Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: i+xK0draRjzGVV+zlnXnNP3cX2km9QGAWsp/J4Hi/6Q=
Subject key identifier: 96:F3:85:66:11:D2:E8:0A:E4:E8:1E:9B:18:52:60:BB:8A:A4:0B:6E
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 0196409E7F150A2088F93FAAF05541341E1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 14F5
Signing time: Wed 16 Apr 2025 22:00:50 +0000
Manifest this update: Wed 16 Apr 2025 22:00:50 +0000
Manifest next update: Thu 17 Apr 2025 22:00:50 +0000
Files and hashes: 1: IQJY4wiykJwUR66o9Fs0mVyK_BY.roa (hash: sOQn6ofboeM57RYlzWfjexIU5njt7tJ8PQXKuKFY2zY=)
2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: glPiVjJiNz8WRlqhCpFUNQY2DDqkZneHdj/al89fB6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:40:9e:7f:15:0a:20:88:f9:3f:aa:f0:55:41:34:1e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Apr 16 22:00:50 2025 GMT
Not After : Apr 17 22:00:50 2025 GMT
Subject: CN=96f3856611d2e80ae4e81e9b185260bb8aa40b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:b8:04:d5:4c:6b:72:ca:91:e1:75:87:60:
ec:83:0c:b5:a5:31:a1:56:4a:1c:cf:76:07:67:3a:
51:45:1f:63:e5:96:e4:3c:52:c4:f1:22:ce:07:ce:
58:8f:a1:3e:ae:20:b7:68:45:00:c8:f3:b5:57:a0:
03:59:f4:09:78:8b:79:37:9a:c4:d8:9f:7d:81:0c:
b5:86:39:50:8f:6a:e5:58:ce:69:64:97:8e:a8:4d:
5c:30:bc:4b:54:ab:b6:cc:24:b6:62:fc:a7:17:dd:
28:5e:50:4d:38:1c:d8:18:17:3e:ff:b5:1d:30:10:
4c:27:81:72:a4:36:12:9c:56:06:57:e9:f6:81:bf:
69:81:e4:6c:bd:e4:70:73:38:35:00:32:7b:d8:88:
70:28:78:dc:b6:84:cf:98:e3:cc:e8:d1:5d:62:86:
ba:d0:e3:45:cc:db:49:14:83:91:da:ae:1e:13:cb:
c5:de:e2:9e:71:1b:56:c0:c3:04:62:8d:b3:0d:c7:
db:0c:87:bc:f4:7b:0b:8f:a2:04:99:d4:52:e0:ee:
3d:0d:ac:9e:a4:31:ab:20:4b:4e:f5:6c:c0:25:c5:
a1:ad:78:09:2e:ab:ce:d6:9a:88:4a:62:31:b2:21:
9d:91:4d:62:48:4e:d4:1f:c0:ea:0c:dd:c2:96:13:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F3:85:66:11:D2:E8:0A:E4:E8:1E:9B:18:52:60:BB:8A:A4:0B:6E
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ad:4b:03:6b:c0:0f:37:88:62:dd:d1:fc:44:6d:1c:2b:b0:
7d:0b:59:8d:e4:68:01:a6:ba:5a:57:a5:88:c8:9b:36:32:a6:
07:8a:e1:61:eb:36:db:d2:2f:09:a7:57:08:84:7a:26:20:25:
c4:fb:d5:b9:6b:df:00:f0:c8:f8:cd:a5:e4:0c:54:59:d0:9c:
29:21:46:b6:68:f6:1b:8f:16:41:36:0d:ab:0b:91:b3:9c:44:
82:6b:38:ff:0b:95:76:f2:d2:29:37:6e:61:74:5a:33:80:a6:
a1:87:9f:f7:d9:b2:00:9d:75:eb:1e:d4:2b:04:59:f0:ca:d7:
66:2b:2d:03:bd:24:2f:4d:9c:2e:e6:ec:74:8f:52:53:9b:ec:
45:9e:a8:32:71:d8:8b:95:9c:40:60:cf:e0:49:8f:b6:2c:c5:
c9:e7:ce:88:09:9d:2f:30:40:2a:1f:40:94:38:44:a1:f4:14:
90:bc:20:1d:16:4b:8c:f0:21:39:c3:9d:cf:a5:0e:28:a3:3e:
32:cf:aa:9d:ff:33:2d:a8:b7:27:ae:29:cc:48:b5:30:3d:be:
37:d8:f5:f8:6f:50:5a:93:4e:23:f6:8b:b8:c2:4a:42:66:85:
30:2d:a8:19:b0:b0:61:66:21:d5:2f:ad:92:e4:ed:ee:b6:45:
75:e3:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 03:46:33 2025 by rpki-client