Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
File: riVa_-CEMRtuoC--Roa3lFNZhhw.mft (raw, json)
Hash identifier: HkYe/2XS++f5VqHHyDlgIVTFEXN66WUY8905CX56VWY=
Subject key identifier: A4:01:BF:0F:84:01:87:3E:84:03:2E:9C:B3:2A:7F:0A:F3:06:D8:AA
Authority key identifier: AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C
Certificate issuer: /CN=ae255affe084311b6ea02fbe4686b7945359861c
Certificate serial: 019755DA64E0641FE5850DC649C70D065E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
Manifest number: 0380
Signing time: Mon 09 Jun 2025 18:01:05 +0000
Manifest this update: Mon 09 Jun 2025 18:01:05 +0000
Manifest next update: Tue 10 Jun 2025 18:01:05 +0000
Files and hashes: 1: YLMlluYLr6JfK-y1U7Gu2bMProM.roa (hash: dLTxCUQo6hqFLyHwLbKwrnQtAYSoW8dcHWFQbKuVfyk=)
2: riVa_-CEMRtuoC--Roa3lFNZhhw.crl (hash: jW/JVPUEW88ASMw3JocmHbYx5vvoQKM9kIFeQCN75is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:da:64:e0:64:1f:e5:85:0d:c6:49:c7:0d:06:5e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae255affe084311b6ea02fbe4686b7945359861c
Validity
Not Before: Jun 9 18:01:05 2025 GMT
Not After : Jun 10 18:01:05 2025 GMT
Subject: CN=a401bf0f8401873e84032e9cb32a7f0af306d8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:33:fa:40:04:2b:3a:3c:c4:b4:d8:28:12:
ff:62:75:21:51:41:5b:23:7f:ce:b6:e1:50:c1:66:
68:8d:86:c5:a3:c5:34:fc:80:ac:19:f5:6d:56:78:
b7:0b:4d:83:fe:5d:e4:a6:cd:ac:8d:80:b6:0a:69:
0f:d8:2c:d6:b1:9c:04:e6:06:8d:f7:f0:41:9c:4c:
b7:c9:fa:98:c1:73:ac:5e:b5:5b:58:44:61:e4:3a:
f5:db:ad:ef:f7:b8:1b:26:da:a1:3e:de:80:ec:b7:
5b:e4:6c:d4:6f:64:0f:c0:7f:7b:58:ac:48:78:81:
15:3d:20:e9:81:cb:5f:8b:e5:59:59:f0:c0:9c:e9:
f7:51:90:02:87:71:eb:21:2a:44:d8:34:84:0e:bb:
26:52:70:11:c4:7e:16:f7:a4:6c:79:af:89:d5:ff:
66:0c:fd:de:75:b3:a9:2a:82:12:3c:90:c8:bd:c0:
66:40:d2:14:af:0e:61:dd:bc:4f:71:41:ed:c2:a0:
98:04:72:d0:16:31:4e:d6:25:65:26:f4:1c:aa:a6:
f7:34:0e:1d:98:2b:ee:31:af:18:d8:75:95:b6:09:
38:be:06:3f:0b:1c:f2:db:9c:a5:a0:18:47:a9:32:
c9:87:b1:0a:78:1c:39:e3:98:1b:8a:bb:ab:4c:b4:
ae:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:01:BF:0F:84:01:87:3E:84:03:2E:9C:B3:2A:7F:0A:F3:06:D8:AA
X509v3 Authority Key Identifier:
keyid:AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6c:3b:ef:4b:83:22:a5:98:7a:41:3b:f2:4a:e8:95:67:a0:
5f:7f:0e:8d:7e:f9:15:a0:3f:dd:48:4d:fd:69:ca:76:ed:ff:
cc:52:fc:8c:ec:2d:a3:b4:8b:8d:bd:f5:ff:e6:88:e7:14:bd:
3c:2d:0d:23:dc:89:0b:15:27:e9:e7:56:e3:20:30:6e:66:5d:
44:b0:ed:f4:d0:58:6a:5d:d5:fb:c2:d9:32:28:29:2a:dc:48:
e4:3f:76:e8:30:1c:2a:42:61:e5:e7:dd:e4:a3:0a:66:6e:78:
fe:fe:9c:f7:d9:26:97:0e:de:f4:b2:70:25:9b:60:45:1d:ba:
2a:53:aa:1d:0a:4f:d4:43:9c:48:58:2d:ce:2f:7b:bf:95:14:
75:f6:c4:ff:2e:f8:bf:55:4f:01:4c:06:bd:5e:81:14:7c:31:
64:25:10:57:81:2d:58:53:6d:61:37:f2:c8:18:3f:84:23:45:
08:df:e9:15:fe:eb:ef:43:68:b5:5d:b8:05:33:37:91:84:8c:
8c:49:31:13:bb:d5:94:74:22:5a:20:1d:e6:73:7a:8a:94:4e:
46:e9:57:5c:64:40:8e:6a:63:bc:31:1d:aa:bf:95:b1:24:56:
9c:34:ba:d5:17:5b:0a:f9:aa:54:e4:2d:16:b0:51:1c:ce:80:
65:d1:a1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:58:38 2025 by rpki-client