Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
File: CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft (raw, json)
Hash identifier: Z+7mfG1XJt9WlaBPzn03VdlFokDmOKRWj1qXXHmkTks=
Subject key identifier: 2F:29:81:A6:29:18:A0:9C:F2:31:A4:9E:6F:71:8C:AF:81:48:36:93
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial: 019A53AC9180D67C69FE48856BC980F64022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
Manifest number: 114A
Signing time: Wed 05 Nov 2025 11:00:09 +0000
Manifest this update: Wed 05 Nov 2025 11:00:09 +0000
Manifest next update: Thu 06 Nov 2025 11:00:09 +0000
Files and hashes: 1: CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl (hash: F1jfcUJ48LM7zcIYK4Q/358ptRIDjUr/shnUjL10mEo=)
2: XmZzj7JcB6jd6mOFVB5P5PDKL5E.roa (hash: 0790uLZ+/UaE4zF4DtLMPcWHd+AL9SLdbKcmlMREbOY=)
3: fRGE3gXQY93KoteIKmDWsv7Pa8E.roa (hash: oBozhLOPrWsT/ybptTbngKdb/+Q5fLnG+R66tlH23uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:91:80:d6:7c:69:fe:48:85:6b:c9:80:f6:40:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Validity
Not Before: Nov 5 11:00:09 2025 GMT
Not After : Nov 6 11:00:09 2025 GMT
Subject: CN=2f2981a62918a09cf231a49e6f718caf81483693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5a:23:7f:0f:29:64:31:bf:87:5d:42:32:60:
79:31:96:65:35:2f:e1:0f:de:d9:44:0c:3f:66:c9:
0b:44:a5:de:64:62:ff:4f:48:89:24:6d:ae:f9:52:
cd:15:02:36:5d:86:a5:1b:c0:cd:15:78:b5:93:98:
7e:f7:50:95:c1:70:36:23:68:29:8b:79:06:8e:33:
62:cb:7d:53:72:40:83:f4:20:b7:72:e5:d9:17:61:
d7:08:8e:74:5f:d5:e2:df:31:7b:15:41:31:4a:4f:
25:eb:c5:8b:79:a9:51:f5:35:67:eb:fd:25:dd:f4:
2b:79:59:24:89:22:65:c3:44:0e:49:b6:a4:6c:a1:
39:0e:50:8d:63:56:0b:de:40:5a:e6:cf:16:cb:54:
3f:13:06:52:83:c3:20:de:96:7d:b6:45:81:3e:4f:
6b:b7:b4:bb:e0:7f:d6:95:ee:a9:5f:32:8e:93:d0:
fb:88:b3:31:07:6b:8b:ca:08:05:a0:56:72:7b:39:
5b:01:85:28:ec:c4:a5:0c:70:75:c4:c7:de:53:3c:
f9:a3:fd:79:13:14:22:42:c4:36:97:10:93:7d:50:
3d:84:c0:da:c9:1b:f1:fc:49:79:f0:1b:de:a3:5a:
d0:92:11:44:0b:43:d9:89:64:78:a5:2d:6d:5f:1d:
45:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:29:81:A6:29:18:A0:9C:F2:31:A4:9E:6F:71:8C:AF:81:48:36:93
X509v3 Authority Key Identifier:
keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:eb:d8:37:ca:26:46:7b:6c:a9:02:1c:71:9a:26:8a:97:4f:
c1:49:ba:c1:8f:57:f8:34:f2:cb:2c:b3:91:91:63:39:fc:67:
b2:90:fc:90:93:37:19:85:f9:be:68:82:28:fb:45:51:0b:e3:
d0:24:74:89:48:a5:d5:64:09:ab:03:ce:83:28:f6:67:52:f9:
85:af:c0:d7:d5:f1:f0:81:1c:21:4a:37:9b:7b:6d:18:67:29:
54:1d:87:e3:7a:ce:6a:2a:5b:50:ce:92:01:4d:66:eb:92:e6:
49:0f:21:73:01:60:d3:b0:eb:a2:56:0d:7f:4f:57:ce:03:fb:
a9:d8:d2:77:ff:c6:0b:ff:2e:18:42:6a:3c:98:c9:5f:ed:44:
6d:46:ef:ee:dc:15:97:09:01:44:e4:be:65:25:ca:09:ea:84:
53:8a:eb:35:74:1f:22:c0:55:7d:e2:f1:cf:f3:d6:1d:f8:e7:
d8:45:50:e0:bc:e9:cc:45:04:dd:e9:d2:13:3f:f4:53:1b:b1:
80:6b:c6:34:c2:01:55:85:cb:b3:80:eb:0e:35:c6:c9:fb:b4:
3e:17:46:78:8b:ba:a2:76:66:42:5f:6e:4d:72:9a:39:32:22:
0a:26:e2:1e:48:e9:a9:e8:e0:b9:41:13:1f:0d:2d:d8:0b:53:
ca:38:96:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:10:56 2025 by rpki-client