Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
File: CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft (raw, json)
Hash identifier: qXJAiMMeRej74nxA1XSBdwdIx8Y+xnYotWg9SqJrJYQ=
Subject key identifier: 16:B9:CC:27:6B:84:27:1C:10:D9:3D:5C:32:55:CE:C5:06:EA:76:4D
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial: 01969D8764EA4945CEDF4ED3CE95D8BF9823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
Manifest number: 0F5E
Signing time: Sun 04 May 2025 23:00:18 +0000
Manifest this update: Sun 04 May 2025 23:00:18 +0000
Manifest next update: Mon 05 May 2025 23:00:18 +0000
Files and hashes: 1: CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl (hash: jONwahG558l6J8FXam83I1BZkqL40GIkpLWuZ6bwJmM=)
2: XmZzj7JcB6jd6mOFVB5P5PDKL5E.roa (hash: 0790uLZ+/UaE4zF4DtLMPcWHd+AL9SLdbKcmlMREbOY=)
3: fRGE3gXQY93KoteIKmDWsv7Pa8E.roa (hash: oBozhLOPrWsT/ybptTbngKdb/+Q5fLnG+R66tlH23uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:87:64:ea:49:45:ce:df:4e:d3:ce:95:d8:bf:98:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Validity
Not Before: May 4 23:00:18 2025 GMT
Not After : May 5 23:00:18 2025 GMT
Subject: CN=16b9cc276b84271c10d93d5c3255cec506ea764d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:95:cb:64:cd:06:80:33:56:e0:3a:60:df:
80:63:51:d3:4f:a5:a1:84:57:41:a6:65:81:b0:f3:
aa:61:f7:ac:47:94:f4:7a:cb:9e:42:5a:5f:00:8b:
80:00:16:fb:23:3c:10:05:8a:2b:ec:4d:79:ab:b3:
d3:28:58:14:dc:ce:b0:bf:87:c2:e6:d0:9d:fa:15:
93:85:5f:3d:06:3d:36:20:43:55:75:37:65:e4:62:
0b:cd:17:8a:87:6d:36:dd:f1:9c:94:06:fc:00:3d:
f5:5c:ff:d9:9a:fa:30:01:7f:da:d4:30:db:3c:f6:
d0:8f:d4:5e:34:2c:f9:e7:dd:f8:3c:76:19:72:0e:
e5:66:2a:d7:7f:de:00:3e:26:0b:88:7d:09:fd:b8:
0b:49:3e:12:5b:68:54:c9:4e:9a:a6:be:70:0c:32:
ae:60:e0:66:2e:30:de:1f:40:bf:cd:71:59:4a:30:
24:f3:76:44:a2:4d:30:50:55:7d:8a:46:1d:5a:53:
0b:92:88:6d:e5:4a:2e:90:d8:8a:be:c7:a4:cb:e5:
6a:bc:47:b8:c0:06:91:04:fb:45:3e:98:55:f4:a1:
33:c4:84:15:2a:4d:06:30:c6:2a:90:5c:e9:1a:e7:
40:e2:86:51:2d:ed:f2:ba:69:9d:30:c9:5d:25:2f:
a3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B9:CC:27:6B:84:27:1C:10:D9:3D:5C:32:55:CE:C5:06:EA:76:4D
X509v3 Authority Key Identifier:
keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:19:40:4c:98:0b:ce:2c:71:e9:9a:f8:c4:fd:8a:4f:96:59:
77:58:a5:94:17:16:4a:61:6b:cf:aa:ab:2f:f1:9d:fa:3f:89:
84:1f:e8:a6:86:7b:9f:ab:c4:10:f3:03:f5:f6:06:05:2d:7a:
df:e3:48:e8:42:8c:b8:79:41:b1:82:39:87:fd:3a:39:e8:7a:
83:72:e3:9b:cf:c8:86:37:1c:fb:b0:f9:44:26:93:80:41:7a:
93:96:67:76:72:3c:a2:5e:8a:45:78:a3:ae:0c:6f:44:2b:3f:
42:6a:65:d5:ba:60:c2:71:95:d1:ab:82:80:40:9e:9d:e1:77:
32:66:70:a9:82:ff:f2:fe:29:84:d0:e5:ab:81:a3:2b:0e:35:
44:e7:4b:59:0d:5c:af:c1:2d:60:e6:53:5a:57:5c:87:3e:ff:
22:ad:e9:f7:c4:47:35:c7:c8:d0:c8:bf:a1:45:7b:f9:39:92:
68:25:9d:36:78:7e:4f:3b:b3:89:88:4f:24:9b:f2:2c:b8:01:
c8:e6:0f:1e:17:38:35:49:9d:80:04:69:1b:f7:9a:a2:cb:77:
ff:d7:f9:66:8d:c1:a0:d5:19:5c:9a:34:7b:f6:7d:52:17:53:
85:1a:a4:cd:c9:0e:a1:4a:eb:ce:05:6d:b6:3c:4c:cb:3a:82:
49:74:59:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:50:19 2025 by rpki-client