
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: 42E2k+E0/ypXsMjmeP4Ll2tqukMdc/DP0Mn8jeclu4E=
Subject key identifier: 8D:B4:A8:40:F3:77:CA:EA:EB:C7:9C:60:7F:AB:A4:D1:37:52:CA:46
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 01988BB3EE9374CCA09369DC51299441404C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 22:01:21 +0000
Manifest this update: Fri 08 Aug 2025 22:01:21 +0000
Manifest next update: Sat 09 Aug 2025 22:01:21 +0000
Files and hashes: 1: IQJY4wiykJwUR66o9Fs0mVyK_BY.roa (hash: sOQn6ofboeM57RYlzWfjexIU5njt7tJ8PQXKuKFY2zY=)
2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: ocFwyhTNe73L9VXTl3dddjm8HmjwropXyqPLiQn6CNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:ee:93:74:cc:a0:93:69:dc:51:29:94:41:40:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Aug 8 22:01:21 2025 GMT
Not After : Aug 9 22:01:21 2025 GMT
Subject: CN=8db4a840f377caeaebc79c607faba4d13752ca46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a9:a3:0a:f8:a2:07:d9:4c:5b:89:76:67:6d:
7f:aa:1a:9c:17:4f:36:b9:90:15:dc:88:8c:b9:97:
44:73:89:ba:cd:86:d9:3d:2b:e2:42:8b:c5:16:b6:
99:f9:1e:fb:a1:ea:cb:3a:a1:53:d3:08:fc:62:7f:
ab:93:7e:bc:ed:97:5e:04:5b:2e:9c:c5:73:31:84:
e5:28:63:a6:f7:be:35:2c:f8:08:95:82:5d:58:a8:
ee:6e:da:f8:59:a0:0f:d9:ff:c1:82:fb:af:d0:19:
85:3f:51:17:9e:36:51:93:4b:8c:1f:c9:c1:f4:10:
a4:04:4e:e1:e7:c7:38:89:7e:26:4b:db:6e:1c:6a:
f9:1b:d6:68:a4:23:94:93:e3:9e:c1:16:e1:cc:71:
8b:80:58:9f:ea:f1:36:8c:d4:13:82:3c:a5:5b:cc:
6e:7d:40:06:8c:3d:03:f8:42:c0:64:81:36:2e:9a:
09:3f:06:40:a3:6b:f1:70:84:55:12:a2:be:01:c2:
38:a3:d0:04:3d:cd:f1:5f:57:23:ed:49:11:ef:18:
70:f1:95:29:ef:b3:49:45:28:36:e0:3e:7f:a4:74:
0c:07:6e:bd:ca:14:98:7c:dc:a7:a2:75:46:00:49:
fc:2d:1e:20:31:58:53:7a:0d:80:8d:58:5e:d6:a4:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B4:A8:40:F3:77:CA:EA:EB:C7:9C:60:7F:AB:A4:D1:37:52:CA:46
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:94:e6:8d:54:18:0b:3b:16:1d:09:e0:da:dc:d0:4d:28:22:
95:f1:ae:94:d6:4e:c9:a8:09:ae:04:c5:ab:36:ce:f9:ad:1a:
28:50:dd:74:21:3d:af:dc:8e:72:ca:13:c5:4d:08:17:e0:9d:
20:03:17:aa:ee:89:0f:65:55:75:b8:9c:fd:08:05:01:56:0a:
65:6d:d3:e1:b8:bf:ac:15:f5:bd:38:9b:3e:15:2f:6d:cb:e4:
73:63:3f:b9:b4:60:b4:cf:ad:14:67:2b:80:c4:56:8e:f0:52:
d5:17:b1:47:ee:56:ba:92:4e:3d:1b:10:4d:2d:22:f9:cc:42:
d1:d8:ab:10:ab:b8:60:d7:5a:27:f4:ba:9a:51:28:4a:00:b7:
48:7e:5b:57:64:26:87:37:bb:23:fd:df:c4:f0:96:0f:50:ec:
85:b8:c6:85:2f:81:f8:5f:a0:0c:2e:2c:fb:b5:ed:a6:9e:59:
7b:59:fa:2d:7c:bd:11:38:b4:bd:c3:d8:4d:e3:00:c3:28:9c:
ae:cd:36:42:f9:e2:dd:a4:f0:1b:ea:a6:b6:80:fe:75:6d:d4:
5d:71:19:53:90:44:aa:d2:a9:6b:ed:11:85:65:30:91:3a:b1:
2b:50:d3:e8:a7:1a:be:42:7d:d7:37:7f:b6:4d:ad:46:f7:1d:
93:fd:b4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:41:53 2025 by rpki-client