Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
File: riVa_-CEMRtuoC--Roa3lFNZhhw.mft (raw, json)
Hash identifier: KhoHoNhBh0EcVdqVyM9x2TwKh4bnIxhL+XWc1ZvHCtY=
Subject key identifier: F0:A0:57:13:17:CC:D6:AC:E4:85:1B:25:18:A2:23:11:67:99:9A:FB
Authority key identifier: AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C
Certificate issuer: /CN=ae255affe084311b6ea02fbe4686b7945359861c
Certificate serial: 0196CACE315C8221023974E2280D237FB3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
Manifest number: 0338
Signing time: Tue 13 May 2025 18:00:32 +0000
Manifest this update: Tue 13 May 2025 18:00:32 +0000
Manifest next update: Wed 14 May 2025 18:00:32 +0000
Files and hashes: 1: YLMlluYLr6JfK-y1U7Gu2bMProM.roa (hash: dLTxCUQo6hqFLyHwLbKwrnQtAYSoW8dcHWFQbKuVfyk=)
2: riVa_-CEMRtuoC--Roa3lFNZhhw.crl (hash: dI+MKfmnQUJMw1Cozhbk38niqIPiIoz5zQ2A0IGsnQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:ce:31:5c:82:21:02:39:74:e2:28:0d:23:7f:b3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae255affe084311b6ea02fbe4686b7945359861c
Validity
Not Before: May 13 18:00:32 2025 GMT
Not After : May 14 18:00:32 2025 GMT
Subject: CN=f0a0571317ccd6ace4851b2518a2231167999afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0c:ff:b7:dc:b9:84:9a:c6:19:00:fc:61:0e:
4d:5d:cc:1a:0b:10:59:64:86:e9:5b:14:d2:f0:87:
f0:c4:08:ee:85:37:c9:01:3f:21:d7:96:6e:47:9c:
e9:e1:a3:3e:99:71:4e:0e:7a:fc:44:3e:0f:cc:48:
7e:75:e1:13:c3:7d:c3:e1:1f:5e:1f:17:71:b1:ff:
fb:10:aa:79:b5:43:ce:f5:55:af:ad:d8:a4:a8:54:
7c:f2:b2:15:48:2a:0a:ad:b6:92:a1:3d:94:b6:bc:
b4:c6:b4:2f:c1:e1:ba:bd:29:0e:eb:af:00:29:54:
0e:b6:b0:ea:61:89:b4:5f:89:84:c9:bc:a9:d8:29:
04:b1:c1:d5:d1:30:6f:13:22:cc:fb:d5:8b:2f:0e:
ca:7b:81:2a:28:70:32:36:49:9f:c8:fd:7a:a7:41:
dc:8d:47:86:52:0d:7f:9c:7d:0b:68:a9:95:d1:6f:
9c:c8:9b:14:b2:90:fe:7a:b1:ed:4f:38:f0:6b:58:
48:90:fc:06:74:e1:40:b5:c7:13:0b:b7:ff:3c:bf:
99:f5:4e:4a:a1:82:2f:8f:a6:8e:0e:92:e3:fd:db:
4b:73:29:ed:0c:8c:a0:0d:79:e7:c5:18:98:c8:19:
8d:20:e8:93:d4:e3:45:0a:2f:e3:40:61:bd:41:24:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A0:57:13:17:CC:D6:AC:E4:85:1B:25:18:A2:23:11:67:99:9A:FB
X509v3 Authority Key Identifier:
keyid:AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3a:9e:2d:b0:a7:bd:03:50:56:cd:38:0d:1c:00:69:19:6d:
5a:bb:86:fe:69:c0:97:bc:85:a9:63:03:ca:89:bf:3b:74:77:
d2:6e:a5:5a:ae:bd:6f:5a:80:9b:6c:b2:ca:d8:c2:18:b4:a8:
53:4f:84:42:0a:59:2f:55:fd:9a:1a:5e:2f:6f:dd:d3:8b:cd:
07:c3:c8:fa:b2:4e:48:22:f1:ea:6d:c1:fc:42:05:2e:13:77:
c4:ec:45:e7:cf:1a:3f:f9:8c:50:12:ba:10:b2:15:be:b7:59:
7d:68:e6:ea:3c:b7:8a:22:5c:2f:b7:60:e8:35:3f:67:57:5d:
f6:d0:8b:dc:b9:7f:19:4d:5e:52:aa:0e:84:57:dc:e1:e3:fd:
1f:a3:e3:13:d6:43:51:14:e3:8d:63:cb:9a:c3:e6:c3:c6:4d:
ea:2b:4f:7b:dc:47:7a:0a:30:fd:21:5c:51:10:64:71:c9:88:
a2:4a:e3:ae:db:84:df:91:44:8b:56:bc:08:b0:1a:db:23:18:
3f:e1:cb:c0:39:77:63:8c:cc:1a:a1:f8:e8:d4:ad:be:bc:49:
f2:f7:88:b1:79:17:27:2d:bc:72:12:56:28:5e:18:3d:52:39:
60:8c:bd:a9:f4:b4:b5:cd:56:8c:3e:bf:85:ea:67:59:f9:d5:
43:0c:11:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:17:16 2025 by rpki-client