Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: XCPZ8LYVO5OotYP5KSHFy/b9CWgzR9Fo0WeH0fbJgLI=
Subject key identifier: 17:66:5D:73:F5:08:D5:E3:B8:4B:C3:3B:6A:4D:69:53:D4:B2:A9:A2
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 0198D7058823EECA845FE8971C90EA234BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 13:02:00 +0000
Manifest this update: Sat 23 Aug 2025 13:02:00 +0000
Manifest next update: Sun 24 Aug 2025 13:02:00 +0000
Files and hashes: 1: IQJY4wiykJwUR66o9Fs0mVyK_BY.roa (hash: sOQn6ofboeM57RYlzWfjexIU5njt7tJ8PQXKuKFY2zY=)
2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: 4nNDjBPnK1YVAP5gN5xjSmkOeuIeWxQ9IwAEaJJfidA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:88:23:ee:ca:84:5f:e8:97:1c:90:ea:23:4b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Aug 23 13:02:00 2025 GMT
Not After : Aug 24 13:02:00 2025 GMT
Subject: CN=17665d73f508d5e3b84bc33b6a4d6953d4b2a9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:38:1a:2e:2e:1a:8a:11:1b:07:db:c9:af:
55:b9:ac:09:e6:ba:54:2d:07:e4:87:5a:55:2c:e9:
d7:35:03:8b:60:f0:6d:9c:47:58:66:8f:20:d5:ac:
0e:60:03:8b:ea:d0:60:c0:3b:40:40:51:a8:c5:df:
31:ef:70:dc:b0:05:48:ce:90:e8:ae:1b:da:31:93:
db:28:e4:b9:0a:03:10:5c:8e:4e:61:6d:24:e0:fd:
c6:77:12:c7:c3:bb:47:73:66:fd:65:e3:a2:c0:65:
87:d3:4f:3a:35:9e:1d:91:ed:9a:31:ec:3f:1d:1f:
9e:d4:80:13:06:14:1e:94:12:53:aa:a2:36:06:ba:
f8:0f:03:12:98:93:d6:af:b5:00:69:16:27:94:ba:
f6:6c:ac:b3:bb:32:df:da:97:ac:9b:e4:54:9a:21:
6c:56:76:8d:24:80:31:d8:14:a1:2d:f8:82:87:0a:
bb:65:61:6a:ec:1c:ce:06:51:ae:68:65:21:47:22:
7b:47:f5:9c:d0:9c:f1:58:a5:c5:10:b7:cb:85:a3:
68:88:96:00:76:4c:ab:7c:8d:21:5f:17:26:60:ef:
9c:c2:9b:a0:f3:5e:f1:25:4e:ac:1e:e1:1b:3b:5b:
1b:c3:b6:4c:41:88:e5:82:fb:96:5e:a9:29:87:d5:
ec:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:66:5D:73:F5:08:D5:E3:B8:4B:C3:3B:6A:4D:69:53:D4:B2:A9:A2
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:51:18:e5:bd:dc:1c:31:d5:f6:14:e3:78:95:51:a3:65:f9:
1f:7a:64:83:77:ed:60:9b:a5:ee:de:8e:60:a1:c6:d8:af:3b:
94:fc:7a:74:5c:4a:30:49:7b:17:a8:9e:e9:39:4a:ba:44:ad:
a4:a1:54:98:a6:19:95:10:9e:53:3e:47:a8:57:3f:c3:0a:0a:
44:7a:e6:98:91:60:1d:6c:8e:79:c9:31:1f:c1:73:39:e7:3b:
97:5f:10:0b:0f:7e:e2:f4:8c:9f:2e:fa:a1:2d:b5:fa:8b:c9:
e5:58:d4:77:e3:39:be:a6:b1:ac:c2:b3:28:41:19:25:8a:cf:
f4:aa:52:0e:c0:33:d4:a5:1a:ad:7b:9e:a7:f0:bc:78:dc:0b:
60:63:19:37:df:22:fd:65:e0:4b:a4:9e:72:9f:13:47:ba:8b:
8e:74:6a:17:47:25:58:ec:66:7a:bf:99:29:78:59:c7:a2:14:
5e:d4:b7:15:13:b2:1d:97:0a:fa:6e:c5:c7:a4:1a:23:9a:4d:
d9:4e:a2:45:9b:ff:75:b3:b4:3f:1f:6d:6c:17:7c:7b:32:62:
85:7f:e0:1b:5b:63:9c:ab:9f:f7:ac:b3:44:7f:6b:ee:72:b3:
06:55:6a:e2:04:14:c0:79:60:48:c6:02:e7:14:55:27:84:7e:
42:7b:4e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:57:50 2025 by rpki-client