Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: Bq6KNjo1aT2Pfnvm4mumACnaK/CGrafK7rypRCCEmCM=
Subject key identifier: BB:81:84:90:B6:41:5D:D6:BC:BC:F3:4A:BF:48:69:65:3D:86:97:76
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 0196DD0BA431DF16BBB89554D2014018F990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 1546
Signing time: Sat 17 May 2025 07:00:49 +0000
Manifest this update: Sat 17 May 2025 07:00:49 +0000
Manifest next update: Sun 18 May 2025 07:00:49 +0000
Files and hashes: 1: IQJY4wiykJwUR66o9Fs0mVyK_BY.roa (hash: sOQn6ofboeM57RYlzWfjexIU5njt7tJ8PQXKuKFY2zY=)
2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: /ert4KCIx115xy3yIBRqtz1gqHNyH3kVwjaDA8fYKs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:0b:a4:31:df:16:bb:b8:95:54:d2:01:40:18:f9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: May 17 07:00:49 2025 GMT
Not After : May 18 07:00:49 2025 GMT
Subject: CN=bb818490b6415dd6bcbcf34abf4869653d869776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:6e:ce:51:81:94:c2:29:c0:28:15:f0:94:
71:5c:b7:28:c2:df:8d:61:41:f4:6d:3e:8a:76:99:
a8:df:b1:b7:cb:9a:10:d3:08:a4:29:19:24:13:90:
ed:a7:f8:d7:50:1f:22:ed:9d:3b:28:52:20:c7:62:
52:85:b6:9c:0e:2e:45:d0:af:42:99:b2:55:f3:55:
30:77:a4:44:21:7b:1d:82:6a:67:8c:26:ab:31:21:
0f:1e:80:f5:d4:22:e8:67:e3:28:3b:62:24:e1:19:
27:fd:2d:92:84:54:1f:01:31:fe:5c:bf:8b:32:a5:
af:ea:f1:60:e3:b0:8e:ad:97:5c:b5:53:ae:bb:2b:
63:f7:bd:b4:f3:38:e8:d0:7d:14:2a:56:1e:94:14:
c7:45:e9:46:2e:3b:ea:17:71:bb:83:33:6b:9f:de:
71:ca:51:c2:d6:30:2a:a2:24:76:0f:ea:27:44:50:
0d:e5:b4:f3:04:e0:0f:74:7b:bd:96:85:ab:17:93:
c3:8f:cb:2a:7e:9f:56:0c:6d:d6:cc:ff:81:b4:0f:
87:c4:35:aa:dd:8f:06:82:db:34:e2:b2:35:cb:0c:
8d:b1:15:27:48:68:6f:b3:95:1a:08:d1:66:22:1a:
de:c0:5e:11:6f:5b:25:91:22:28:c2:ef:97:2a:e6:
2d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:81:84:90:B6:41:5D:D6:BC:BC:F3:4A:BF:48:69:65:3D:86:97:76
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:6b:9b:a3:80:7e:24:0f:b1:6f:ab:ef:57:e2:4f:8e:46:fa:
4a:05:e8:62:65:34:53:13:a3:8e:bd:b4:38:91:d7:8d:55:6b:
68:0b:48:82:98:69:3b:71:80:bf:36:ba:29:8b:9d:46:33:15:
2c:ba:ae:59:38:01:fb:4b:8b:18:a8:e4:e3:dc:13:01:56:0e:
ea:a5:8e:02:e7:ab:ec:ed:18:8e:d9:ce:76:58:a8:49:93:39:
c8:1a:47:d2:29:a8:58:83:43:a2:56:04:30:43:2c:26:ca:16:
51:f7:26:97:17:94:ad:aa:70:7f:4a:17:07:ba:3c:4f:22:ff:
0b:75:96:65:d6:7d:44:4a:3f:4b:d3:9c:46:97:03:02:ab:50:
d8:20:43:54:a8:1b:22:d5:e6:29:9b:77:d3:12:4b:51:43:88:
6b:64:00:11:0f:f5:0e:43:5e:47:33:14:a0:49:1c:a8:66:12:
f8:ef:18:63:3f:50:db:af:53:c8:c4:6d:2a:7c:8c:29:a5:28:
81:f3:6e:89:19:41:8d:8b:ed:fa:79:44:c2:cf:e3:09:d2:3e:
af:e4:b7:12:e1:33:97:02:24:6d:f3:2c:b8:93:c7:38:74:f0:
8b:af:b1:97:52:ad:7c:4c:23:76:0b:4c:45:43:08:02:50:03:
5d:49:3e:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbdC6Qx3xa7uJVU0gFAGPmQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZjg2MmRmZTBjMzQ4NzQxMjBkMmNjMTY5ZmMzMTQ0OTM4
ZWU4ZDkwHhcNMjUwNTE3MDcwMDQ5WhcNMjUwNTE4MDcwMDQ5WjAzMTEwLwYDVQQD
EyhiYjgxODQ5MGI2NDE1ZGQ2YmNiY2YzNGFiZjQ4Njk2NTNkODY5Nzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39xuzlGBlMIpwCgV8JRxXLcowt+N
YUH0bT6Kdpmo37G3y5oQ0wikKRkkE5Dtp/jXUB8i7Z07KFIgx2JShbacDi5F0K9C
mbJV81Uwd6REIXsdgmpnjCarMSEPHoD11CLoZ+MoO2Ik4Rkn/S2ShFQfATH+XL+L
MqWv6vFg47COrZdctVOuuytj97208zjo0H0UKlYelBTHRelGLjvqF3G7gzNrn95x
ylHC1jAqoiR2D+onRFAN5bTzBOAPdHu9loWrF5PDj8sqfp9WDG3WzP+BtA+HxDWq
3Y8Ggts04rI1ywyNsRUnSGhvs5UaCNFmIhrewF4Rb1slkSIowu+XKuYtJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuBhJC2QV3WvLzzSr9IaWU9hpd2MB8GA1UdIwQY
MBaAFHL4Yt/gw0h0Eg0swWn8MUSTjujZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xMzVmYzQtYjM1YS00MmRiLTgxNDEt
MjIwNzY0ZGMzNDVjLzEvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8xMzVmYzQtYjM1YS00MmRiLTgxNDEtMjIwNzY0ZGMzNDVj
LzEvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2ubo4B+
JA+xb6vvV+JPjkb6SgXoYmU0UxOjjr20OJHXjVVraAtIgphpO3GAvza6KYudRjMV
LLquWTgB+0uLGKjk49wTAVYO6qWOAuer7O0YjtnOdlioSZM5yBpH0imoWINDolYE
MEMsJsoWUfcmlxeUrapwf0oXB7o8TyL/C3WWZdZ9REo/S9OcRpcDAqtQ2CBDVKgb
ItXmKZt30xJLUUOIa2QAEQ/1DkNeRzMUoEkcqGYS+O8YYz9Q269TyMRtKnyMKaUo
gfNuiRlBjYvt+nlEws/jCdI+r+S3EuEzlwIkbfMsuJPHOHTwi6+xl1KtfEwjdgtM
RUMIAlADXUk+DQ==
-----END CERTIFICATE-----
Generated at Sat May 17 16:42:50 2025 by rpki-client