Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
File: CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft (raw, json)
Hash identifier: B2Ke3LNToK5AAIDqBNIB7xqeDFiDuGnkSATrrdBzZIY=
Subject key identifier: 8A:B7:C6:8E:09:F1:58:40:44:81:B8:5C:EA:1E:62:EA:FA:1E:26:97
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial: 0197B77CC103A715BEE712B2CB0DE51B9812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
Manifest number: 0FF0
Signing time: Sat 28 Jun 2025 17:01:35 +0000
Manifest this update: Sat 28 Jun 2025 17:01:35 +0000
Manifest next update: Sun 29 Jun 2025 17:01:35 +0000
Files and hashes: 1: CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl (hash: aP6YU+qRDBkurcUJH48xKH4AwXPpnDaOQwVLViFbv9s=)
2: XmZzj7JcB6jd6mOFVB5P5PDKL5E.roa (hash: 0790uLZ+/UaE4zF4DtLMPcWHd+AL9SLdbKcmlMREbOY=)
3: fRGE3gXQY93KoteIKmDWsv7Pa8E.roa (hash: oBozhLOPrWsT/ybptTbngKdb/+Q5fLnG+R66tlH23uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c1:03:a7:15:be:e7:12:b2:cb:0d:e5:1b:98:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Validity
Not Before: Jun 28 17:01:35 2025 GMT
Not After : Jun 29 17:01:35 2025 GMT
Subject: CN=8ab7c68e09f158404481b85cea1e62eafa1e2697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:1b:cf:58:56:e7:0b:8d:2d:40:32:a8:43:
b6:88:b8:9d:a6:4d:6a:63:6c:e0:d8:a8:2a:0d:d9:
d4:2a:1f:0f:a6:d0:3b:e0:52:61:20:53:95:4e:2a:
ea:46:d2:8b:6d:21:66:0d:14:00:c7:08:f0:96:ff:
bc:20:f5:1a:4d:77:a6:60:0a:0f:8b:f1:8f:c1:8a:
0d:7d:6e:17:ae:d9:a7:ed:d1:7a:7f:00:13:82:26:
92:30:e9:f9:ca:98:7e:28:64:a0:56:2c:9f:f1:0d:
39:2f:cd:71:7e:4d:7d:83:bd:6e:c2:8b:0a:e0:11:
95:d5:c8:b6:9d:75:df:e6:fb:3d:ab:18:ef:e4:b4:
da:b4:88:74:d8:79:0f:bc:d8:30:81:bd:ad:32:d8:
d6:6c:d4:e7:f2:a5:20:9a:c5:e9:98:35:22:d4:0e:
e6:6c:f1:34:2f:7b:ee:61:30:0f:54:ba:e0:3a:ef:
89:0e:46:6c:9e:6d:8c:4b:fa:46:8b:05:a0:50:ae:
07:cb:0e:5d:18:4d:aa:2b:00:e0:d0:8c:94:e9:30:
19:12:09:92:9c:ad:13:09:80:a4:64:b3:03:5c:9b:
8e:1e:f0:ad:d1:57:ec:23:36:5c:73:61:af:28:4c:
2e:70:be:c0:97:af:a4:b4:21:d6:a9:02:83:9a:25:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B7:C6:8E:09:F1:58:40:44:81:B8:5C:EA:1E:62:EA:FA:1E:26:97
X509v3 Authority Key Identifier:
keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a3:a7:cd:e2:e2:35:bb:7c:e6:62:20:bc:81:29:29:6a:f5:
96:9a:c4:f7:0d:dc:2b:4d:4d:53:7e:88:ad:13:ad:8b:ed:bc:
c2:4d:cd:5e:32:22:d8:03:ec:3f:81:92:45:2c:07:a3:60:11:
26:4c:e3:1a:06:03:03:c0:21:f7:75:ba:40:ad:27:8c:b5:ea:
98:c0:93:ad:6d:16:2e:d4:8c:d3:cf:d4:c0:2e:ea:a9:e9:c7:
ba:72:5e:dc:30:71:8a:a8:fa:73:7d:d9:2a:d8:62:71:29:5e:
af:29:28:24:be:4c:b1:ec:aa:74:07:fa:4a:7f:68:45:b5:6c:
8b:ca:be:29:ed:7c:e1:90:10:2c:a7:f1:31:d3:38:c3:06:56:
3b:56:92:6a:10:98:98:68:40:75:37:4e:aa:7a:b5:fe:96:63:
c7:fa:a7:81:56:0c:bc:50:86:c3:4e:a2:f8:be:af:b0:f3:3e:
9f:6f:3e:53:b5:7f:e0:55:c4:38:c9:a7:d8:04:f3:24:a6:2e:
4b:ce:2a:63:61:68:07:ea:58:b6:3f:44:cf:7a:24:08:82:31:
25:ec:ba:3e:bb:5d:75:b0:79:8f:9a:65:17:67:d9:ec:1a:39:
18:68:ff:bd:f1:00:4c:31:03:84:aa:6b:11:db:3c:86:3b:fd:
3b:0f:12:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:10 2025 by rpki-client