Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
File: CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft (raw, json)
Hash identifier: KfjPrQv2uL2K71yf3ujOXFdeBsHS6tLMeaNnoSVdoJA=
Subject key identifier: D6:43:AB:8A:31:AC:9A:ED:10:A6:ED:5C:C9:7C:AE:E0:70:9D:FB:09
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial: 019872D00201660C23227EA6113617301A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
Manifest number: 1051
Signing time: Mon 04 Aug 2025 02:01:31 +0000
Manifest this update: Mon 04 Aug 2025 02:01:31 +0000
Manifest next update: Tue 05 Aug 2025 02:01:31 +0000
Files and hashes: 1: CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl (hash: l8iT6/EKWIhnX/i6DnRRTh1K7o62GHZP+RFbPo5zIx0=)
2: XmZzj7JcB6jd6mOFVB5P5PDKL5E.roa (hash: 0790uLZ+/UaE4zF4DtLMPcWHd+AL9SLdbKcmlMREbOY=)
3: fRGE3gXQY93KoteIKmDWsv7Pa8E.roa (hash: oBozhLOPrWsT/ybptTbngKdb/+Q5fLnG+R66tlH23uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:02:01:66:0c:23:22:7e:a6:11:36:17:30:1a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Validity
Not Before: Aug 4 02:01:31 2025 GMT
Not After : Aug 5 02:01:31 2025 GMT
Subject: CN=d643ab8a31ac9aed10a6ed5cc97caee0709dfb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:84:6d:23:8a:aa:a0:3f:b4:d0:2f:a0:3e:
68:41:75:cf:35:0e:7d:df:ad:0d:da:ff:10:d1:b8:
b5:a2:ec:55:d1:71:9e:51:20:54:7c:0f:21:99:06:
5c:de:1d:6c:0f:f2:00:31:b8:c5:bf:0f:46:cd:a3:
a1:ec:f9:88:cb:54:f8:7e:11:de:1c:1e:b7:f3:e2:
7a:a5:e7:98:22:cb:5b:8d:7f:d6:30:f9:b3:de:c6:
74:81:c8:1d:fd:ab:0c:7b:38:a1:a7:7a:aa:9a:2f:
11:97:1f:60:22:f1:13:bc:0d:c0:9f:6d:89:c7:0a:
5c:ba:f3:0f:3d:a1:c9:ee:15:54:ac:c2:ba:5f:0e:
f4:dc:89:91:82:b6:52:24:f4:bd:ff:86:1c:90:ed:
45:39:3f:64:32:d8:4c:39:a0:b4:e2:7d:75:7d:f6:
0b:9e:72:16:ec:f1:13:5f:02:ab:72:9d:81:2c:e3:
ef:ba:ce:37:6c:29:88:bd:37:26:2d:e2:5f:3c:f0:
51:14:6e:d4:d0:be:82:34:ae:9e:27:d0:e5:d5:c1:
61:2c:8d:be:b2:34:6b:f5:3c:98:95:d8:f8:8d:b6:
a3:10:7f:48:94:71:18:d9:12:40:ad:54:05:98:f2:
ad:a8:b5:86:45:d6:49:2b:a1:4b:37:d6:f1:95:c2:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:43:AB:8A:31:AC:9A:ED:10:A6:ED:5C:C9:7C:AE:E0:70:9D:FB:09
X509v3 Authority Key Identifier:
keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f1:cd:30:0f:2f:20:2a:7e:b5:f3:59:a0:6d:95:16:ed:b9:
45:00:ba:e5:e0:7f:ab:2d:d6:40:5f:5f:de:b1:81:6a:c4:f0:
02:45:96:94:91:82:12:28:a2:db:63:fd:e3:53:a6:2c:ae:fc:
ea:81:44:53:6e:7a:a8:7f:85:96:6e:73:5b:7a:20:30:10:09:
c9:80:f8:e1:dd:ee:b8:f7:57:be:57:a3:7d:85:b2:3c:13:7a:
72:b3:ef:84:a4:51:c7:05:fe:61:86:7d:de:25:58:02:eb:9c:
3b:39:1a:d3:c9:db:b8:b7:8c:50:e1:d8:8e:ec:1b:50:ef:02:
0d:55:57:1b:80:9e:5a:a7:e9:e7:43:35:48:d4:e5:16:ff:5e:
c4:1d:31:9b:4e:04:f8:ff:11:0c:21:1c:6e:5e:81:3b:f3:7d:
82:15:63:fd:ef:4e:8d:c6:e4:f2:04:c1:90:cd:c5:5f:2e:af:
80:5b:07:91:e2:9e:f1:25:71:58:8c:25:f7:e1:1e:58:1a:fd:
9c:6b:3c:89:59:64:70:8d:70:74:1f:8e:b8:6b:3b:b5:e5:00:
13:56:bd:a5:00:2d:b7:10:80:28:c3:e6:d5:3d:b8:96:cf:33:
05:1a:f4:3d:e6:3c:b4:cb:90:65:45:8e:81:a8:ba:61:4e:d6:
0e:fb:cc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:53 2025 by rpki-client