Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
File: CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft (raw, json)
Hash identifier: g2DipMTdyDEFtwsayyR1eykRRxXhGlRguI2BHKW7rw8=
Subject key identifier: 72:0E:03:D5:68:9D:6E:49:E3:4A:65:B1:38:5A:11:43:8A:65:5A:26
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial: 01965613934960D7B981C0369824F26F12F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
Manifest number: 0F39
Signing time: Mon 21 Apr 2025 02:00:45 +0000
Manifest this update: Mon 21 Apr 2025 02:00:45 +0000
Manifest next update: Tue 22 Apr 2025 02:00:45 +0000
Files and hashes: 1: CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl (hash: Ikw3ce0JE1VzXSF3HFzOamoh85N/yegvnr951Pz9ws0=)
2: XmZzj7JcB6jd6mOFVB5P5PDKL5E.roa (hash: 0790uLZ+/UaE4zF4DtLMPcWHd+AL9SLdbKcmlMREbOY=)
3: fRGE3gXQY93KoteIKmDWsv7Pa8E.roa (hash: oBozhLOPrWsT/ybptTbngKdb/+Q5fLnG+R66tlH23uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:93:49:60:d7:b9:81:c0:36:98:24:f2:6f:12:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Validity
Not Before: Apr 21 02:00:45 2025 GMT
Not After : Apr 22 02:00:45 2025 GMT
Subject: CN=720e03d5689d6e49e34a65b1385a11438a655a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:04:27:5d:b1:78:09:cb:b2:f5:2c:83:cb:aa:
51:6a:05:15:d0:f8:c1:24:19:c1:24:71:a8:0b:ae:
81:a0:aa:a5:ea:44:35:3d:10:57:9d:9a:cd:6c:24:
d3:c8:e7:ed:6c:99:68:f4:81:e1:9f:3a:c1:30:25:
1e:a7:04:66:18:e9:12:7b:03:fc:e2:42:70:c5:a5:
14:59:e2:9f:c5:be:75:bb:ba:6d:77:c8:22:2b:50:
55:00:f7:74:70:bf:93:86:39:10:8a:20:ae:fa:fa:
18:1c:89:b8:7a:ac:ee:cf:58:c7:47:4b:5c:3d:b2:
d8:25:61:96:9c:c2:95:95:83:91:4e:0c:47:5c:dd:
ae:a0:0d:c7:ef:de:b7:50:86:d4:97:2b:8a:25:c1:
eb:67:91:c3:ae:6a:c2:7d:cf:3b:2d:78:88:d8:02:
ea:38:ec:d0:6e:21:72:6a:6d:c0:4f:75:4c:58:47:
4d:e5:dd:f0:46:55:82:5b:2c:41:71:dc:7d:eb:e9:
53:9b:4b:2e:78:7a:e0:9c:95:66:57:d9:f2:e0:15:
ae:82:30:e9:8f:b1:ec:b6:45:27:4b:13:f2:f8:ee:
0b:43:a9:b0:1c:8d:f5:75:91:15:84:b2:bd:01:6d:
4d:ab:1c:85:d3:87:49:bc:8e:b1:67:16:ed:0c:5c:
36:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0E:03:D5:68:9D:6E:49:E3:4A:65:B1:38:5A:11:43:8A:65:5A:26
X509v3 Authority Key Identifier:
keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6e:ed:1c:7c:56:fe:17:85:f5:78:21:db:15:a4:09:26:d9:
97:00:70:1e:df:a9:67:cc:7b:41:1b:45:d3:4f:71:70:24:aa:
c5:fa:16:72:e9:2a:28:aa:b0:03:95:77:72:46:c7:49:61:38:
f0:96:f1:e0:7f:ed:b4:95:cc:96:b5:6d:07:49:e1:53:27:f2:
4a:e4:da:ac:af:62:b7:36:59:a1:57:2a:e5:23:21:b0:50:72:
89:e4:e9:18:50:db:21:cd:8a:2d:0a:57:64:0b:48:8c:02:f7:
c4:d0:3b:7f:9f:6a:4d:9e:16:a4:50:ad:a9:a8:67:92:88:d7:
b1:9d:2d:d6:24:c2:e8:3a:3a:ab:4d:82:e4:19:e5:21:03:cc:
e7:35:fb:cc:4c:17:6e:7a:d5:6b:12:ab:77:96:15:67:58:d7:
3d:36:06:f6:d0:fc:e0:46:28:f8:c6:89:90:f5:0f:47:70:e5:
13:e9:83:45:3d:65:12:74:76:6d:b3:9c:3c:39:03:ef:69:1f:
75:bf:4e:1a:7f:b3:8d:c8:a7:58:d4:d2:0a:31:90:86:48:de:
f7:39:3a:c1:13:99:58:6c:7c:57:f2:ab:00:e6:4f:a3:f9:a3:
12:e9:36:76:a0:9b:54:60:f1:59:82:b6:b6:ea:48:8d:1c:a3:
e7:32:62:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:31:06 2025 by rpki-client