Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: ylmBRW9zol99v/9mr5dceTcFEA/5Qr1aJDiHA8hEN78=
Subject key identifier: 1B:8D:FA:EA:0B:B2:25:B6:94:7A:BA:B9:8F:CC:7C:61:F5:B2:35:E7
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 019A2A43645CE6EC8376EBC3D3D2E407E5D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 168C
Signing time: Tue 28 Oct 2025 10:00:50 +0000
Manifest this update: Tue 28 Oct 2025 10:00:50 +0000
Manifest next update: Wed 29 Oct 2025 10:00:50 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: WVjTK/otZq+HYHE/RBy3yX+HZq7T/tZu/KjHdo/16xw=)
2: Gs7jpmfMcoM_7G0YMuDGyfM_OJg.roa (hash: yj4gPBjqELyvepP37xZ0hFdHIhYTiec7NS5/dOABF/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:64:5c:e6:ec:83:76:eb:c3:d3:d2:e4:07:e5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Oct 28 10:00:50 2025 GMT
Not After : Oct 29 10:00:50 2025 GMT
Subject: CN=1b8dfaea0bb225b6947abab98fcc7c61f5b235e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:74:fd:e0:b8:1b:2a:79:43:67:ee:c6:07:
bc:7c:37:23:a5:11:d4:26:2b:61:e5:0a:61:74:a8:
d3:81:ce:9e:d9:e9:cf:fd:f0:d2:99:31:7a:68:86:
e0:4f:5f:91:a9:ba:09:77:fb:f0:34:21:f3:bf:8e:
46:72:a2:ef:af:2d:10:0a:20:f0:dd:36:e5:db:65:
75:8c:fb:3c:8a:5e:03:1f:96:e3:d7:a9:ab:38:cd:
67:a2:43:f4:0f:93:d1:16:5c:ab:dc:ff:73:c0:d8:
6c:e5:56:2b:8f:51:33:bc:3a:07:58:13:80:b0:31:
92:02:3e:4d:06:9c:e2:71:0e:ab:2c:1e:62:a0:01:
c6:5d:1a:cd:d1:61:e0:57:00:11:c1:b7:8e:88:a7:
69:c1:4d:8d:dc:64:5e:e1:fe:72:9a:6f:40:10:b2:
32:a2:63:7a:86:43:3b:1b:fc:8f:08:2b:b1:dc:22:
60:3b:8f:32:26:9d:b8:23:e1:ea:14:e0:84:dd:38:
67:54:d5:19:53:3c:42:fc:17:95:14:3c:5a:00:5c:
55:8a:71:92:c8:91:93:89:53:f0:35:08:ae:59:21:
82:67:0b:7e:55:f1:9d:d6:17:1a:e9:7b:16:fc:df:
4d:aa:70:a8:47:a2:e6:5f:d9:a1:25:1b:a3:2b:4b:
be:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8D:FA:EA:0B:B2:25:B6:94:7A:BA:B9:8F:CC:7C:61:F5:B2:35:E7
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:86:e3:20:cc:eb:10:82:31:a2:90:84:b9:4c:bd:ba:43:2c:
bb:b0:53:53:33:f7:50:ef:05:7a:fb:c9:5e:f3:de:87:6d:db:
2b:38:14:db:5f:b3:89:18:87:38:03:ed:7c:23:eb:92:89:eb:
32:fc:d1:aa:4e:84:c3:de:29:40:3e:bc:ae:54:08:ea:d4:07:
a1:ec:87:1f:09:53:e1:b8:6c:11:8e:0a:bc:d9:fc:b5:f5:32:
3b:84:8c:dc:4f:99:a0:4a:f8:9e:a8:e0:1f:91:3d:bd:0b:97:
07:0b:fb:b6:73:81:38:a7:82:73:88:6b:d6:44:49:27:f3:f2:
93:ce:e9:41:a9:d4:07:83:74:00:be:2e:30:bb:ed:90:28:85:
6d:f7:37:8f:f4:02:7f:27:bc:51:ed:07:24:12:38:c5:2b:58:
a7:25:64:1c:e2:3d:4e:2c:ab:24:8e:36:90:e7:bf:99:4b:65:
46:94:91:82:0e:86:b4:44:71:21:c7:ab:88:b8:41:8d:6e:dd:
74:ce:e4:60:af:da:fe:e3:84:4b:a0:64:70:bf:68:be:90:56:
ee:69:d9:78:61:5a:d6:4e:a7:aa:49:52:a8:f9:25:2a:23:4c:
d7:ed:41:b4:c5:58:9a:2b:75:26:79:eb:7d:b0:d5:64:9f:ba:
64:fa:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:08:12 2025 by rpki-client