Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: 2J8zo6w8ieyx/89S+j3zC4QzGNXliGTHD9BJGSvhhEU=
Subject key identifier: 85:F5:59:6C:88:32:63:59:62:8C:E8:66:E0:0A:86:57:4F:D6:DA:18
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 01964B58B24154F2B69091E455E2BB0034A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 0604
Signing time: Sat 19 Apr 2025 00:00:26 +0000
Manifest this update: Sat 19 Apr 2025 00:00:26 +0000
Manifest next update: Sun 20 Apr 2025 00:00:26 +0000
Files and hashes: 1: 9B_nRxWCf-IC__yWPSp2TtcLH_U.roa (hash: HIni5u9YKsNdRHwljtSVtJZz+uwQKEAkuVEZPM74tyE=)
2: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: HwG+/DnMjIb6tLO1F2M7c/Lxo2Rda/jozpYjogRTLNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:58:b2:41:54:f2:b6:90:91:e4:55:e2:bb:00:34:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Apr 19 00:00:26 2025 GMT
Not After : Apr 20 00:00:26 2025 GMT
Subject: CN=85f5596c88326359628ce866e00a86574fd6da18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d0:33:aa:99:db:23:a2:b1:b0:ae:24:2c:da:
c5:73:26:e6:d3:c1:b9:67:80:1f:69:59:ea:b1:eb:
4c:70:4b:e4:cd:a3:5b:e6:db:77:6c:d7:53:dd:ef:
a6:27:ba:15:24:2b:7a:13:5b:87:f7:75:01:42:74:
35:a4:b3:94:0a:85:65:69:3b:36:a0:c0:44:01:5b:
96:e7:61:bb:37:c8:5e:64:cb:fd:3f:30:4b:ad:5b:
4b:45:90:fb:3a:69:c3:3b:e4:9a:e6:8e:da:9f:3b:
97:60:c9:62:ac:9a:dd:90:43:7a:c1:91:23:12:08:
c2:2d:2a:0c:e4:f7:32:68:83:64:30:4a:d2:c2:a6:
2a:df:34:b9:e8:7c:e1:63:02:89:ae:c3:69:b2:c7:
43:2e:0e:c4:a0:19:54:87:ff:f5:18:b3:98:65:ad:
8c:17:3a:28:de:29:b7:64:75:e5:ca:25:c0:a4:83:
bc:6f:3a:15:f2:0c:2d:76:ad:f9:a1:55:ab:3a:e9:
89:0f:d3:f3:75:7c:cb:51:19:37:55:7b:1b:1a:3a:
3f:26:78:1f:5a:61:df:1d:5e:a3:ed:b5:d4:66:a6:
06:ca:d2:d9:f2:91:26:80:f6:0c:8c:f9:be:07:08:
e9:8c:a3:82:c4:65:ca:cc:ac:2e:da:4c:52:89:58:
90:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F5:59:6C:88:32:63:59:62:8C:E8:66:E0:0A:86:57:4F:D6:DA:18
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:eb:43:bc:be:28:9b:c1:4b:af:2b:3a:b9:b9:3c:73:f5:ab:
d9:44:3d:8b:8b:ac:49:98:a1:ca:a6:06:cd:20:83:09:be:c6:
8c:dd:84:f8:f4:0b:26:51:02:90:e9:81:59:4b:04:92:bb:21:
90:aa:b9:87:83:d0:ba:47:55:16:60:bd:39:eb:ed:3c:a3:60:
84:10:5c:7b:af:5e:62:a9:7b:af:1d:ab:d0:ee:3e:cf:49:69:
be:2d:3e:fe:30:fa:57:23:96:09:e5:34:4a:98:12:a8:ef:07:
df:94:c3:da:2c:57:ea:33:03:84:77:9c:7f:a0:8b:ba:11:f5:
0d:84:14:1e:0a:f4:54:42:c9:1d:36:26:e7:05:20:ab:d5:a9:
62:c4:54:a4:be:77:db:b5:af:eb:b0:1c:8e:2f:17:f4:f1:be:
7f:99:1e:74:6b:ef:bb:a9:67:aa:d7:6a:81:08:6d:b8:67:c6:
0a:ca:ff:9a:eb:b7:86:b3:e5:79:a0:d0:d1:2b:16:c8:b4:04:
4b:81:21:c0:6f:57:b7:b2:a3:ba:db:5b:bd:f7:ba:f2:ab:3e:
41:9c:9a:3f:15:4f:18:d0:cf:77:3f:f3:36:8e:ba:e2:96:c7:
0b:b2:bf:c5:00:ac:da:ff:a2:89:be:a5:a8:c2:43:7a:e0:49:
c6:8a:14:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:10:37 2025 by rpki-client