Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: YwFi0jR5Sit87zctVbt2Xk2xTybso0sLdv0iZtF/g30=
Subject key identifier: 10:DC:8D:E4:E8:F1:BD:1C:B1:87:FB:59:A4:7B:AA:92:8F:6D:0F:84
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 0197643AA32E44290DED473F623DC09E5DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 158C
Signing time: Thu 12 Jun 2025 13:00:53 +0000
Manifest this update: Thu 12 Jun 2025 13:00:53 +0000
Manifest next update: Fri 13 Jun 2025 13:00:53 +0000
Files and hashes: 1: IQJY4wiykJwUR66o9Fs0mVyK_BY.roa (hash: sOQn6ofboeM57RYlzWfjexIU5njt7tJ8PQXKuKFY2zY=)
2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: EKs9THQM5IlasK+1xzzOxONy7KxoWFLFa5rsPA/AmMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:3a:a3:2e:44:29:0d:ed:47:3f:62:3d:c0:9e:5d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Jun 12 13:00:53 2025 GMT
Not After : Jun 13 13:00:53 2025 GMT
Subject: CN=10dc8de4e8f1bd1cb187fb59a47baa928f6d0f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:be:df:ce:ff:10:4c:15:98:5d:fb:a6:4d:
b0:cc:31:a6:37:e8:34:44:fd:b5:85:04:ea:ba:e3:
4f:c9:53:1a:76:e9:b3:ca:2c:74:b9:63:ae:98:4f:
e8:28:61:b6:e9:c8:c8:17:bd:6e:82:84:9f:d9:50:
9e:bd:71:cd:05:75:88:96:93:6d:80:7d:2d:b9:d4:
bc:3e:4e:77:95:0f:e1:2b:b5:30:eb:48:a1:6c:67:
46:d0:54:8b:e1:b1:fb:5e:35:01:d6:6b:4f:c3:95:
7a:c3:f1:96:77:a8:06:c7:10:4e:01:74:12:50:6b:
c8:a1:87:36:cc:05:2d:10:36:6f:7e:72:47:ac:59:
72:b7:0c:1c:e0:b6:30:69:0a:1f:90:b4:ab:53:fd:
a1:76:91:45:2e:4e:2f:ea:e4:f1:ce:b9:46:11:be:
e0:5b:5a:ce:3a:0e:1d:0d:58:5c:0e:f6:c0:ab:c3:
40:eb:54:c2:af:ef:45:51:86:e0:92:bd:73:c8:f4:
5f:e3:78:64:c7:a8:1b:ae:fc:fe:96:a1:3b:ec:49:
bc:fe:43:22:d6:cf:ee:c5:87:c3:36:28:4e:67:a4:
36:67:5e:ea:64:2b:b4:d7:e2:03:93:19:a2:49:9e:
9a:cd:86:99:b6:c2:65:4d:96:74:9f:5f:0e:fb:f0:
2a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DC:8D:E4:E8:F1:BD:1C:B1:87:FB:59:A4:7B:AA:92:8F:6D:0F:84
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6b:b2:6f:ff:55:5a:e2:db:70:29:fe:c6:c0:c0:3e:e5:5e:
04:e2:04:d8:32:29:15:88:70:5d:5a:3e:e1:c0:6d:20:b6:82:
10:68:9b:2c:ea:b6:e7:b0:9e:b9:db:7d:2e:29:d5:02:1a:26:
2d:dc:3a:62:3d:07:ea:df:27:0c:f3:13:91:27:1f:35:a6:0d:
af:f0:6a:9a:e0:3e:5d:1b:0f:d0:d8:8c:35:b5:e0:fb:9a:fb:
a1:97:55:23:87:22:96:c1:2c:15:d2:4b:f4:dd:14:66:9b:99:
9a:b3:5d:a2:29:41:5c:d5:74:db:d9:00:5e:99:73:8b:ba:75:
84:59:a6:e0:74:f8:05:82:32:f6:ee:32:01:5a:38:1b:f8:2a:
a0:e1:86:c3:e3:08:3a:cb:1b:4c:d5:24:b3:7e:d5:48:4c:97:
97:2b:91:a5:e3:fa:66:a9:c5:8f:2e:9c:3d:30:ed:45:6b:8c:
ab:e3:de:96:58:21:20:1d:f8:02:31:9d:ed:c6:2d:4f:71:f6:
98:11:86:05:5f:2e:22:35:84:4a:cb:bb:22:60:25:05:eb:7e:
8c:c1:14:84:56:5f:9f:17:6a:ab:10:eb:5e:5f:60:e6:e7:a8:
29:d2:c6:07:3e:05:b4:14:9d:53:14:79:67:d3:41:ff:2c:37:
22:2a:33:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:50:07 2025 by rpki-client