Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
File: CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft (raw, json)
Hash identifier: Fh+PD4E5CRbqfIefP8WJK21iG1cO4c+V+C/lXVVhdlQ=
Subject key identifier: 76:BF:DE:62:88:19:C1:7E:4F:27:A0:34:ED:A9:02:B5:7E:03:98:F8
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial: 019A51BE97D5EB6AFB070A5405B50BD07F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
Manifest number: 1149
Signing time: Wed 05 Nov 2025 02:00:36 +0000
Manifest this update: Wed 05 Nov 2025 02:00:36 +0000
Manifest next update: Thu 06 Nov 2025 02:00:36 +0000
Files and hashes: 1: CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl (hash: Kzurb4Z3NkZtrFaBF5pXpSi5i6qnXjqhQI5QNV0Og1M=)
2: XmZzj7JcB6jd6mOFVB5P5PDKL5E.roa (hash: 0790uLZ+/UaE4zF4DtLMPcWHd+AL9SLdbKcmlMREbOY=)
3: fRGE3gXQY93KoteIKmDWsv7Pa8E.roa (hash: oBozhLOPrWsT/ybptTbngKdb/+Q5fLnG+R66tlH23uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:97:d5:eb:6a:fb:07:0a:54:05:b5:0b:d0:7f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Validity
Not Before: Nov 5 02:00:36 2025 GMT
Not After : Nov 6 02:00:36 2025 GMT
Subject: CN=76bfde628819c17e4f27a034eda902b57e0398f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:af:89:dd:8f:51:f2:c5:18:c7:e1:69:6b:0d:
8f:c7:ed:1b:9e:33:47:df:67:c0:64:f6:cd:9b:4d:
3b:5a:37:b9:9b:47:ab:82:91:21:88:c4:1e:6e:17:
7a:13:e0:3a:91:6e:ca:77:a6:e6:d1:62:60:3a:1d:
26:6f:10:cb:4b:f3:f3:ae:31:5c:93:ac:b0:33:46:
67:69:be:a1:7d:0a:02:ec:9c:2b:8d:b3:37:40:27:
10:97:fa:74:a8:f0:ca:cb:2f:6f:3a:ce:07:66:5c:
03:d9:e5:c6:4e:5a:f8:39:f5:28:a7:fe:0e:47:a8:
94:3f:0a:7d:2b:67:bc:ce:1e:6c:70:3c:96:f8:17:
98:62:38:75:04:8e:82:4d:de:42:1f:30:6c:9a:a1:
c7:f1:40:30:46:b7:f2:66:ff:95:67:b0:b8:05:1d:
5b:30:e9:6a:e3:38:7d:9d:99:62:e0:bc:51:1e:04:
d9:89:0d:11:22:f9:19:85:5e:13:4f:56:a8:fd:2e:
00:ec:80:6c:61:72:1c:cc:73:a3:5a:1c:a3:da:f9:
c1:09:d7:d7:b5:6a:90:93:09:29:b1:d7:d7:ca:71:
85:17:95:2d:53:ec:a7:3d:ff:f7:7c:64:5a:05:0d:
c2:83:45:61:cf:4e:bc:f8:0c:97:cf:c4:be:70:84:
dc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BF:DE:62:88:19:C1:7E:4F:27:A0:34:ED:A9:02:B5:7E:03:98:F8
X509v3 Authority Key Identifier:
keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:89:e9:57:5b:bd:07:48:c8:79:98:b7:91:c6:27:7a:e3:8c:
e4:4a:97:36:91:0f:54:a8:82:e8:ec:6f:a3:68:d1:d7:43:78:
ec:16:5a:a8:01:75:38:15:b2:3c:50:dd:12:92:fe:40:72:29:
89:41:c0:7a:fc:14:fb:19:cc:1c:60:8b:8e:7b:b4:c6:1c:cc:
95:0a:0a:9d:4f:1d:e4:fe:b5:04:20:cd:4c:ee:ae:01:3e:86:
d4:55:8a:1d:80:9f:bc:7c:11:b2:f0:66:f0:8c:dc:d9:b3:82:
10:3e:05:85:9e:4c:b7:fa:15:03:04:3d:57:41:fc:df:10:d0:
5d:8b:e4:17:55:a0:d2:e5:57:b1:9f:d3:ae:d6:28:4b:be:42:
74:cb:89:2a:13:f6:36:99:e4:f0:0d:2d:c2:be:d4:9e:13:3b:
cc:fc:85:ea:e2:65:19:56:ff:21:a1:09:04:e0:dd:e6:7d:08:
50:af:a4:82:2c:6e:90:ff:25:80:d4:87:0e:19:5e:72:b6:3e:
36:b0:19:6c:e7:76:c5:14:56:30:7a:49:45:85:77:bf:78:ee:
a0:b4:41:61:a5:a8:a1:f9:a5:b7:79:e3:88:81:34:0c:c4:c7:
a9:62:a1:0d:d0:c2:1c:09:56:71:3d:82:28:d8:96:1d:02:ab:
37:c3:74:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:14:13 2025 by rpki-client