Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: AUng/e1YURvfBFOla4voRotXaNc4DbS5RWfZBEY25rQ=
Subject key identifier: AF:11:12:8F:B0:B3:74:E4:EB:0E:9D:92:42:04:D0:5D:52:44:06:84
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 0199228C4736E1E5A3F0E7E184BCED165E79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 033E
Signing time: Sun 07 Sep 2025 05:00:42 +0000
Manifest this update: Sun 07 Sep 2025 05:00:42 +0000
Manifest next update: Mon 08 Sep 2025 05:00:42 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: W3K3b4SfOu8Fe3tSPW+8mq7F7OMhQxcyCLVTo0CPimw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:47:36:e1:e5:a3:f0:e7:e1:84:bc:ed:16:5e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: Sep 7 05:00:42 2025 GMT
Not After : Sep 8 05:00:42 2025 GMT
Subject: CN=af11128fb0b374e4eb0e9d924204d05d52440684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:d0:33:26:2c:04:9f:72:3d:d8:2a:23:82:
ad:d3:23:48:ac:71:27:4d:d7:74:7d:3f:7a:41:92:
cb:66:c2:6f:86:6a:bc:20:90:22:be:7a:e5:cf:a9:
3c:fe:57:62:00:97:d9:d2:4a:bc:fb:d0:e6:95:f5:
1e:bb:84:d4:56:a5:db:08:b4:10:1f:51:39:1c:e3:
ca:d1:f9:92:f3:60:f2:4f:2b:3d:47:d9:5d:cd:a9:
ca:56:19:78:86:e2:95:f0:6e:3b:a0:fb:d2:11:de:
6a:22:f4:2b:d0:ac:f5:f2:83:78:53:d0:81:83:7a:
f1:2a:0a:fe:78:77:5d:8b:d5:ff:ce:19:2a:71:fb:
10:b7:2a:e5:db:a0:ad:13:b4:aa:c5:47:77:4a:3d:
c8:8a:7c:3f:11:ca:2c:da:6a:ab:7f:49:4e:21:68:
19:3b:2e:2d:c6:98:51:eb:13:51:6b:40:f3:db:8c:
4c:04:d3:de:c5:a6:c2:7c:1d:c5:09:7c:d8:7c:63:
c9:2e:eb:d3:e5:18:be:3a:76:e6:a0:94:d5:f3:ed:
17:8d:dd:b9:ec:d6:b5:65:ce:e4:5a:c6:30:c7:6f:
e3:58:c9:c8:97:dd:89:00:6b:7d:cd:c8:36:60:c7:
d5:e2:8d:1a:f7:4c:88:de:06:2d:03:96:3e:16:ec:
e7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:11:12:8F:B0:B3:74:E4:EB:0E:9D:92:42:04:D0:5D:52:44:06:84
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e4:7e:2b:05:cf:59:2c:50:59:ad:b7:89:32:38:cc:48:5a:
40:8b:f2:d6:02:fc:62:b4:65:c6:fd:1b:3b:6f:6a:c7:67:9f:
8a:ea:c6:cd:50:be:ed:ff:51:93:4a:f3:49:82:65:f1:95:36:
70:e9:41:30:2f:c8:ee:41:e7:5c:a3:bd:b1:be:3d:18:e9:09:
7f:11:d5:5b:7a:96:cb:0a:a1:34:47:7e:2a:4f:b0:8b:d8:6f:
5b:3a:c4:ad:93:18:7d:52:dd:42:84:4a:87:31:5a:8c:33:eb:
1b:31:c7:85:42:45:f3:42:b8:a0:43:99:51:3b:67:3c:91:43:
0f:fc:1d:7d:c9:59:d6:1b:57:58:60:6f:d2:f4:7c:e0:e2:cc:
7d:7d:c7:35:93:7f:b5:57:d8:97:fe:79:a4:89:53:62:30:1f:
cc:23:a3:f7:0a:3c:f0:49:47:a8:1a:d8:e8:52:70:7a:f7:71:
a9:25:65:bf:fc:a9:1c:69:7e:3d:42:6b:f6:ab:b7:43:52:a5:
cc:0d:4a:a5:76:6f:f2:5c:a8:fe:aa:06:33:a3:47:02:14:12:
dd:71:62:bc:24:ec:e2:ab:e4:5a:4e:1b:1e:94:df:04:2a:9d:
c3:0b:db:e4:fb:18:ef:a1:49:18:8e:80:9a:32:a0:98:e2:2f:
ba:93:7d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:27:28 2025 by rpki-client