Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
File: CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft (raw, json)
Hash identifier: FpzA8pMdE58jjPa0p2xWB0jkuO7DOWOXA3CT++YYhbs=
Subject key identifier: D2:A6:64:DE:3C:D4:D3:F5:F2:46:8A:F4:29:7C:D9:4A:9E:7E:0E:46
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial: 01967AC4BFEABDF1C6B1BDAB0850357D0CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
Manifest number: 0F4C
Signing time: Mon 28 Apr 2025 05:00:36 +0000
Manifest this update: Mon 28 Apr 2025 05:00:36 +0000
Manifest next update: Tue 29 Apr 2025 05:00:36 +0000
Files and hashes: 1: CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl (hash: 9b/d2d/616nhlTTr4K0KIVBr9PAGFmDe1X0O1Nw0P5M=)
2: XmZzj7JcB6jd6mOFVB5P5PDKL5E.roa (hash: 0790uLZ+/UaE4zF4DtLMPcWHd+AL9SLdbKcmlMREbOY=)
3: fRGE3gXQY93KoteIKmDWsv7Pa8E.roa (hash: oBozhLOPrWsT/ybptTbngKdb/+Q5fLnG+R66tlH23uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:bf:ea:bd:f1:c6:b1:bd:ab:08:50:35:7d:0c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Validity
Not Before: Apr 28 05:00:36 2025 GMT
Not After : Apr 29 05:00:36 2025 GMT
Subject: CN=d2a664de3cd4d3f5f2468af4297cd94a9e7e0e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:ad:f4:fa:5f:84:e1:cc:c5:a8:3c:18:03:
6b:40:ef:d2:b2:89:b2:b0:f5:29:c5:78:66:64:26:
fc:b2:6d:f3:ae:e3:bc:e6:91:56:ef:22:4f:d8:37:
27:62:39:9a:9b:43:03:5c:4a:62:5d:34:0c:44:a8:
a1:eb:ed:a2:ca:bb:fb:9a:83:1c:df:cf:ee:70:03:
51:b0:5e:51:d8:43:d9:f5:fb:0b:68:22:49:7d:cb:
9a:7a:1c:ab:c6:54:03:83:07:c1:9d:3d:4f:73:39:
95:85:2e:27:b8:cc:40:36:f3:02:1a:22:cd:cd:36:
3c:64:2d:bd:bc:c0:a8:97:05:fa:8e:de:d8:17:7f:
11:e2:9d:59:0c:b3:30:17:53:b3:50:f5:e2:7a:ee:
13:db:0c:f9:c9:3a:13:5b:dd:f7:83:ce:04:b0:93:
c6:4c:51:37:bd:be:ba:d8:f7:36:92:b5:b4:15:bf:
38:26:53:55:28:8f:b9:ba:bf:d8:da:fb:38:03:d4:
13:52:b5:a8:28:d1:cf:d7:91:5d:10:0f:fd:43:9e:
42:58:29:2b:1f:ab:bf:09:25:37:f3:9f:55:f6:8d:
5d:10:aa:8a:b3:46:cd:c3:3e:ca:87:43:62:15:1e:
5f:64:d7:34:d0:df:1e:6a:b5:94:53:47:9a:33:83:
b5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A6:64:DE:3C:D4:D3:F5:F2:46:8A:F4:29:7C:D9:4A:9E:7E:0E:46
X509v3 Authority Key Identifier:
keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e3:1a:f9:bc:6a:66:2f:d1:b3:07:71:31:83:25:50:19:1c:
e0:4a:cf:fe:7e:1e:98:39:89:54:18:ec:8c:dd:c5:7c:26:58:
18:0f:a6:60:ef:0e:a1:64:e2:26:6f:34:9c:9b:9d:7d:d8:0f:
f2:04:62:2f:96:5d:e8:2c:a2:8b:be:1c:2b:a3:16:99:d0:e5:
79:dd:1a:c9:b7:ec:65:b3:84:b6:a1:3a:1d:3c:fe:41:8e:e3:
70:c9:b8:42:3f:44:37:56:f5:a3:47:6b:8b:c6:c8:71:69:ee:
4e:4e:c1:0d:a5:db:38:00:1a:99:4f:d5:a2:9e:18:b4:7b:10:
a8:6a:be:c1:f3:5f:22:e7:8e:e5:fd:78:6a:df:67:60:9a:3c:
08:e9:93:ce:46:c9:0f:b8:33:5a:53:0c:ae:f1:c1:13:c4:40:
8d:54:29:41:9b:1c:0d:a5:eb:46:20:cd:45:b7:79:70:d3:cc:
47:3d:a0:b7:73:f7:da:f9:0d:24:4c:8f:bc:c5:3e:42:39:37:
1f:1c:6a:43:3b:e4:4b:51:41:49:bd:58:3e:a7:e6:21:92:29:
bf:89:3f:39:a9:f3:44:b8:5f:8a:3b:39:52:49:50:14:2a:e5:
52:af:02:1a:2a:3b:8a:2e:fb:04:be:0b:a8:63:6f:1e:36:2d:
f8:8c:40:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:26:44 2025 by rpki-client