Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
File: cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft (raw, json)
Hash identifier: gvqH57eI4Y1vg3RxKjeq9t2nEM4MjrwzgDXRb/AfWRc=
Subject key identifier: 8C:86:35:2C:C9:85:C6:49:0B:C6:06:42:38:80:A3:13:D4:CE:ED:58
Authority key identifier: 72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
Certificate issuer: /CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Certificate serial: 019A232E46641F250A75B61F60A9B45B0BF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 01:00:26 +0000
Manifest this update: Mon 27 Oct 2025 01:00:26 +0000
Manifest next update: Tue 28 Oct 2025 01:00:26 +0000
Files and hashes: 1: IQJY4wiykJwUR66o9Fs0mVyK_BY.roa (hash: sOQn6ofboeM57RYlzWfjexIU5njt7tJ8PQXKuKFY2zY=)
2: cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl (hash: pqbSm3eQ0awtiCa4A9n2G3AbdhW7QY+nKgSokFpS95E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:46:64:1f:25:0a:75:b6:1f:60:a9:b4:5b:0b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72f862dfe0c34874120d2cc169fc3144938ee8d9
Validity
Not Before: Oct 27 01:00:26 2025 GMT
Not After : Oct 28 01:00:26 2025 GMT
Subject: CN=8c86352cc985c6490bc606423880a313d4ceed58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:31:52:37:77:67:cd:75:45:ba:fd:20:7a:
b8:e2:ce:53:20:f6:e1:5d:73:29:de:23:c3:97:89:
c8:d1:5d:b5:57:a1:6e:bf:f1:42:31:fa:f0:15:d4:
a1:ef:7c:80:62:87:41:3a:af:df:fb:ed:82:73:0d:
de:0d:55:a0:7f:7c:1d:30:b8:55:3f:40:19:8d:8b:
f0:7a:81:e9:5d:7e:67:92:da:c4:95:82:7b:e1:9a:
d6:75:d0:cf:15:c5:b6:3f:13:bc:f9:9a:26:f5:47:
a9:1a:cb:90:1c:0a:ce:a9:52:78:9f:e3:06:c4:22:
86:6b:b5:a5:06:ef:18:06:61:60:6f:0d:e7:cc:f6:
93:0d:24:06:57:e4:2a:5d:29:41:0b:ad:33:b3:13:
43:fa:bf:f0:6d:0d:51:b5:ac:0c:ca:c5:0f:37:25:
e6:e5:c7:97:02:f6:8e:4c:8b:cd:6f:35:23:ee:c8:
c1:f4:ea:a0:74:e0:18:f5:9f:a4:22:bb:16:af:49:
bb:ff:e8:e4:f8:4a:cd:50:eb:80:89:da:04:88:07:
d0:93:3b:ab:09:91:f1:e6:92:e4:26:dc:69:c1:d1:
19:cf:4a:fa:97:cb:ff:e1:95:00:d0:4c:0e:42:f4:
e4:f0:58:3d:e8:ff:df:9b:f3:6c:61:15:0d:d8:69:
9a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:86:35:2C:C9:85:C6:49:0B:C6:06:42:38:80:A3:13:D4:CE:ED:58
X509v3 Authority Key Identifier:
keyid:72:F8:62:DF:E0:C3:48:74:12:0D:2C:C1:69:FC:31:44:93:8E:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvhi3-DDSHQSDSzBafwxRJOO6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/135fc4-b35a-42db-8141-220764dc345c/1/cvhi3-DDSHQSDSzBafwxRJOO6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:4d:5c:09:aa:03:1a:69:9a:b0:55:43:d3:79:6d:60:be:3e:
fa:50:ab:6f:73:4e:2d:74:54:96:33:d8:07:36:e6:de:02:2f:
ee:af:89:46:ff:1f:69:2e:ad:02:56:f4:e6:d6:aa:65:33:08:
63:d4:16:92:5e:b0:50:f2:23:50:99:53:ab:89:1b:55:c0:c2:
f0:ae:3b:83:c0:7c:88:c7:f5:37:0c:d2:13:29:67:91:c1:6f:
b4:94:a5:75:ee:5f:06:d5:be:ee:67:5e:bd:5b:fb:96:6f:7c:
ab:fd:02:b9:c0:84:44:3c:72:98:60:13:54:e2:02:16:ca:c6:
b6:5b:5d:50:b8:90:65:49:06:ab:c3:e4:bc:e4:2f:f3:5d:5b:
7d:9f:1d:2b:0f:02:32:0e:b9:61:ba:be:bc:7c:f8:91:ac:85:
b1:8d:f1:0d:a9:29:b7:39:7f:dd:8f:f8:fd:24:06:cc:e8:4d:
73:6e:cc:ff:93:50:b2:9f:06:e3:c2:13:f0:d1:a2:78:56:03:
73:d1:2a:ba:a1:6d:04:23:3f:26:cc:ee:9d:40:a8:39:55:e2:
8b:7a:8c:84:ed:0d:d7:48:eb:72:56:e2:b7:15:b3:c9:4b:ab:
22:35:4d:3f:c8:1a:0d:b4:67:68:ff:c7:2d:88:55:d8:66:65:
9e:72:c2:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZojLkZkHyUKdbYfYKm0Wwv1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZjg2MmRmZTBjMzQ4NzQxMjBkMmNjMTY5ZmMzMTQ0OTM4
ZWU4ZDkwHhcNMjUxMDI3MDEwMDI2WhcNMjUxMDI4MDEwMDI2WjAzMTEwLwYDVQQD
Eyg4Yzg2MzUyY2M5ODVjNjQ5MGJjNjA2NDIzODgwYTMxM2Q0Y2VlZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUcxUjd3Z811Rbr9IHq44s5TIPbh
XXMp3iPDl4nI0V21V6Fuv/FCMfrwFdSh73yAYodBOq/f++2Ccw3eDVWgf3wdMLhV
P0AZjYvweoHpXX5nktrElYJ74ZrWddDPFcW2PxO8+Zom9UepGsuQHArOqVJ4n+MG
xCKGa7WlBu8YBmFgbw3nzPaTDSQGV+QqXSlBC60zsxND+r/wbQ1RtawMysUPNyXm
5ceXAvaOTIvNbzUj7sjB9OqgdOAY9Z+kIrsWr0m7/+jk+ErNUOuAidoEiAfQkzur
CZHx5pLkJtxpwdEZz0r6l8v/4ZUA0EwOQvTk8Fg96P/fm/NsYRUN2GmatwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyGNSzJhcZJC8YGQjiAoxPUzu1YMB8GA1UdIwQY
MBaAFHL4Yt/gw0h0Eg0swWn8MUSTjujZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8xMzVmYzQtYjM1YS00MmRiLTgxNDEt
MjIwNzY0ZGMzNDVjLzEvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8xMzVmYzQtYjM1YS00MmRiLTgxNDEtMjIwNzY0ZGMzNDVj
LzEvY3ZoaTMtRERTSFFTRFN6QmFmd3hSSk9PNk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFE1cCaoD
GmmasFVD03ltYL4++lCrb3NOLXRUljPYBzbm3gIv7q+JRv8faS6tAlb05taqZTMI
Y9QWkl6wUPIjUJlTq4kbVcDC8K47g8B8iMf1NwzSEylnkcFvtJSlde5fBtW+7mde
vVv7lm98q/0CucCERDxymGATVOICFsrGtltdULiQZUkGq8PkvOQv811bfZ8dKw8C
Mg65Ybq+vHz4kayFsY3xDakptzl/3Y/4/SQGzOhNc27M/5NQsp8G48IT8NGieFYD
c9EquqFtBCM/JszunUCoOVXii3qMhO0N10jrclbitxWzyUurIjVNP8gaDbRnaP/H
LYhV2GZlnnLC1w==
-----END CERTIFICATE-----
Generated at Mon Oct 27 10:59:20 2025 by rpki-client