Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json)
Hash identifier: 9HIACVqNS7oFnvROZBC7eXBPqs85ibbAzWK6vb9r4Ss=
Subject key identifier: 45:56:42:CB:0C:41:71:4E:82:82:A9:A5:A9:45:AE:64:27:FC:1C:01
Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Certificate serial: 01974B5609E8930E10F1CF2A293C4A25472C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
Manifest number: 024A
Signing time: Sat 07 Jun 2025 17:00:19 +0000
Manifest this update: Sat 07 Jun 2025 17:00:19 +0000
Manifest next update: Sun 08 Jun 2025 17:00:19 +0000
Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: WOrY4/JRrTdXLQ3x1ec1KBGOjSMgI82eWH/9DHifzSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:09:e8:93:0e:10:f1:cf:2a:29:3c:4a:25:47:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Validity
Not Before: Jun 7 17:00:19 2025 GMT
Not After : Jun 8 17:00:19 2025 GMT
Subject: CN=455642cb0c41714e8282a9a5a945ae6427fc1c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:e1:0f:ca:7b:92:b0:b7:39:79:60:29:93:
7d:f5:4d:ee:26:eb:dc:fb:53:eb:d0:af:d9:df:5e:
ef:8b:38:db:24:1c:ec:06:50:5b:e1:15:20:a2:ff:
b9:fe:3d:7c:37:a4:3c:bf:69:88:fa:c4:c8:64:95:
2d:6f:b8:3e:a6:b7:47:7e:81:3b:65:bc:72:bd:b4:
06:81:51:c8:99:fa:58:6b:ce:87:37:10:9f:3d:47:
28:8f:8a:b0:50:74:b0:06:6d:7d:0a:21:83:b8:65:
18:f3:7d:92:c0:f4:c5:3f:87:c3:c4:a5:e5:07:53:
3a:fc:fc:c3:b0:e6:a4:7f:1c:01:6c:b6:0a:f1:8a:
3a:1a:a2:3b:5d:70:ba:23:7a:af:ac:b2:68:09:28:
4c:2c:0c:de:37:ed:91:44:78:c1:c7:ce:ce:ff:64:
07:a2:f0:f9:96:d9:87:71:2b:ad:2c:8c:1f:83:2c:
e6:9d:95:e1:da:42:34:44:e1:74:1e:ef:3e:fd:28:
fd:35:17:bf:dd:61:ff:66:8a:b1:27:8a:db:cd:ca:
a8:31:09:4f:2b:8c:95:ca:50:2a:a1:32:32:b8:55:
af:49:ae:77:ba:a8:98:71:ed:da:1c:ba:2e:cb:34:
d7:6d:af:e7:3e:1a:10:aa:a6:e1:e7:73:62:b8:a8:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:56:42:CB:0C:41:71:4E:82:82:A9:A5:A9:45:AE:64:27:FC:1C:01
X509v3 Authority Key Identifier:
keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:da:b4:ca:5c:82:e1:98:d0:56:27:b4:2c:1e:2c:cc:69:4e:
dd:56:12:b2:1f:37:3f:00:33:83:d5:69:b3:b2:6a:03:5f:b0:
2d:ff:33:98:a1:46:7d:91:04:b9:dd:de:a8:aa:d5:27:d2:81:
39:22:3a:3f:f7:b7:7b:6c:5b:f1:53:85:52:cc:3e:16:5e:f2:
e1:b5:bc:ac:4d:65:56:43:f6:f9:80:54:09:04:14:1a:01:ff:
fb:30:4f:f2:0a:b6:3e:f9:b1:6c:c1:71:cc:85:08:36:d4:18:
b1:70:d6:e3:44:ee:6c:81:5e:08:2d:5c:39:63:12:ba:d7:43:
28:91:47:77:a3:9c:14:0d:b0:b6:ce:69:f7:bd:c8:54:91:c1:
94:a3:7d:58:49:fc:11:d8:67:4d:b9:22:e7:91:67:7f:27:aa:
32:95:11:e1:19:71:7b:7d:b3:48:29:fe:99:75:cc:ad:8f:cc:
90:dd:f3:20:86:2b:e3:95:02:6d:20:ab:20:69:35:d1:92:4a:
d6:27:96:65:c2:56:c0:94:59:7d:05:f3:80:e5:7c:29:37:fe:
d7:9b:c9:ae:7b:de:c4:48:8c:a1:e7:90:8b:ed:2c:13:d2:97:
82:f8:a8:bb:14:18:1e:37:41:e4:70:0b:6f:c9:f4:62:bd:c5:
f4:11:cf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:54:03 2025 by rpki-client