Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: Z+KYgH6HwX26BSDEP49DysVkvdXC2T5O/xC56IK6On4=
Subject key identifier: 96:F2:46:C9:34:AD:7B:D3:52:BF:D1:F1:5D:34:32:99:29:EA:D2:38
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 0199FE7E1D431A1FBD170E1650EE3D30859C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 22:01:41 +0000
Manifest this update: Sun 19 Oct 2025 22:01:41 +0000
Manifest next update: Mon 20 Oct 2025 22:01:41 +0000
Files and hashes: 1: IQJY4wiykJwUR66o9Fs0mVyK_BY.roa (hash: sOQn6ofboeM57RYlzWfjexIU5njt7tJ8PQXKuKFY2zY=)
2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: PFn8D6IieQyWj36dK90W5/jQULW64xYKDA4wYUpd2Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:1d:43:1a:1f:bd:17:0e:16:50:ee:3d:30:85:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Oct 19 22:01:41 2025 GMT
Not After : Oct 20 22:01:41 2025 GMT
Subject: CN=96f246c934ad7bd352bfd1f15d34329929ead238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:bc:b8:5f:d6:36:ab:b2:ef:69:fc:09:17:
7f:3c:dc:7c:99:4f:e0:12:03:89:87:24:2c:f2:a0:
cf:27:62:79:03:f7:f4:f8:98:e5:c8:58:99:3c:7c:
99:8c:78:eb:dc:f4:ed:4e:f8:b5:ab:9f:a1:6a:79:
17:48:a4:0e:47:a6:45:44:0c:48:1b:b8:61:49:e7:
0e:0e:c1:d2:38:4f:e3:ec:c8:03:9b:22:7a:0c:fa:
d1:56:f5:52:4a:79:12:bb:6a:75:ca:f6:e3:7a:ff:
6b:28:51:4d:8e:0e:1d:c0:a7:80:3b:24:db:cb:50:
24:4e:cf:99:f1:e4:bb:9e:11:28:fc:40:02:56:eb:
0b:bd:7a:42:00:b2:bb:03:cc:7c:ad:be:b5:c3:3f:
06:06:b0:0c:b6:f3:c4:bf:68:6d:c8:fb:b4:29:c3:
c3:da:00:f7:b7:86:32:73:0f:05:69:25:4c:3b:69:
b0:5c:27:c7:03:50:09:9e:0a:b8:3e:71:1f:a5:07:
fe:04:3f:7a:b3:dc:63:0d:35:04:0a:65:18:c6:a4:
b5:84:95:76:c6:32:e6:24:71:dd:16:b9:10:31:00:
d2:70:23:37:67:b0:f8:b0:fc:c3:52:89:22:ca:80:
9c:d1:1e:53:65:26:50:d3:61:c5:2e:21:6a:04:a4:
8e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F2:46:C9:34:AD:7B:D3:52:BF:D1:F1:5D:34:32:99:29:EA:D2:38
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dc:35:67:3c:79:51:36:32:ae:35:8a:f6:6c:e0:50:f3:08:
1e:fc:31:7e:cd:c0:b6:79:1f:48:df:98:38:6a:c7:bf:f1:8c:
a8:b1:55:ce:08:42:39:89:14:2a:a6:cf:26:5b:e1:69:ec:a6:
fd:01:6e:60:17:03:53:1a:17:d7:bf:d7:4c:ed:e7:e3:19:23:
ee:56:7e:ea:b9:a2:53:27:47:64:a4:9f:18:36:2a:d5:cb:ed:
f3:ae:44:5c:85:d2:7d:d5:57:21:2e:52:d2:1e:e1:97:eb:4f:
dc:f6:93:68:5f:32:89:4d:6d:7d:ae:f4:67:45:66:62:f9:50:
ab:76:b6:eb:d6:23:63:bc:4d:5b:af:c1:8c:84:36:d4:b1:d2:
26:76:85:0d:b4:03:04:ef:cf:5b:cf:d1:b5:90:9e:03:15:c1:
81:a7:ad:cb:c5:17:4d:13:c2:03:ca:28:e0:69:6c:5d:38:1b:
e0:6a:19:1e:db:5a:b1:63:67:d8:77:7a:98:f5:05:9c:96:8a:
0d:a9:e5:b5:ed:0b:21:71:f8:d9:10:06:3b:0f:98:0b:1e:30:
3b:1f:cd:2c:b8:f0:b4:e7:20:d7:dc:09:ba:46:cf:35:a4:04:
53:4d:be:7e:95:8d:6e:ee:3e:6a:79:d5:fc:41:17:f9:57:e1:
16:f0:74:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:27 2025 by rpki-client