Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
File: CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft (raw, json)
Hash identifier: +iDH/Gtr+52cH4gdork2T0nfdD9O4yR5aqakzvbd0CI=
Subject key identifier: 66:7A:44:C0:A1:25:8A:24:42:5F:EF:ED:D0:9E:EE:91:53:24:BB:B5
Authority key identifier: 09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
Certificate issuer: /CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Certificate serial: 019A293089973878B3E9CD773A57EDEE8050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
Manifest number: 1134
Signing time: Tue 28 Oct 2025 05:00:38 +0000
Manifest this update: Tue 28 Oct 2025 05:00:38 +0000
Manifest next update: Wed 29 Oct 2025 05:00:38 +0000
Files and hashes: 1: CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl (hash: eZBwzIbpgw3a8JdSIbEelFyxLpX6J5IMfmEdY5GRXlE=)
2: XmZzj7JcB6jd6mOFVB5P5PDKL5E.roa (hash: 0790uLZ+/UaE4zF4DtLMPcWHd+AL9SLdbKcmlMREbOY=)
3: fRGE3gXQY93KoteIKmDWsv7Pa8E.roa (hash: oBozhLOPrWsT/ybptTbngKdb/+Q5fLnG+R66tlH23uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:89:97:38:78:b3:e9:cd:77:3a:57:ed:ee:80:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095dff1f6bd8813de5ff9af167247f78b88439bd
Validity
Not Before: Oct 28 05:00:38 2025 GMT
Not After : Oct 29 05:00:38 2025 GMT
Subject: CN=667a44c0a1258a24425fefedd09eee915324bbb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:df:ba:66:52:c1:7f:62:1b:83:54:8b:c5:db:
c2:ac:88:37:2d:99:e6:9e:fa:e9:0a:59:95:ab:4d:
bd:c9:94:e3:83:10:81:f0:2e:64:e6:c4:4f:59:bb:
1d:a0:5f:85:89:74:fb:3f:98:ce:ce:e0:67:c6:f9:
2f:c2:59:04:2b:1b:77:fe:cf:6e:fe:ff:b6:a6:72:
7f:8a:37:3c:43:a5:05:50:23:3a:d3:49:4f:68:71:
86:dc:4f:4f:f2:a5:4c:c0:85:29:19:91:fc:37:37:
3e:29:c8:d8:d6:d1:89:39:48:87:49:c3:43:b2:4c:
34:bd:52:21:b6:cc:2e:8f:10:88:3b:d5:9c:9b:c0:
e7:5b:5f:ff:23:5d:ef:ad:9c:1c:9d:d0:be:4a:27:
a1:80:98:ba:eb:28:6b:c7:0d:03:8a:5f:2e:01:8c:
57:30:d0:5b:0f:f0:a3:8c:5e:4c:2f:ae:e9:22:04:
c4:19:9e:50:39:83:84:0f:26:7b:3d:db:d2:7f:e7:
38:a8:20:5f:aa:d2:6d:5b:e2:be:e9:84:d3:a2:74:
31:3b:a0:80:c4:c9:b2:b4:3e:bf:c8:40:e0:45:58:
1b:5d:b7:35:39:36:3a:a6:aa:8a:80:71:5a:33:64:
43:b4:9b:e6:94:10:75:38:e3:a8:ed:eb:9a:1f:1b:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7A:44:C0:A1:25:8A:24:42:5F:EF:ED:D0:9E:EE:91:53:24:BB:B5
X509v3 Authority Key Identifier:
keyid:09:5D:FF:1F:6B:D8:81:3D:E5:FF:9A:F1:67:24:7F:78:B8:84:39:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CV3_H2vYgT3l_5rxZyR_eLiEOb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5d0278-216e-4712-9487-19b3d1544c39/1/CV3_H2vYgT3l_5rxZyR_eLiEOb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:61:8f:ae:d1:f5:0b:79:bc:31:e8:a0:03:56:24:82:da:f4:
d2:11:51:a9:5d:b4:01:14:c9:eb:dc:4d:08:96:42:a2:c4:a3:
25:77:22:51:df:37:cc:25:4d:f0:34:cc:cb:1d:84:6c:68:a0:
8a:fa:a1:2c:2e:e8:19:9f:89:e1:c1:6f:f4:0c:d7:a1:16:24:
a0:b9:41:d9:45:13:fe:51:82:59:49:b6:5d:65:f7:fc:a7:92:
31:d7:47:0b:ec:25:ae:44:86:ca:de:7f:d9:5f:30:c2:7b:23:
e5:6e:3c:63:32:cb:d5:e9:86:48:34:49:e9:5f:90:66:c7:e0:
e5:15:46:9c:3e:e1:23:f5:b9:49:96:fa:c3:7f:7e:19:4b:e8:
cd:d1:4f:cd:70:78:8f:15:86:b1:2e:ec:3d:35:b8:7d:d2:25:
11:da:2c:73:23:c4:95:3f:a5:7c:8e:03:7d:05:67:4a:ee:aa:
06:5c:fb:94:1e:61:7d:26:f3:84:d7:d0:23:1f:7d:37:c9:00:
e1:99:c8:34:b7:c4:c0:a0:f7:90:61:12:55:40:20:6d:4c:d8:
7c:1a:d0:42:be:41:44:ac:bc:0e:5b:e0:d0:aa:12:f7:29:12:
ce:7f:1f:ac:54:cf:63:9c:99:c8:42:7d:d4:6a:03:a6:69:7d:
f1:4d:9b:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopMImXOHiz6c13Olft7oBQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NWRmZjFmNmJkODgxM2RlNWZmOWFmMTY3MjQ3Zjc4Yjg4
NDM5YmQwHhcNMjUxMDI4MDUwMDM4WhcNMjUxMDI5MDUwMDM4WjAzMTEwLwYDVQQD
Eyg2NjdhNDRjMGExMjU4YTI0NDI1ZmVmZWRkMDllZWU5MTUzMjRiYmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd+6ZlLBf2Ibg1SLxdvCrIg3LZnm
nvrpClmVq029yZTjgxCB8C5k5sRPWbsdoF+FiXT7P5jOzuBnxvkvwlkEKxt3/s9u
/v+2pnJ/ijc8Q6UFUCM600lPaHGG3E9P8qVMwIUpGZH8Nzc+KcjY1tGJOUiHScND
skw0vVIhtswujxCIO9Wcm8DnW1//I13vrZwcndC+SiehgJi66yhrxw0Dil8uAYxX
MNBbD/CjjF5ML67pIgTEGZ5QOYOEDyZ7PdvSf+c4qCBfqtJtW+K+6YTTonQxO6CA
xMmytD6/yEDgRVgbXbc1OTY6pqqKgHFaM2RDtJvmlBB1OOOo7euaHxs5jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZ6RMChJYokQl/v7dCe7pFTJLu1MB8GA1UdIwQY
MBaAFAld/x9r2IE95f+a8Wckf3i4hDm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1YzX0gydllnVDNsXzVyeFp5Ul9lTGlFT2IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81ZDAyNzgtMjE2ZS00NzEyLTk0ODct
MTliM2QxNTQ0YzM5LzEvQ1YzX0gydllnVDNsXzVyeFp5Ul9lTGlFT2IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81ZDAyNzgtMjE2ZS00NzEyLTk0ODctMTliM2QxNTQ0YzM5
LzEvQ1YzX0gydllnVDNsXzVyeFp5Ul9lTGlFT2IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmGPrtH1
C3m8MeigA1Ykgtr00hFRqV20ARTJ69xNCJZCosSjJXciUd83zCVN8DTMyx2EbGig
ivqhLC7oGZ+J4cFv9AzXoRYkoLlB2UUT/lGCWUm2XWX3/KeSMddHC+wlrkSGyt5/
2V8wwnsj5W48YzLL1emGSDRJ6V+QZsfg5RVGnD7hI/W5SZb6w39+GUvozdFPzXB4
jxWGsS7sPTW4fdIlEdoscyPElT+lfI4DfQVnSu6qBlz7lB5hfSbzhNfQIx99N8kA
4ZnINLfEwKD3kGESVUAgbUzYfBrQQr5BRKy8Dlvg0KoS9ykSzn8frFTPY5yZyEJ9
1GoDpml98U2bHA==
-----END CERTIFICATE-----
Generated at Tue Oct 28 12:40:17 2025 by rpki-client