Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: RfnZYo9WAccJc3qmIaC1h48MO0Z/u5n3zBfcg6pUxbg=
Subject key identifier: E3:56:30:19:21:E7:59:28:3A:9C:5A:6E:EF:5D:B0:E7:72:98:A3:DF
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 019A729404DB6D3735BCB5CAB44E1E4C4B0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 03EC
Signing time: Tue 11 Nov 2025 11:01:34 +0000
Manifest this update: Tue 11 Nov 2025 11:01:34 +0000
Manifest next update: Wed 12 Nov 2025 11:01:34 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: rTvnEOL/dVTBvzDnW0rP/X8ob5PZUZfXXlnokwMONqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:04:db:6d:37:35:bc:b5:ca:b4:4e:1e:4c:4b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: Nov 11 11:01:34 2025 GMT
Not After : Nov 12 11:01:34 2025 GMT
Subject: CN=e356301921e759283a9c5a6eef5db0e77298a3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:12:26:43:ca:e6:91:29:63:03:2e:61:0b:
20:ce:68:ac:73:f2:7e:7a:40:3f:4e:9f:e3:66:21:
77:48:ab:49:ec:de:f8:38:70:6d:c7:92:7f:39:c6:
fd:8a:a5:65:d8:1f:5b:13:ff:a0:73:50:5b:1a:ba:
8d:3a:78:65:a2:aa:22:2e:5f:9c:9d:ca:6e:91:27:
11:52:98:a7:fe:90:27:1e:29:3b:44:e4:8a:6c:f3:
99:0b:42:2d:82:a7:62:f6:de:df:b7:a6:ca:39:f2:
06:fa:7d:1b:eb:10:6a:a7:f1:bb:44:7f:06:68:73:
bc:8f:4c:77:56:b7:2f:ff:80:e0:47:b0:f0:b3:f4:
96:b0:9b:86:03:b6:74:88:7d:a7:7c:83:d3:dc:ed:
e9:17:9e:6b:6e:3f:32:c7:d4:80:52:6d:ec:e3:b3:
39:6c:be:e8:f6:46:2b:57:73:91:46:22:72:6a:45:
f4:44:17:78:5e:9e:d6:21:33:36:ec:a8:7c:d1:3c:
0d:c8:5c:d8:8f:f2:51:f9:f3:62:76:87:e4:91:0d:
b1:7a:5c:f8:55:76:a7:6a:e6:34:6d:cb:e6:2a:f4:
3b:40:ce:a0:06:1e:d9:89:69:f1:9d:ee:47:57:82:
7a:41:5f:0e:4a:4c:f0:05:15:68:a4:c3:d2:63:9f:
48:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:56:30:19:21:E7:59:28:3A:9C:5A:6E:EF:5D:B0:E7:72:98:A3:DF
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f5:62:0a:c2:d7:17:de:e3:48:2b:0a:44:a0:19:bf:75:18:
e3:09:bb:b5:29:e7:03:13:b6:ad:8e:16:6b:86:14:da:d7:fc:
fd:53:40:52:ac:e5:03:25:90:6b:6f:99:fe:a8:25:41:be:4f:
94:6e:8f:c0:8d:a3:80:13:58:3f:16:80:8c:b3:bc:de:6f:7f:
ca:cc:17:83:11:ab:a9:d0:cf:4a:92:67:a9:85:d4:7c:27:bc:
2f:db:f2:77:dc:b6:8e:68:4a:e9:24:b5:18:44:66:1d:65:92:
2d:2b:bd:2a:3a:b0:7a:1a:81:17:b0:34:5e:ac:14:06:bd:5b:
43:3f:1a:60:0d:09:e4:1e:dd:26:97:d0:42:f1:a4:c3:ff:ab:
3b:22:4c:aa:f4:d9:75:fc:80:d8:0f:41:58:73:cf:da:ab:57:
f5:62:b9:53:0d:ed:12:5c:0d:e7:9b:20:78:eb:ca:21:ff:e6:
a9:c6:9b:09:54:de:56:43:98:44:da:13:12:1e:8c:50:62:37:
c0:16:7d:c6:75:34:ae:11:cd:2a:b5:21:c4:33:28:d7:06:5a:
e1:68:b4:8e:ab:2a:fa:16:ac:eb:84:c8:5e:d5:13:5e:cb:41:
bd:6c:09:7c:92:8e:18:5d:53:2c:73:67:54:67:3c:7f:9d:a9:
86:1b:bd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:54:55 2025 by rpki-client