Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: p9NB0nDVkt2bOYql9e92Ohk6Szn40BpgQ29dslXky90=
Subject key identifier: B5:B1:24:6E:97:B2:27:46:17:31:29:87:DF:C4:BC:D5:1C:51:3A:DD
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 019853B225EB6CD29EBEF7E126AF01C342B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 01:00:40 +0000
Manifest this update: Tue 29 Jul 2025 01:00:40 +0000
Manifest next update: Wed 30 Jul 2025 01:00:40 +0000
Files and hashes: 1: IQJY4wiykJwUR66o9Fs0mVyK_BY.roa (hash: sOQn6ofboeM57RYlzWfjexIU5njt7tJ8PQXKuKFY2zY=)
2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: HwvISrG3ok3iFNZDzUkwtbOkqQU0vdcqtEaoCL1ssoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b2:25:eb:6c:d2:9e:be:f7:e1:26:af:01:c3:42:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Jul 29 01:00:40 2025 GMT
Not After : Jul 30 01:00:40 2025 GMT
Subject: CN=b5b1246e97b2274617312987dfc4bcd51c513add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5d:b7:f8:ce:87:56:7c:33:4b:5c:67:da:6c:
6d:00:7d:2c:01:f0:ee:21:a5:c9:e8:c1:fa:aa:c8:
b4:c9:b7:56:5d:68:b0:ce:f8:5f:31:41:71:4e:7d:
b6:13:c4:e4:e6:a7:d5:bd:f8:e7:48:96:82:5a:8d:
4d:86:b8:16:27:6f:8b:21:ff:e7:2b:2f:cc:4e:67:
46:37:d4:3f:01:f6:d5:3e:90:d7:e0:b4:64:fa:26:
c7:a0:6e:7a:83:b4:be:61:d7:06:ad:12:a3:3d:aa:
69:80:5f:44:c5:49:71:39:10:b5:e7:5b:52:d6:86:
91:c5:ba:50:c1:d2:9c:b9:47:ed:6a:7c:ef:34:d8:
77:a6:9d:97:68:a3:7f:ef:92:48:1b:fb:99:98:a8:
19:65:13:1b:3d:07:54:cb:dd:8c:b9:22:04:a3:c8:
df:38:a3:69:00:6e:76:3c:23:9a:a2:69:9a:bb:aa:
54:1e:21:eb:ed:d8:8b:a9:a6:fd:d1:4f:c5:8d:09:
d7:1c:29:7e:81:ee:fa:74:0a:ac:b4:3e:52:50:6a:
03:15:b5:3c:b9:27:05:3e:c0:a3:9f:73:67:f8:24:
36:53:ad:bf:f1:1f:69:92:4e:e1:5f:69:14:8d:88:
7e:30:3a:bc:cb:35:6d:b6:4d:2d:db:54:dc:a9:4e:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B1:24:6E:97:B2:27:46:17:31:29:87:DF:C4:BC:D5:1C:51:3A:DD
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:06:98:19:f3:85:83:eb:9a:b5:42:f7:08:af:6d:8a:5a:4b:
c2:85:26:85:9c:86:a3:f9:d7:14:bc:8e:58:b8:10:b6:9c:f2:
d6:8b:89:6b:e5:ee:2f:46:9c:b0:8f:5a:ba:11:1f:21:27:ae:
14:5f:ea:40:67:06:c1:f9:94:36:7d:79:dc:39:b6:72:1e:e3:
56:6e:4f:58:fc:34:c1:d8:03:f4:65:62:fb:4d:c9:b5:73:40:
44:bf:29:70:c8:d7:49:57:1a:bb:00:34:7a:f0:c2:75:a3:8b:
22:bf:d3:6e:ea:f9:05:37:03:7f:59:5c:0f:9e:e4:0c:83:93:
e5:bb:b4:bf:52:1d:a4:a4:4e:20:d6:6a:a9:60:b0:c0:66:51:
2d:d7:cc:9e:19:d6:6c:05:12:7d:83:51:38:31:56:92:3c:85:
36:02:7d:ec:08:fc:b6:a3:bc:ed:b7:81:cb:c5:6e:2f:40:b0:
ee:c1:d4:43:70:1c:61:9a:79:e6:58:31:c0:56:0e:71:08:70:
f5:7c:c8:5b:35:3d:19:fe:03:ed:fc:fa:95:1a:5b:63:3e:74:
70:30:aa:af:ec:8e:ce:8d:67:4c:a5:ad:f1:1b:73:84:33:b8:
a0:f8:22:09:42:7e:8e:b9:b3:91:56:54:df:fb:79:41:e7:51:
3d:7f:a4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 02:55:40 2025 by rpki-client