Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: 8ur0NUdbAOxYCXYFBm4wSbtnNoeT2gLYiIS/EpIrJLU=
Subject key identifier: D6:19:29:0B:AF:84:19:05:72:74:68:90:44:7A:7F:85:DF:4C:2A:A6
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 01967E6ADFB941082EFED44A4CB3C22124AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 22:00:55 +0000
Manifest this update: Mon 28 Apr 2025 22:00:55 +0000
Manifest next update: Tue 29 Apr 2025 22:00:55 +0000
Files and hashes: 1: IQJY4wiykJwUR66o9Fs0mVyK_BY.roa (hash: sOQn6ofboeM57RYlzWfjexIU5njt7tJ8PQXKuKFY2zY=)
2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: wl77/HUKSEJvtp3Z/zFHugc6xQIV7ZvIuIDtBGSBBfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:6a:df:b9:41:08:2e:fe:d4:4a:4c:b3:c2:21:24:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Apr 28 22:00:55 2025 GMT
Not After : Apr 29 22:00:55 2025 GMT
Subject: CN=d619290baf84190572746890447a7f85df4c2aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:15:ed:b3:c8:ef:f0:7a:b2:05:36:f4:d1:ce:
46:ec:94:a9:4e:46:f4:8d:4a:bd:37:a3:d1:81:35:
91:4e:b5:2a:f5:76:fb:a5:2e:87:93:6d:41:54:af:
a6:57:2f:6b:1b:d5:0c:4c:91:5f:ce:1f:7b:44:2f:
ad:25:bb:39:c7:d8:dd:a9:18:43:69:a1:eb:29:e2:
96:b5:21:f7:d2:f1:63:a7:45:d5:7a:cf:2f:c7:0c:
68:0c:63:56:39:5e:cf:17:81:1a:e0:a3:6f:53:d8:
69:79:61:b2:f7:86:b6:75:94:64:aa:32:29:b4:75:
42:9d:12:01:7d:53:60:61:e1:31:0d:55:c4:5f:6a:
34:77:94:92:a5:fa:be:76:52:70:de:38:3b:97:24:
be:3f:f8:fb:ad:90:92:66:fe:39:3a:f1:cf:b1:91:
0e:51:d7:9a:c5:5d:44:71:fb:d6:a0:d0:74:16:5f:
f3:6d:4d:fb:86:28:3d:1c:f0:52:97:57:59:7a:97:
1e:73:9f:49:7a:33:b5:bf:46:7f:05:f8:28:8a:4e:
8b:7e:6f:9b:c6:17:eb:fb:41:8f:fd:dc:df:95:ca:
4c:a2:72:b7:c9:ae:6d:be:15:3b:5f:02:f1:ca:4d:
d9:ae:55:f9:a4:2e:a6:48:2f:36:ea:85:84:8c:85:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:19:29:0B:AF:84:19:05:72:74:68:90:44:7A:7F:85:DF:4C:2A:A6
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:11:0f:44:64:5f:74:27:52:e1:d6:70:95:21:85:12:d1:fb:
9d:37:ef:25:aa:cb:9c:e9:2a:0f:0a:fc:f1:bb:3c:05:11:b9:
a8:35:bd:91:c9:d1:33:b9:f4:dd:3d:01:aa:9c:a6:7c:bb:aa:
1d:7d:e1:62:b4:1f:cd:38:79:8c:9c:14:02:9a:05:9c:80:c5:
d7:09:0f:e9:19:8a:2c:64:44:a1:d3:0a:b6:d8:da:88:11:7f:
9b:74:3f:a9:ce:36:d7:a2:0a:84:41:3d:21:f4:86:72:74:96:
d9:14:09:53:0c:f2:24:49:8f:de:dd:07:9f:e8:d9:ed:6f:55:
1e:82:19:69:0f:bf:4f:82:24:c7:12:e7:38:63:a1:0d:fe:f4:
76:2c:ea:0b:d6:14:64:f1:10:7e:c8:5d:67:dd:62:49:29:b8:
05:80:50:b5:7d:2f:ff:15:7e:80:9e:00:c6:c8:b1:96:70:56:
26:c4:bf:9c:82:dc:1f:8d:63:c5:8c:cf:fa:66:b1:9c:2f:c0:
9f:9f:ef:bc:09:e3:7e:2e:bc:7b:2a:dc:ce:6b:c9:bb:9f:93:
7b:f1:12:90:e5:47:ec:ea:9b:8c:16:3e:da:ee:14:8b:ea:1b:
cd:fe:d2:a5:a5:78:74:3e:e2:6f:4d:e6:ca:94:ab:fb:2a:fe:
f8:a4:8d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:09:26 2025 by rpki-client