Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
File: CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft (raw, json)
Hash identifier: ZuluTtBB8vRpog3eMDz0r6rNmRZNnYdIwfL6ADrPeDg=
Subject key identifier: 71:A5:BC:FD:8B:41:9E:7C:86:65:43:D7:9C:D5:10:B1:85:F1:B4:12
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial: 0199FCC6383F666589F43512F0E56AA8CFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
Manifest number: 111D
Signing time: Sun 19 Oct 2025 14:01:12 +0000
Manifest this update: Sun 19 Oct 2025 14:01:12 +0000
Manifest next update: Mon 20 Oct 2025 14:01:12 +0000
Files and hashes: 1: CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl (hash: heGUSq/+UrRQgHG2J7kgw39N4MP5CMOEU/eQH2K+4s8=)
2: XmZzj7JcB6jd6mOFVB5P5PDKL5E.roa (hash: 0790uLZ+/UaE4zF4DtLMPcWHd+AL9SLdbKcmlMREbOY=)
3: fRGE3gXQY93KoteIKmDWsv7Pa8E.roa (hash: oBozhLOPrWsT/ybptTbngKdb/+Q5fLnG+R66tlH23uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:38:3f:66:65:89:f4:35:12:f0:e5:6a:a8:cf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Validity
Not Before: Oct 19 14:01:12 2025 GMT
Not After : Oct 20 14:01:12 2025 GMT
Subject: CN=71a5bcfd8b419e7c866543d79cd510b185f1b412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:14:6c:ef:01:c2:86:a0:34:87:36:1d:38:
9f:e8:db:ee:4c:29:a1:f7:df:ed:e0:aa:ae:eb:4f:
fe:c1:a4:98:24:a6:e1:37:d6:94:bc:8f:58:86:b7:
ad:f4:cf:41:7b:00:94:9f:0b:d9:e2:0e:2e:29:b2:
d9:1e:47:59:05:9d:05:19:8b:60:a4:dc:9b:85:72:
1a:27:2c:3b:f0:ca:1d:f2:53:2b:e2:e1:16:79:24:
4d:e9:19:20:0d:e1:e6:05:15:46:64:e8:51:46:6b:
d1:e7:ef:16:ad:46:2c:5b:c8:5b:ab:59:19:7c:e9:
0d:5a:9d:a9:26:4c:5e:7b:be:4f:ad:c5:fe:ab:3c:
f0:d1:dc:5c:7c:36:ca:2f:cf:6f:87:f6:90:b8:69:
4a:d8:6b:08:a2:14:28:51:60:b2:cc:11:5c:dc:c5:
9f:8e:4d:a2:c9:df:e0:e6:03:3c:1c:92:15:43:e6:
61:83:aa:c7:a4:11:4b:60:4d:13:06:80:88:4e:c6:
4c:11:4b:f5:2a:38:08:07:92:5f:55:89:c1:3a:70:
da:2c:6b:64:75:d1:d7:01:81:f4:30:a7:1f:87:52:
18:2f:65:84:9c:0f:1b:8d:ca:83:59:1d:7b:79:13:
5b:f7:b1:c0:b7:19:d2:4f:4f:17:62:df:46:60:6d:
ba:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A5:BC:FD:8B:41:9E:7C:86:65:43:D7:9C:D5:10:B1:85:F1:B4:12
X509v3 Authority Key Identifier:
keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:61:79:8e:63:b8:f7:c0:89:2a:31:73:19:b2:7d:27:86:ac:
19:a0:29:34:3c:14:bd:41:b0:03:ce:a9:02:76:05:da:4d:21:
5f:6d:3f:23:f2:b5:ae:d3:b0:77:e2:b6:2f:11:c8:76:62:42:
26:c0:83:00:ac:4a:55:ac:df:ee:39:af:18:36:7d:a9:90:c7:
26:08:46:0c:27:84:80:c5:9b:18:27:84:30:d3:1c:d3:0d:95:
bc:c1:77:95:f6:e6:8f:ea:d1:0b:d0:4f:ef:56:d0:20:78:7d:
0f:6b:0f:e2:d5:c5:71:63:7b:3d:b9:7e:00:bc:87:b8:a9:4c:
91:3b:69:33:97:65:f1:1b:39:1b:a1:e1:c0:4d:2f:8f:8f:f3:
05:2a:30:22:bf:a7:a1:35:25:a3:ae:e5:53:c7:43:92:d7:37:
54:3b:c1:42:fd:c7:e7:71:0f:3b:01:0b:a2:cb:1c:10:68:40:
2d:b4:f2:82:30:5b:93:0d:c9:1b:33:2d:13:fb:7a:da:3a:37:
87:e9:72:78:5a:1e:11:b0:12:85:6d:7f:d5:ea:1e:a2:f1:57:
27:dd:4e:b7:fa:76:8d:5d:36:79:a7:04:f4:0e:da:8a:fe:d5:
98:7e:e1:35:92:66:89:63:03:32:d8:69:b5:5d:3b:39:8c:2e:
10:b7:b1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:52 2025 by rpki-client