FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lOGVjZDEtMWUyYi00MmQ1LWFmNzEtMzkxZDEwZmY5NDdj
LzEvY3ZmeFIyXzRLUjc2OG9TYzBfSVVaeUpuc0FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTfQ8fzA
j3Ap/ThWHvVjVFHbLbSeNRkUuaSRJmGR2v/9xz2ANGlrLaxwBzrQB6BXjmTXQWl6
LBFVxJdh5i6oxIPVJ1u9Xp9VelSf2q3K8XS1Jdns4rczgLOH+E0rTbjNOve1G3y+
N0Z/MO9/9nudRzOcUXP/skM9yKY6k9KrG0ufxW5zxkxtXs96gKfNTlAaAsQCgfx2
emqDzenyn4d1Cv+e5yAvAWKFPTb3oHrRncZ8eSJOkW/lj0+lUlJRUlkjsmou2F0D
qvhZMHzekAkPos2RuC+6XxuMqNUOOfClzNU73yM8qjQVVnHaxsaq0iXHeVlnKRct
so4HcYBTAu8BtQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 12:00:43 2025 by rpki-client