Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: 1V4tnfqYO/fNrC4XWxmJrY26bf1R+laHlLxp1qJC4gw=
Subject key identifier: AA:73:EE:37:EB:48:08:7E:E9:28:25:B1:79:DA:74:6E:3E:CB:2A:DC
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 019922FA0372D8D970FAEA2C554681628DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 077F
Signing time: Sun 07 Sep 2025 07:00:34 +0000
Manifest this update: Sun 07 Sep 2025 07:00:34 +0000
Manifest next update: Mon 08 Sep 2025 07:00:34 +0000
Files and hashes: 1: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: G7SgHYs7VklDsIwpviTAKgb3R76dCdbYUYTpA2jVHfA=)
2: ecJknRyfIBQOOdXuyRMagWGM6Xc.roa (hash: 2TPM3149s6UNJrrM14pEqaNWUfexd8+/2ccuazOqFbo=)
3: iuZcLP2wCYz2ZLvFGLXNkUEaDHI.roa (hash: KntVVQ+l5TkxKddv8L7Y42R3lMc8nIp6SRc9XJjEO0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:03:72:d8:d9:70:fa:ea:2c:55:46:81:62:8d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Sep 7 07:00:34 2025 GMT
Not After : Sep 8 07:00:34 2025 GMT
Subject: CN=aa73ee37eb48087ee92825b179da746e3ecb2adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:c0:55:60:f4:ec:64:4e:ef:4e:c0:74:13:
d1:42:36:d2:e8:29:ff:c4:35:6c:dc:8f:d0:e4:9b:
da:91:9c:b3:ff:de:bf:d2:bb:b5:83:a9:11:61:a1:
df:96:6c:8e:74:87:31:75:30:4b:e4:f7:ab:7d:a2:
9a:79:70:bb:d8:73:31:b7:dd:17:c8:04:1d:08:d1:
ee:58:da:38:d5:46:f0:2a:27:2b:64:b8:4d:89:1b:
81:7e:34:66:c1:93:68:4f:f3:1f:25:e9:5d:60:8d:
ec:e2:32:95:5a:5e:06:f6:6a:9f:8b:b1:e0:95:d6:
fe:48:e5:3b:7f:5e:a8:15:9b:cf:01:dd:bd:3b:dd:
ed:60:9b:54:c6:86:05:fe:0a:c4:75:b3:87:f7:28:
c1:d5:20:52:df:7c:2b:80:06:b1:4e:fa:4d:f6:47:
95:27:1b:a6:72:53:d3:15:a9:c5:d2:26:8a:ed:dc:
94:97:cb:8a:b0:5e:0e:b3:24:7f:11:23:4e:e1:05:
57:64:ff:1c:a4:a2:7f:20:75:03:89:a3:8a:85:f0:
f8:7e:40:55:e0:bf:13:7f:cf:dd:3e:d1:28:70:b1:
93:a0:da:c1:9d:ae:49:eb:19:b4:55:9c:ae:fc:83:
3f:bd:87:94:31:98:0f:23:c9:1f:f7:70:1a:91:b2:
dc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:73:EE:37:EB:48:08:7E:E9:28:25:B1:79:DA:74:6E:3E:CB:2A:DC
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:51:86:69:b3:5f:eb:67:aa:d7:7e:5e:b9:d8:6d:1e:0e:cb:
ff:48:9d:b7:9e:1f:2d:44:e3:ad:fc:f0:30:be:d0:b5:f1:e6:
64:f3:84:37:7b:94:97:c2:60:91:c6:2a:a8:f1:7f:6a:5b:70:
94:44:71:89:d1:b2:a7:80:6a:4e:19:62:d2:24:07:d8:f7:8f:
69:4d:cd:36:aa:9c:3f:90:58:85:cc:d7:e7:87:d2:da:c4:ca:
bc:ce:1e:31:e4:ca:4c:a0:6f:b0:4e:46:07:ef:47:84:d6:ce:
9f:8c:2f:42:f0:59:f9:53:a1:83:d5:40:17:0c:76:b7:61:1b:
61:0f:12:21:e1:5c:21:80:27:b7:28:18:df:ed:0d:62:e3:8d:
7e:d7:02:92:32:f2:11:37:71:99:da:70:c9:da:ae:3f:07:73:
1a:a1:da:b4:7b:56:39:0d:3d:42:7b:1c:5d:f9:35:e8:28:ac:
45:27:d9:af:e2:b3:32:d5:00:1c:03:6b:20:ef:37:50:51:b6:
22:d2:c4:7b:b0:f0:b2:27:ad:32:20:0e:17:a9:9a:c5:78:21:
42:ba:6b:8f:6f:55:5f:9e:85:bb:5b:1c:35:14:9a:13:8c:f0:
c6:c6:5c:d6:8d:f7:99:58:74:bc:18:f2:5c:e7:1f:81:d4:b3:
6d:ab:f3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:09 2025 by rpki-client