Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
File: CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft (raw, json)
Hash identifier: aPsC2iIOv31bLOysCYyhhYE17dvGC8TmU1Ai3dCtnU8=
Subject key identifier: 74:1C:F0:A7:EA:DE:9C:C1:98:CA:C1:75:A9:D1:09:C1:9D:84:89:43
Authority key identifier: 09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
Certificate issuer: /CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Certificate serial: 01974E20A254E3AB0801CC768C1E44E9EE7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
Manifest number: 1511
Signing time: Sun 08 Jun 2025 06:00:50 +0000
Manifest this update: Sun 08 Jun 2025 06:00:50 +0000
Manifest next update: Mon 09 Jun 2025 06:00:50 +0000
Files and hashes: 1: CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl (hash: N+/lIL41MtoTGkM+I18OE0RR27LmJpF8QxGsHZUVWlw=)
2: Gs7jpmfMcoM_7G0YMuDGyfM_OJg.roa (hash: yj4gPBjqELyvepP37xZ0hFdHIhYTiec7NS5/dOABF/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:a2:54:e3:ab:08:01:cc:76:8c:1e:44:e9:ee:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0952ce4dd8640276f4c1841adb3a742f544924ea
Validity
Not Before: Jun 8 06:00:50 2025 GMT
Not After : Jun 9 06:00:50 2025 GMT
Subject: CN=741cf0a7eade9cc198cac175a9d109c19d848943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:a7:27:14:d2:af:fc:17:8a:fc:15:fb:2d:
90:dc:49:8e:4c:70:48:86:06:28:0a:45:56:d7:3e:
fc:b6:7c:66:27:20:02:bf:80:74:cb:61:73:84:99:
96:f9:51:ee:f2:0f:a9:c5:f1:34:6d:13:5a:c6:7a:
ab:09:97:70:2b:5f:c9:16:8c:a2:71:21:02:cc:d0:
d8:0c:59:e2:43:9b:15:d4:78:cd:97:e6:25:32:74:
eb:93:1d:45:64:32:7c:e4:93:64:fc:9c:c8:0a:10:
e1:99:ac:2d:52:18:64:76:b5:f6:74:f8:4b:9c:ad:
41:dc:05:4f:2a:20:6c:57:c2:1f:4d:d9:c7:8c:48:
a1:b7:c6:44:c8:a2:c9:03:f7:0f:04:87:d0:c4:85:
ab:31:7f:d0:66:e9:f5:21:b2:79:40:65:32:36:22:
bd:c4:b2:8a:9e:21:7f:6b:ec:47:7d:f6:fa:ef:78:
8a:f3:37:50:8c:5e:93:fb:bb:28:32:4f:0f:83:64:
2c:da:b4:f8:83:1d:14:df:fd:59:4a:f6:6f:41:76:
a8:45:4f:a4:e3:1a:75:0e:fb:f8:82:ff:b3:19:37:
6d:20:ed:65:77:7d:b5:4d:0e:e7:1a:fc:b0:98:01:
f9:3c:ee:d9:cc:79:c8:d0:d4:7a:01:fc:c1:9f:80:
3f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1C:F0:A7:EA:DE:9C:C1:98:CA:C1:75:A9:D1:09:C1:9D:84:89:43
X509v3 Authority Key Identifier:
keyid:09:52:CE:4D:D8:64:02:76:F4:C1:84:1A:DB:3A:74:2F:54:49:24:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVLOTdhkAnb0wYQa2zp0L1RJJOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b5d9e0-c6b4-46f6-b45e-c56f177709de/1/CVLOTdhkAnb0wYQa2zp0L1RJJOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:99:10:1b:6b:83:e4:15:f7:07:de:fa:d7:de:9b:03:d2:ef:
c6:87:c0:d7:40:9a:45:42:5c:f1:d7:6e:d4:15:0f:b9:f6:99:
f7:81:f4:6e:a8:d0:a1:57:e2:20:e0:77:b4:75:20:6c:18:6b:
b9:cd:13:19:ec:80:9a:46:73:2e:6e:d7:5a:22:6d:9b:9f:b8:
1a:92:ee:8f:79:6e:16:5e:57:48:29:f6:3d:e6:9e:cd:d2:21:
ba:44:3d:46:cb:9d:49:34:7a:16:6a:75:7d:51:de:a5:29:1a:
82:97:80:ab:c3:b9:d8:91:96:65:64:49:c7:22:ae:eb:3b:c7:
7a:fd:ca:30:1a:d8:6a:55:7c:b6:cc:90:f2:8c:ad:f0:db:9e:
c1:1e:9a:6a:4e:20:20:7e:8c:d2:8e:8a:45:05:45:8e:b8:80:
2d:dd:0a:e1:5d:1b:f6:90:aa:ce:05:10:31:d3:ce:fe:d9:3f:
6e:d6:d9:d5:81:33:48:bb:ab:32:a4:2f:27:ce:c1:b3:46:b9:
a0:c8:33:b0:b2:85:3b:22:b0:a1:46:15:24:ea:05:90:3a:4c:
7b:0b:a7:c4:fa:cb:49:8e:5d:c9:41:90:f9:4d:57:f0:8e:87:
e7:b6:1f:51:67:d5:5f:ed:de:29:26:3d:f0:7c:6e:e1:58:de:
22:87:7b:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOIKJU46sIAcx2jB5E6e56MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NTJjZTRkZDg2NDAyNzZmNGMxODQxYWRiM2E3NDJmNTQ0
OTI0ZWEwHhcNMjUwNjA4MDYwMDUwWhcNMjUwNjA5MDYwMDUwWjAzMTEwLwYDVQQD
Eyg3NDFjZjBhN2VhZGU5Y2MxOThjYWMxNzVhOWQxMDljMTlkODQ4OTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbWnJxTSr/wXivwV+y2Q3EmOTHBI
hgYoCkVW1z78tnxmJyACv4B0y2FzhJmW+VHu8g+pxfE0bRNaxnqrCZdwK1/JFoyi
cSECzNDYDFniQ5sV1HjNl+YlMnTrkx1FZDJ85JNk/JzIChDhmawtUhhkdrX2dPhL
nK1B3AVPKiBsV8IfTdnHjEiht8ZEyKLJA/cPBIfQxIWrMX/QZun1IbJ5QGUyNiK9
xLKKniF/a+xHffb673iK8zdQjF6T+7soMk8Pg2Qs2rT4gx0U3/1ZSvZvQXaoRU+k
4xp1Dvv4gv+zGTdtIO1ld321TQ7nGvywmAH5PO7ZzHnI0NR6AfzBn4A/RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQc8Kfq3pzBmMrBdanRCcGdhIlDMB8GA1UdIwQY
MBaAFAlSzk3YZAJ29MGEGts6dC9USSTqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNWQ5ZTAtYzZiNC00NmY2LWI0NWUt
YzU2ZjE3NzcwOWRlLzEvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iNWQ5ZTAtYzZiNC00NmY2LWI0NWUtYzU2ZjE3NzcwOWRl
LzEvQ1ZMT1RkaGtBbmIwd1lRYTJ6cDBMMVJKSk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq5kQG2uD
5BX3B976196bA9LvxofA10CaRUJc8ddu1BUPufaZ94H0bqjQoVfiIOB3tHUgbBhr
uc0TGeyAmkZzLm7XWiJtm5+4GpLuj3luFl5XSCn2PeaezdIhukQ9RsudSTR6Fmp1
fVHepSkagpeAq8O52JGWZWRJxyKu6zvHev3KMBrYalV8tsyQ8oyt8NuewR6aak4g
IH6M0o6KRQVFjriALd0K4V0b9pCqzgUQMdPO/tk/btbZ1YEzSLurMqQvJ87Bs0a5
oMgzsLKFOyKwoUYVJOoFkDpMewunxPrLSY5dyUGQ+U1X8I6H57YfUWfVX+3eKSY9
8Hxu4VjeIod73Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:18:08 2025 by rpki-client