Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
File: CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft (raw, json)
Hash identifier: vX/VA0C2CPUctC4nU3HyJQUS9bTM2JcNpLuL9YDKlw8=
Subject key identifier: 07:A0:6B:9F:A4:B8:D4:8A:B4:A3:1F:89:42:B4:35:CF:4A:3E:EB:34
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial: 01984A410729A1F6FC5F8B0677D92B77D81E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
Manifest number: 103C
Signing time: Sun 27 Jul 2025 05:00:32 +0000
Manifest this update: Sun 27 Jul 2025 05:00:32 +0000
Manifest next update: Mon 28 Jul 2025 05:00:32 +0000
Files and hashes: 1: CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl (hash: 6RQX0a7YtllGSd15UKIv8c8VsTyN/+9pIQ4WdFTYj24=)
2: XmZzj7JcB6jd6mOFVB5P5PDKL5E.roa (hash: 0790uLZ+/UaE4zF4DtLMPcWHd+AL9SLdbKcmlMREbOY=)
3: fRGE3gXQY93KoteIKmDWsv7Pa8E.roa (hash: oBozhLOPrWsT/ybptTbngKdb/+Q5fLnG+R66tlH23uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:07:29:a1:f6:fc:5f:8b:06:77:d9:2b:77:d8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Validity
Not Before: Jul 27 05:00:32 2025 GMT
Not After : Jul 28 05:00:32 2025 GMT
Subject: CN=07a06b9fa4b8d48ab4a31f8942b435cf4a3eeb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:2d:cd:81:84:02:fa:c3:68:2b:6b:fc:2e:
fa:aa:6f:0e:e6:e9:a4:43:3f:ff:2e:6f:93:e9:41:
87:72:8d:9f:b4:17:fc:13:56:79:81:d3:12:d3:cb:
60:a8:d3:c7:e8:f3:40:7f:d2:63:4d:d8:7e:ee:34:
47:fe:71:33:c9:15:84:86:85:a8:89:60:4e:a8:99:
58:d3:df:cb:79:53:e6:a4:2c:c8:b7:f3:ca:57:b2:
26:7e:f3:f6:6d:d6:f1:74:8d:93:e5:46:aa:0f:c0:
4f:28:4e:2c:36:ed:70:09:c9:82:2f:f3:ee:aa:16:
93:9c:ce:4d:16:dd:ad:88:b3:aa:ab:06:b1:81:a3:
39:3e:33:a7:e7:bd:b0:c7:e5:94:4d:52:ec:7d:e4:
47:63:47:b5:07:bd:fa:9c:8a:e0:06:db:30:7d:c3:
17:40:09:da:e2:c4:ae:f9:20:da:63:27:39:79:6c:
fb:79:a3:a0:6c:a0:ac:e4:7e:43:a7:2a:4b:10:75:
f4:f8:11:5c:a4:75:f3:c6:ea:01:25:c7:17:7f:f3:
7d:ef:44:95:f9:29:c1:01:f6:b1:89:6f:c2:16:69:
78:6b:d2:22:d3:74:62:aa:d8:a6:c2:f0:6f:9a:08:
2e:4d:e6:c4:7c:78:33:4b:c3:0f:92:db:6a:f3:4b:
a9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A0:6B:9F:A4:B8:D4:8A:B4:A3:1F:89:42:B4:35:CF:4A:3E:EB:34
X509v3 Authority Key Identifier:
keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:81:5f:0d:e5:26:68:9d:05:c9:92:89:d7:00:8c:60:64:7e:
ac:e0:a4:3b:2e:be:f4:cc:91:e3:19:b6:ea:9b:bf:9e:32:4c:
d2:1e:c1:aa:13:95:b7:06:8e:94:45:45:24:77:65:f2:d7:c2:
f1:1c:2f:74:3c:70:dd:75:8e:f4:6d:b6:74:4b:52:7c:b0:6e:
87:95:de:57:b6:27:46:fd:1c:08:63:a5:c3:bb:ba:c6:4c:47:
33:70:63:40:7a:62:01:ec:04:38:62:cc:a0:76:a4:68:1c:d2:
67:6d:d6:ae:56:88:f5:21:05:e8:ed:34:53:f9:74:d6:de:3a:
8f:a3:58:f9:74:7a:f7:be:72:a1:3a:68:ff:31:5b:19:c1:9a:
6a:51:41:71:76:6d:42:f8:e1:a5:88:11:96:9c:1b:ad:c0:9f:
1b:29:ff:d7:00:84:10:40:63:6a:9d:9d:e1:82:54:cd:38:e1:
4a:38:96:b2:37:d6:33:ac:99:87:a7:c0:26:09:0d:66:0d:c8:
d6:41:d0:af:44:bc:1c:ac:79:95:e9:46:88:6a:81:be:81:8f:
d8:57:17:3b:2b:f6:5f:5d:35:38:3e:6b:2c:5f:ff:80:1b:69:
f6:a7:01:d2:ec:5a:29:a2:8b:e3:d0:1e:6c:54:15:0d:dc:4c:
11:56:55:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQQcpofb8X4sGd9krd9geMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NWRmZjFmNmJkODgxM2RlNWZmOWFmMTY3MjQ3Zjc4Yjg4
NDM5YmQwHhcNMjUwNzI3MDUwMDMyWhcNMjUwNzI4MDUwMDMyWjAzMTEwLwYDVQQD
EygwN2EwNmI5ZmE0YjhkNDhhYjRhMzFmODk0MmI0MzVjZjRhM2VlYjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuEtzYGEAvrDaCtr/C76qm8O5umk
Qz//Lm+T6UGHco2ftBf8E1Z5gdMS08tgqNPH6PNAf9JjTdh+7jRH/nEzyRWEhoWo
iWBOqJlY09/LeVPmpCzIt/PKV7ImfvP2bdbxdI2T5UaqD8BPKE4sNu1wCcmCL/Pu
qhaTnM5NFt2tiLOqqwaxgaM5PjOn572wx+WUTVLsfeRHY0e1B736nIrgBtswfcMX
QAna4sSu+SDaYyc5eWz7eaOgbKCs5H5DpypLEHX0+BFcpHXzxuoBJccXf/N970SV
+SnBAfaxiW/CFml4a9Ii03RiqtimwvBvmgguTebEfHgzS8MPkttq80upHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAega5+kuNSKtKMfiUK0Nc9KPus0MB8GA1UdIwQY
MBaAFAld/x9r2IE95f+a8Wckf3i4hDm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1YzX0gydllnVDNsXzVyeFp5Ul9lTGlFT2IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81ZDAyNzgtMjE2ZS00NzEyLTk0ODct
MTliM2QxNTQ0YzM5LzEvQ1YzX0gydllnVDNsXzVyeFp5Ul9lTGlFT2IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81ZDAyNzgtMjE2ZS00NzEyLTk0ODctMTliM2QxNTQ0YzM5
LzEvQ1YzX0gydllnVDNsXzVyeFp5Ul9lTGlFT2IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYFfDeUm
aJ0FyZKJ1wCMYGR+rOCkOy6+9MyR4xm26pu/njJM0h7BqhOVtwaOlEVFJHdl8tfC
8RwvdDxw3XWO9G22dEtSfLBuh5XeV7YnRv0cCGOlw7u6xkxHM3BjQHpiAewEOGLM
oHakaBzSZ23WrlaI9SEF6O00U/l01t46j6NY+XR6975yoTpo/zFbGcGaalFBcXZt
QvjhpYgRlpwbrcCfGyn/1wCEEEBjap2d4YJUzTjhSjiWsjfWM6yZh6fAJgkNZg3I
1kHQr0S8HKx5lelGiGqBvoGP2FcXOyv2X101OD5rLF//gBtp9qcB0uxaKaKL49Ae
bFQVDdxMEVZVqA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:39:29 2025 by rpki-client