Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File: cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier: 8mSrqc18tQP32SckIIP1rRmc7anMKLHwckH78leRCQI=
Subject key identifier: BD:81:7D:02:26:76:F5:19:C5:01:32:45:A1:62:D3:BD:7D:5E:F2:F8
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer: /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial: 01974C3249366BE2F5369F48711137485182
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number: 1510
Signing time: Sat 07 Jun 2025 21:00:53 +0000
Manifest this update: Sat 07 Jun 2025 21:00:53 +0000
Manifest next update: Sun 08 Jun 2025 21:00:53 +0000
Files and hashes: 1: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: 67OcXs0GltBfkbkpNEUUAdmH9I2R6qCD3DWWfDp3I9o=)
2: dh_JgCZHkTokMGRr7H9M3cKhoRc.roa (hash: 4Kx8qkmvFu9/ph3LEnJvdO/hVDQr2VoTVCm1ptdvoEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:49:36:6b:e2:f5:36:9f:48:71:11:37:48:51:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
Validity
Not Before: Jun 7 21:00:53 2025 GMT
Not After : Jun 8 21:00:53 2025 GMT
Subject: CN=bd817d022676f519c5013245a162d3bd7d5ef2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:f4:1a:7f:1c:c1:c2:9f:70:f0:e2:0b:34:
4c:f4:58:e4:7b:0e:cf:76:f5:9f:05:b9:0c:40:09:
52:2d:c3:a8:08:33:d1:f4:14:a3:de:23:bd:47:eb:
0a:47:40:5b:7a:d2:82:da:21:8a:b3:be:f5:e2:b6:
0b:f2:cf:9e:18:22:a8:a1:12:eb:08:29:fc:3c:14:
80:f1:e5:c9:34:59:78:86:d2:3e:6a:5b:3c:1e:cd:
03:65:e8:53:3f:6e:bf:f5:f0:df:14:dd:d6:b0:47:
cf:74:11:1e:98:fa:97:bd:da:e5:8d:61:d8:4d:85:
0c:1f:34:8e:cb:7a:58:35:f9:4c:bd:3a:0f:e5:97:
2f:93:13:93:97:e7:3a:6e:45:9b:90:1e:40:86:5e:
24:10:38:6b:05:ec:f8:d5:aa:9e:4d:41:4a:3c:8b:
a9:ad:e8:33:33:d3:f9:ee:1a:38:ce:21:f4:76:c9:
5e:f6:65:40:9c:5b:4d:0f:0a:60:99:37:9d:55:d3:
cd:73:9c:dc:d0:8e:7c:78:38:73:b7:e5:1d:d9:ea:
85:03:62:12:2a:e3:71:5a:e4:36:0f:b2:1f:32:8d:
f6:64:3e:15:72:a7:cd:aa:41:9b:d3:f0:05:c1:da:
f2:df:11:1b:bf:1e:2f:1a:ad:73:f2:8a:49:43:cf:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:81:7D:02:26:76:F5:19:C5:01:32:45:A1:62:D3:BD:7D:5E:F2:F8
X509v3 Authority Key Identifier:
keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:91:58:31:c6:17:1f:9e:89:76:1b:7c:fd:f4:42:61:f9:76:
02:ca:81:82:1d:24:99:a6:a8:94:51:f1:c3:a9:6a:a3:84:ed:
f4:dd:85:53:03:9d:e6:e8:6f:cf:94:5a:b7:d9:1a:48:5d:6b:
c9:5a:b0:c6:80:b0:12:4a:6a:fb:1c:4b:fb:58:64:16:38:b0:
82:15:8f:2a:7d:d2:1e:3b:ea:1b:55:e0:c6:af:0e:b4:0d:f3:
91:a9:a7:82:bc:7b:de:05:c0:68:f8:3e:8b:52:0f:29:2d:53:
06:f1:30:ec:cb:2d:dc:34:8d:19:a6:9e:62:e4:85:37:89:bb:
b3:0e:ac:83:7c:f1:b4:a4:1e:ae:97:28:aa:56:fe:c7:78:5b:
76:b1:6d:47:ef:97:98:fc:2e:4e:6a:26:d6:82:a1:c3:a4:bb:
0f:40:81:45:3a:4d:ce:d7:84:e7:b2:a8:99:f1:58:e7:7a:1e:
1f:2f:ad:ce:93:bb:0a:79:a0:72:f2:31:89:ef:48:84:81:f9:
b0:1c:f8:f1:95:20:bc:0e:70:a6:72:0d:a0:96:47:94:0d:0a:
48:6f:a0:3c:c6:28:2a:72:6c:68:61:f3:72:3e:70:5d:01:9c:
3e:fa:49:7c:3d:55:0c:dc:98:de:ef:9d:5e:93:19:9c:24:49:
2c:e4:c7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:38:52 2025 by rpki-client