Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
File: CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft (raw, json)
Hash identifier: +RB5Gl/K4uhzNh2r5r7Q5tIHhKFOc1zccIAtZjQvZcE=
Subject key identifier: 3D:3F:86:D3:AF:06:6C:FC:56:59:09:73:30:D9:D8:8F:C5:CC:00:BF
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial: 0198D54E504F55F7FD859CE35D7350E919FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
Manifest number: 1084
Signing time: Sat 23 Aug 2025 05:02:15 +0000
Manifest this update: Sat 23 Aug 2025 05:02:15 +0000
Manifest next update: Sun 24 Aug 2025 05:02:15 +0000
Files and hashes: 1: CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl (hash: JKWsecstv8htqeqh4qdWoCSNX+aCsvqS9DG/shsWpDg=)
2: XmZzj7JcB6jd6mOFVB5P5PDKL5E.roa (hash: 0790uLZ+/UaE4zF4DtLMPcWHd+AL9SLdbKcmlMREbOY=)
3: fRGE3gXQY93KoteIKmDWsv7Pa8E.roa (hash: oBozhLOPrWsT/ybptTbngKdb/+Q5fLnG+R66tlH23uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:50:4f:55:f7:fd:85:9c:e3:5d:73:50:e9:19:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Validity
Not Before: Aug 23 05:02:15 2025 GMT
Not After : Aug 24 05:02:15 2025 GMT
Subject: CN=3d3f86d3af066cfc5659097330d9d88fc5cc00bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:7c:4e:06:2a:8e:7c:a2:32:e5:f9:f2:2e:
dc:57:30:f8:3c:d7:86:1b:b5:fe:89:4d:42:41:4a:
96:ac:46:3f:c6:9c:ba:ce:48:e9:ee:af:9f:f1:1a:
e1:cb:63:79:31:4e:67:3e:74:db:cb:67:85:18:7b:
7d:a5:ff:4f:e0:3c:be:74:93:22:d7:44:8f:e0:e6:
ae:6d:66:e1:dd:bc:8f:3a:53:1e:c3:83:88:18:04:
d6:72:30:f2:40:5d:cd:ec:25:04:07:a3:01:7d:8f:
e2:ad:10:18:72:2c:4e:3e:83:34:f4:7f:bf:73:0f:
61:38:e3:5e:4b:a4:11:35:9b:17:08:56:7c:22:48:
20:bd:c8:cb:51:40:c2:f9:d7:31:81:0a:6a:be:4b:
91:26:3f:0c:89:e2:8c:da:86:bb:ff:49:17:ff:ba:
44:7a:49:1b:53:01:e7:66:75:c4:01:1b:8d:2d:2e:
b1:b7:89:a0:e5:de:99:25:4c:2c:4a:63:cd:75:72:
f1:18:11:b8:59:ff:ce:68:e3:0b:69:71:63:72:9d:
09:d9:0f:2a:88:af:26:74:3e:b6:f2:ba:29:97:85:
b6:5d:a1:64:dd:bd:c7:db:78:a3:f9:ef:90:36:29:
92:c6:84:90:db:ad:f7:7a:3e:0b:be:75:71:25:12:
fd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3F:86:D3:AF:06:6C:FC:56:59:09:73:30:D9:D8:8F:C5:CC:00:BF
X509v3 Authority Key Identifier:
keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:81:99:44:92:fa:12:47:3b:16:6a:7c:3b:44:45:24:e4:0a:
29:4e:d9:b2:70:9d:0d:e8:b2:8d:b9:56:ba:29:f9:12:55:b1:
90:ca:29:9d:af:28:10:4a:38:d5:ff:f1:1a:51:20:9f:e6:b6:
03:82:5e:6e:3b:8c:da:ef:fb:1b:d1:99:18:66:2e:a0:26:7d:
a7:e7:7e:fc:15:b0:6b:1d:5b:c2:00:b7:36:96:78:6b:e8:d5:
38:db:b5:58:07:9d:cc:ca:e9:d1:4c:2f:27:6f:e7:6b:07:79:
db:c5:29:dd:72:ce:de:b2:af:dc:de:42:0b:20:3b:91:7a:62:
e1:3f:ab:56:f5:0e:a4:14:3e:03:1e:31:91:3b:7e:9f:43:e1:
f1:9b:b1:8d:1f:28:46:24:d1:12:1b:8a:1c:87:46:5c:2f:09:
cf:ee:23:e7:6c:ed:a6:9c:80:39:4c:31:23:1f:c7:7d:61:05:
40:c5:14:54:b8:12:4a:49:0a:bd:2d:ee:ad:21:f7:10:73:24:
30:1d:86:e7:2a:bd:9d:98:5c:87:ac:99:b0:fe:c8:99:29:0c:
17:dd:df:8f:a0:e7:e0:f4:28:5a:df:82:83:0b:6b:4d:41:38:
1b:c5:d4:30:47:79:f1:3a:df:56:81:0c:35:94:80:04:d2:eb:
2f:88:0a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:52 2025 by rpki-client