Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
File: riVa_-CEMRtuoC--Roa3lFNZhhw.mft (raw, json)
Hash identifier: CXjWDsPGFaqh7lg2EthAP6GZFMKwIR+ixIR+FrSeIL8=
Subject key identifier: 89:47:C8:F1:4B:2B:C9:80:E5:90:8C:10:89:7E:B6:D8:41:A4:33:FC
Authority key identifier: AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C
Certificate issuer: /CN=ae255affe084311b6ea02fbe4686b7945359861c
Certificate serial: 0199FBEABE3B23C710E968BCB638D5D890B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
Manifest number: 04DF
Signing time: Sun 19 Oct 2025 10:01:29 +0000
Manifest this update: Sun 19 Oct 2025 10:01:29 +0000
Manifest next update: Mon 20 Oct 2025 10:01:29 +0000
Files and hashes: 1: YLMlluYLr6JfK-y1U7Gu2bMProM.roa (hash: dLTxCUQo6hqFLyHwLbKwrnQtAYSoW8dcHWFQbKuVfyk=)
2: riVa_-CEMRtuoC--Roa3lFNZhhw.crl (hash: WRTBvzPJ1A//qmhprAqraVlO1C9f+Q+inDo6XSBCrko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:be:3b:23:c7:10:e9:68:bc:b6:38:d5:d8:90:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae255affe084311b6ea02fbe4686b7945359861c
Validity
Not Before: Oct 19 10:01:29 2025 GMT
Not After : Oct 20 10:01:29 2025 GMT
Subject: CN=8947c8f14b2bc980e5908c10897eb6d841a433fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:78:8e:21:55:ff:1b:52:32:c1:fe:24:2e:6e:
9a:4d:91:ea:69:2c:01:22:e8:30:e1:e6:8a:16:d2:
16:9e:bd:67:ea:bd:dd:31:6f:a5:84:ce:b3:70:f7:
f2:18:c7:2e:b1:00:15:a5:c7:7d:b1:2a:fe:06:2d:
a5:14:11:7f:0a:36:ff:f7:b9:c4:ee:ca:6b:c3:4a:
84:a9:58:63:97:e9:c5:fa:1d:93:28:24:a7:83:db:
6e:50:92:49:3c:cd:8a:8c:28:11:11:22:f3:7b:2f:
3c:4d:c1:4e:00:32:fb:98:e7:2c:2b:ca:e6:c6:2d:
c6:3a:12:fe:01:8a:e3:67:23:71:10:0c:5a:e6:42:
6d:d6:60:bd:98:4b:76:2e:04:ef:61:1d:4d:4c:60:
1e:05:94:c6:3d:4a:99:2c:16:fc:d3:a3:9a:6f:cc:
41:62:38:1b:14:9b:bd:1d:27:9f:93:28:90:23:63:
6d:e3:7c:af:8d:35:2c:c2:52:98:52:4d:1b:81:50:
94:80:08:30:e6:c3:0d:dc:a3:18:df:95:cc:a2:59:
47:47:d6:b5:71:a4:9f:1f:75:df:66:42:20:a4:18:
01:f5:e4:d4:df:b5:2f:c3:c7:48:b4:bd:bd:a8:dd:
a7:86:c1:c6:83:7a:15:55:61:b4:6f:dd:6d:28:82:
f3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:47:C8:F1:4B:2B:C9:80:E5:90:8C:10:89:7E:B6:D8:41:A4:33:FC
X509v3 Authority Key Identifier:
keyid:AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cf:e7:90:7b:32:83:f1:20:3e:4d:46:e3:3a:66:80:eb:13:
ba:d8:38:bc:3f:e1:2f:72:68:ef:e0:56:d7:49:6c:c4:19:3e:
77:c6:0b:42:f7:89:99:21:49:c7:24:46:09:37:3f:8b:7a:29:
3c:1b:c8:f1:31:6a:58:5e:64:a0:12:bf:8f:56:b0:8c:25:d4:
b3:a9:a7:f4:27:73:35:f3:10:3b:70:a7:58:06:92:5e:d7:0e:
e9:c6:d2:a0:32:92:b8:ff:15:33:9e:93:f5:d4:78:10:cb:ec:
f5:84:4b:d1:72:ba:69:cc:0e:5b:66:8c:27:b2:92:07:bd:6a:
fe:8c:c0:0b:6d:65:e1:8f:ef:26:15:39:7e:ec:55:1f:f8:10:
ee:11:f6:9a:8a:33:68:65:d1:1b:95:ab:1d:77:7a:4a:96:19:
36:8c:e4:95:da:fe:9d:70:db:e6:b1:49:05:8d:7f:4e:cb:13:
58:4a:19:98:d7:e2:61:99:87:00:af:1a:90:56:08:af:9c:b6:
fc:d4:aa:f0:b9:70:fa:45:38:10:1c:db:c3:76:41:4c:e3:67:
9b:8f:df:7d:a9:aa:35:75:72:b2:99:93:c2:ff:f8:cf:c7:70:
03:14:c1:29:bb:8d:c2:66:e9:05:09:d5:6c:d3:dd:4b:27:02:
ef:bc:ff:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:55 2025 by rpki-client