Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: kRi3/BS5k9eW3Gg8GTjuns79WKtMt6xYh5X+NghA7hE=
Subject key identifier: 78:E9:8A:D6:4C:A4:08:9C:0A:65:3E:3B:C4:2C:0E:CF:CA:67:A6:1A
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 01975E6F5F2D7511AABCD28E8459DCB52F76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 1589
Signing time: Wed 11 Jun 2025 10:00:46 +0000
Manifest this update: Wed 11 Jun 2025 10:00:46 +0000
Manifest next update: Thu 12 Jun 2025 10:00:46 +0000
Files and hashes: 1: IQJY4wiykJwUR66o9Fs0mVyK_BY.roa (hash: sOQn6ofboeM57RYlzWfjexIU5njt7tJ8PQXKuKFY2zY=)
2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: tarR951n2DVbJnADCBaRyJmbnWiruG4ieldq0JC/ZNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6f:5f:2d:75:11:aa:bc:d2:8e:84:59:dc:b5:2f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Jun 11 10:00:46 2025 GMT
Not After : Jun 12 10:00:46 2025 GMT
Subject: CN=78e98ad64ca4089c0a653e3bc42c0ecfca67a61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5e:f7:a7:55:fe:ed:b9:e4:bc:8e:90:6e:1e:
a9:d2:01:dd:35:08:53:81:2a:b2:b1:d4:16:55:dc:
ca:7c:85:aa:60:32:c4:5f:a9:12:cc:83:8a:fe:37:
c4:46:ad:4f:c9:25:1b:6c:3a:7e:2e:32:37:03:82:
b6:12:7a:98:7e:7c:95:19:23:3f:b0:c3:59:51:f7:
88:bb:82:f2:ea:c6:9a:ee:5c:28:0c:c6:46:2e:4b:
24:56:8c:ee:89:3c:02:b3:40:ac:d6:f8:69:ef:ce:
78:e2:ed:cc:e7:7b:a8:c1:4a:a6:05:fa:1e:76:83:
c5:d1:59:bc:f6:0f:3a:28:44:6a:72:47:26:60:d3:
fc:f3:79:75:0f:5e:c3:f7:d8:38:40:62:3f:86:cc:
8e:70:4e:26:78:60:62:75:79:dd:03:f3:03:a5:1b:
4c:76:95:16:bd:cd:08:a9:12:92:dc:d1:27:f8:57:
5c:d8:f5:e0:e3:d4:82:e6:8d:d1:cf:ad:56:f5:cb:
b9:7b:50:28:3d:73:7a:a6:1c:c7:8c:98:43:8e:00:
82:12:43:21:2a:11:53:ce:5c:ff:38:b3:20:03:6d:
f8:e6:aa:42:34:e1:5c:f7:c1:41:46:13:54:48:46:
c5:a5:27:4c:78:c7:46:e3:5d:c3:15:84:f0:8f:0a:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E9:8A:D6:4C:A4:08:9C:0A:65:3E:3B:C4:2C:0E:CF:CA:67:A6:1A
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:99:e5:90:ce:d0:15:92:2c:06:48:f4:45:02:aa:68:53:c5:
fd:05:bf:2b:ee:5a:b4:18:0b:ab:f2:3a:62:a6:d2:11:d2:7e:
89:4a:88:72:25:bd:cf:e1:1f:1a:31:bd:3b:fd:73:d3:ac:d3:
93:5b:d2:ca:b3:89:63:98:31:43:8c:d4:40:16:e0:0c:17:4c:
23:01:39:06:c9:90:26:43:d0:de:01:f0:ca:1c:97:6e:ef:d1:
23:59:2e:98:14:79:7a:52:15:86:85:b0:a3:d9:63:2f:00:cb:
2f:64:c8:f4:8d:cb:8a:b6:b2:b7:ee:b5:e5:4a:9e:35:9b:3c:
a8:0c:00:14:7a:21:b1:7c:13:4a:4f:df:fc:ef:9a:c5:da:ab:
cb:f8:60:5b:cf:ec:bb:44:1c:c6:93:1d:b1:31:4d:a4:9a:39:
33:86:70:45:ea:4a:fd:c3:0b:2d:a8:52:57:50:96:5a:8e:76:
1c:e1:7f:07:0b:d9:58:d2:1d:70:dd:3d:42:3e:d6:05:5b:90:
7b:b5:0f:08:a5:d1:0c:7c:0d:ec:7a:fe:49:b5:f1:d4:8f:62:
b4:70:45:88:a2:67:6a:af:fb:03:6b:d4:1a:79:d0:64:1a:84:
44:94:88:81:0a:a3:6b:fd:90:f9:03:68:90:48:e2:6f:fe:c1:
5f:bc:2e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:28:39 2025 by rpki-client