Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
File: riVa_-CEMRtuoC--Roa3lFNZhhw.mft (raw, json)
Hash identifier: D/RsC1BU6dxmmPJHys+cbGgOHJSyYIOcK2ubnlwVOj8=
Subject key identifier: CC:16:D4:5F:B7:91:CA:D4:D0:E2:D8:52:84:59:EC:6C:97:32:7E:E8
Authority key identifier: AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C
Certificate issuer: /CN=ae255affe084311b6ea02fbe4686b7945359861c
Certificate serial: 0198D472AD668032FD72280586232B080107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
Manifest number: 0446
Signing time: Sat 23 Aug 2025 01:02:21 +0000
Manifest this update: Sat 23 Aug 2025 01:02:21 +0000
Manifest next update: Sun 24 Aug 2025 01:02:21 +0000
Files and hashes: 1: YLMlluYLr6JfK-y1U7Gu2bMProM.roa (hash: dLTxCUQo6hqFLyHwLbKwrnQtAYSoW8dcHWFQbKuVfyk=)
2: riVa_-CEMRtuoC--Roa3lFNZhhw.crl (hash: w88eAg81rBauzQkB0XAsxOBHoWAhh58kqHicMYX4Rng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:ad:66:80:32:fd:72:28:05:86:23:2b:08:01:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae255affe084311b6ea02fbe4686b7945359861c
Validity
Not Before: Aug 23 01:02:21 2025 GMT
Not After : Aug 24 01:02:21 2025 GMT
Subject: CN=cc16d45fb791cad4d0e2d8528459ec6c97327ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:5d:f0:04:b8:db:de:42:74:d6:59:d1:4e:
d2:d6:2f:41:4a:58:c2:b3:ab:13:d1:1d:ba:cf:b4:
f0:f2:1b:63:54:15:f8:7e:e5:68:42:7c:aa:e8:ec:
26:e1:16:99:d4:b4:9b:69:9b:7e:2a:6d:e8:e5:6a:
70:da:db:a6:46:04:fa:f2:48:4e:7e:ed:53:5b:ae:
07:0c:01:34:d0:d8:9b:71:ec:3f:74:a9:04:77:dc:
21:5f:f0:c2:f1:2d:c4:ea:9a:49:df:82:8b:74:13:
fb:a8:a8:06:dd:10:c7:f8:41:65:9d:00:04:4e:a9:
3e:bf:6a:1e:43:b4:1c:2f:ef:4b:35:93:2e:b5:ab:
8b:6c:a1:ef:cb:9b:5a:c9:3c:8e:b7:0f:2a:5b:3c:
63:91:45:1f:78:59:47:f8:32:2e:44:7f:93:39:20:
b4:f6:f8:f9:4a:a0:6c:56:20:06:18:c7:d0:ba:2a:
85:b7:51:6d:77:ab:1d:66:1d:ee:2a:a1:19:12:55:
c8:c8:c6:28:4e:53:0b:ea:00:d0:e2:ce:eb:0e:de:
89:fe:cf:85:7e:a0:9f:5f:eb:a4:5f:71:70:db:ef:
0c:13:80:b3:73:11:6a:16:2b:96:37:d7:c5:b8:49:
c0:85:aa:a3:a9:40:07:27:ad:0b:13:f5:9a:70:c1:
84:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:16:D4:5F:B7:91:CA:D4:D0:E2:D8:52:84:59:EC:6C:97:32:7E:E8
X509v3 Authority Key Identifier:
keyid:AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:81:e0:b8:aa:bb:48:28:ae:3d:b2:bd:55:2f:f7:f5:d1:ff:
30:0e:8b:02:2a:e1:7d:c2:bc:39:ed:02:07:eb:27:9d:50:43:
b0:0d:27:f5:fb:5a:3c:f3:3f:79:2b:05:31:67:4d:90:5d:1c:
22:f1:ac:c5:41:7d:11:b6:32:b7:f9:d0:ac:c8:2a:90:a5:05:
15:ab:59:a5:84:f2:db:9e:1d:cf:f8:c4:5a:22:61:70:80:72:
c8:8b:7a:75:3f:01:8c:e4:d1:bb:b5:ec:11:8c:fc:23:50:dd:
d6:34:9a:f4:be:87:31:b7:ad:ac:ef:49:d5:6e:cf:ae:ba:90:
67:32:0a:f9:74:e8:44:11:b9:50:7d:4a:c7:97:5a:59:d1:4f:
9f:f8:92:e3:1d:0a:41:35:e4:53:a9:80:9c:b6:7a:49:71:b0:
8d:4f:ac:73:f6:bc:ce:c3:1b:91:11:18:db:1f:d1:f7:f5:b9:
4a:92:00:86:85:8f:27:88:15:c7:5f:00:e4:d2:c3:09:f0:f0:
14:20:1f:24:e9:bf:ac:e4:5e:8b:33:d7:07:bf:c4:c0:54:06:
8c:43:39:e8:e8:a2:30:79:18:50:5c:22:d9:7f:96:ae:6e:b7:
55:2e:37:8b:74:18:80:8f:68:f5:51:81:fe:0a:0b:06:4b:21:
b0:ba:30:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:14 2025 by rpki-client