Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: DF6d1a3G8HV72fEhfzMhP3P71jOvNKMVEt84KKhANYQ=
Subject key identifier: DD:A7:26:BD:76:13:74:D5:59:B4:B0:FD:A7:4B:00:CD:1D:76:40:E6
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 01974855223B19FB2844257B6E7884EE1425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 0687
Signing time: Sat 07 Jun 2025 03:00:28 +0000
Manifest this update: Sat 07 Jun 2025 03:00:28 +0000
Manifest next update: Sun 08 Jun 2025 03:00:28 +0000
Files and hashes: 1: 9B_nRxWCf-IC__yWPSp2TtcLH_U.roa (hash: HIni5u9YKsNdRHwljtSVtJZz+uwQKEAkuVEZPM74tyE=)
2: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: 7t6HhKHPGcFQ4kLm7d4sLlVDI3ERrkuqIUblTopBCuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:22:3b:19:fb:28:44:25:7b:6e:78:84:ee:14:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Jun 7 03:00:28 2025 GMT
Not After : Jun 8 03:00:28 2025 GMT
Subject: CN=dda726bd761374d559b4b0fda74b00cd1d7640e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:33:28:86:29:cf:00:87:fa:54:3b:98:96:36:
bd:a3:33:62:3d:dd:19:c1:90:4b:95:ea:60:08:86:
79:7a:32:ec:7f:df:8b:b9:3c:28:02:92:d2:9b:aa:
cc:e3:a5:f6:f4:3e:9e:66:4a:89:0c:37:5f:e1:4c:
81:61:4e:8c:e1:28:25:e3:a2:f2:7c:23:36:a5:e8:
d5:4a:87:93:68:7e:f5:db:33:d3:fc:6c:86:02:9a:
75:ff:77:ba:b5:ea:c0:45:00:34:d2:c0:bf:dd:09:
70:7d:51:4c:61:f8:08:13:ce:b4:db:2f:b6:67:ac:
30:61:bb:3f:c9:f3:d7:f8:55:94:55:52:8e:4a:5a:
a3:12:6c:7b:60:18:9c:ec:4b:bf:63:e4:90:9c:fc:
e5:36:fd:9f:97:a2:f3:1b:e6:a5:63:40:af:32:f8:
7f:44:06:1e:fa:67:fa:bd:08:9e:69:3e:c8:bc:44:
79:79:32:1e:59:b4:71:dd:17:c4:dc:6c:cb:85:78:
6a:89:f3:c0:14:bf:3d:73:c4:57:fd:fe:fc:6f:73:
a0:af:ad:03:e8:f0:44:e3:cd:34:dd:f3:f4:61:38:
30:0c:64:e1:9d:a9:f3:a5:41:65:ef:fd:4b:f5:c1:
4e:a3:11:a2:a9:21:1d:f9:3a:46:38:93:89:48:c2:
d1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A7:26:BD:76:13:74:D5:59:B4:B0:FD:A7:4B:00:CD:1D:76:40:E6
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1b:fd:c7:4e:19:80:8a:72:0e:5b:cb:32:3b:ea:25:6b:b5:
1d:36:86:fd:9b:17:29:8d:40:a7:cc:db:2a:06:3d:88:d6:8e:
41:7f:29:92:66:38:b8:a0:d3:f0:ed:97:7e:43:52:79:17:3a:
ff:36:f4:df:45:e2:4f:52:bf:e3:48:0f:1a:80:68:77:35:fd:
61:83:5e:9f:28:ba:1f:24:03:f4:04:31:bf:b1:bf:1a:bb:e1:
94:cd:cc:be:17:5c:14:84:a3:3f:b6:84:e2:03:70:38:2c:70:
ca:7a:15:23:9e:76:92:60:73:ef:c6:0e:cb:2a:f8:d5:fb:b5:
d9:1f:bf:a1:fb:42:95:79:c0:5d:6b:49:47:e1:85:8e:dd:6f:
7d:1a:f6:d0:4e:1f:07:cc:b1:d7:8c:90:c6:f5:f9:f1:82:f9:
74:ba:d2:1b:5f:64:52:42:71:e2:ea:05:3d:40:de:65:da:32:
ce:c2:17:fc:00:00:5e:65:4c:d2:4a:61:ab:82:56:ff:6e:e0:
21:25:26:1f:b3:2a:a0:c4:46:47:37:0d:43:94:34:b7:76:f8:
ea:03:ff:f7:04:5c:34:a5:e1:3e:3f:ed:c8:7a:7c:16:05:17:
37:59:2a:c9:15:6a:4c:14:93:c6:18:44:d3:b7:9f:c4:a3:d3:
07:e3:7e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:16:39 2025 by rpki-client