Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: 4LLtiDcvd9DkiDnuMTX2p8Vidv9CU4OH05VWzfZnfhI=
Subject key identifier: D6:87:A1:D5:9E:90:A4:80:C3:52:36:66:AF:40:17:2D:91:B7:2E:0E
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 01976A05DEABCA2AB2B103491A0176B312ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 16:00:58 +0000
Manifest this update: Fri 13 Jun 2025 16:00:58 +0000
Manifest next update: Sat 14 Jun 2025 16:00:58 +0000
Files and hashes: 1: IQJY4wiykJwUR66o9Fs0mVyK_BY.roa (hash: sOQn6ofboeM57RYlzWfjexIU5njt7tJ8PQXKuKFY2zY=)
2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: pLLPSnnftccIXT4eatjJbupF0qy0PRaZO/FO9DJB29o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:de:ab:ca:2a:b2:b1:03:49:1a:01:76:b3:12:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Jun 13 16:00:58 2025 GMT
Not After : Jun 14 16:00:58 2025 GMT
Subject: CN=d687a1d59e90a480c3523666af40172d91b72e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:b4:0c:fa:73:e1:00:65:f1:24:68:35:0c:
26:9f:2f:8a:5c:34:ad:64:7b:39:cc:19:d0:99:3e:
8d:15:47:2d:fb:ab:0d:ed:24:6d:b2:73:ec:94:bb:
14:6c:53:0c:18:29:61:e7:ab:31:f6:15:f1:95:ea:
dc:eb:da:a4:9d:6e:3b:79:59:c6:55:c1:f7:2d:e3:
b2:e9:86:e6:ef:12:85:10:5c:16:e7:2c:31:32:55:
a8:c2:fb:ee:ee:7a:7d:81:4a:69:0d:14:c6:6f:c1:
fd:58:35:42:6c:8b:28:e2:4b:93:88:37:e2:dc:ab:
a4:ef:20:03:f3:56:41:ab:7f:e9:b3:84:ec:90:6b:
2e:df:f6:04:84:25:96:46:83:e5:58:d9:7f:99:fd:
8b:55:b9:ba:0b:8e:f4:1e:4a:2f:9a:9c:09:c9:34:
0b:23:e6:a9:25:ba:f9:2e:53:10:d5:2d:b3:d6:29:
7b:40:eb:e6:fa:9a:9e:9a:d6:7e:39:51:05:87:81:
88:9f:60:d1:39:b4:7e:58:55:a7:13:61:72:83:e9:
42:fb:8f:55:cc:fb:14:d0:e0:d0:29:d8:c3:3d:b3:
97:b5:7c:35:7a:91:bd:e2:9a:f7:7f:c7:06:f6:10:
5a:79:0f:ef:e3:c9:63:d2:14:c3:bd:f2:17:1d:3c:
ce:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:87:A1:D5:9E:90:A4:80:C3:52:36:66:AF:40:17:2D:91:B7:2E:0E
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:29:d9:08:f5:91:4d:8c:0b:40:e5:2b:2c:e0:d2:31:04:1a:
56:be:6a:20:65:2e:1b:81:75:78:85:85:29:be:18:d5:0c:16:
5c:ef:e0:17:69:88:0c:c5:bc:ed:59:65:26:2d:0d:2d:8c:43:
46:b0:91:ad:1a:ee:dc:da:05:cf:94:46:3a:5f:08:b4:35:dd:
b6:8a:d6:6a:9f:6b:95:1a:43:01:53:93:90:68:19:93:a1:a7:
76:1a:0a:41:88:b2:be:6e:89:ab:12:19:91:f3:1c:56:f3:49:
5f:7a:e8:25:0a:74:17:ec:1c:58:a9:64:53:f4:81:ab:a0:ff:
d6:c8:95:bc:9b:a4:b3:77:77:ab:87:77:6b:38:bb:b2:18:55:
35:37:f8:b4:89:cf:fe:8d:39:6c:bb:e1:92:f1:ba:dc:d7:a0:
c8:03:f0:75:6e:0a:72:ab:58:c9:47:41:e3:a8:60:de:5f:b0:
96:ff:eb:a6:20:f6:ad:81:2a:85:c7:c2:3f:f2:ee:25:92:b7:
0d:af:5d:5c:62:35:00:86:e5:77:c9:9d:38:87:7b:83:4e:b9:
14:fe:83:48:1e:53:7d:e6:ea:89:0a:08:aa:95:d3:8b:6e:4a:
e2:32:fd:03:5e:d2:06:86:70:62:39:47:a4:53:cb:84:c4:06:
74:fd:24:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:57:47 2025 by rpki-client