Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: x+9ylwuuyw5cPWlXIcij8kGiG/ms+ELRDBSCJgQnK58=
Subject key identifier: D6:86:89:97:67:92:7A:E5:AD:C1:AF:A0:6F:6D:60:66:39:33:A8:5E
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 019A7112EB601D1F403009EBE40C8CE1E820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 082F
Signing time: Tue 11 Nov 2025 04:00:56 +0000
Manifest this update: Tue 11 Nov 2025 04:00:56 +0000
Manifest next update: Wed 12 Nov 2025 04:00:56 +0000
Files and hashes: 1: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: LSxOQdMyThGG0nYcNS/+EMDwg09TlCNvO+eEhcB0Dqg=)
2: dBWqqX7TUpjmbRpfXp44YLDQQKo.roa (hash: AVnu+TRmBANWXBo+f7zIG17k48ory+VgROMrgBy0M0A=)
3: iuZcLP2wCYz2ZLvFGLXNkUEaDHI.roa (hash: KntVVQ+l5TkxKddv8L7Y42R3lMc8nIp6SRc9XJjEO0c=)
4: l1JKfjSmdoSD-atd4ZWE1JeTJuA.roa (hash: BmB8JatQfp2mQ4vWr7Bgl6YeJ1OakzxtLlN1iSUDIbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:eb:60:1d:1f:40:30:09:eb:e4:0c:8c:e1:e8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Nov 11 04:00:56 2025 GMT
Not After : Nov 12 04:00:56 2025 GMT
Subject: CN=d686899767927ae5adc1afa06f6d60663933a85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:06:04:4a:2f:f4:21:87:10:96:c7:f0:b0:a7:
68:a6:38:c3:8a:1e:44:05:01:10:ad:3c:c8:4a:5e:
d3:94:f4:59:87:1d:fc:34:15:56:76:f7:c9:24:ad:
39:25:c9:fe:49:23:52:6c:76:43:b5:c2:53:d2:bb:
16:47:04:75:6e:10:34:31:cd:01:c2:e6:ea:9b:90:
23:7c:24:ad:7f:9a:eb:34:5f:f1:86:d4:cd:51:27:
8d:ed:be:f6:b0:9b:f9:70:13:08:9c:03:ef:2b:e9:
31:2c:4c:90:ac:56:b6:d1:e6:8e:d8:9d:16:14:f2:
bd:3d:f4:71:14:ec:81:b4:48:c8:6b:96:6d:33:ad:
92:67:c4:14:b5:8e:5b:fd:8b:16:f8:57:d0:2c:1d:
2b:f1:55:77:68:02:50:8c:8f:ca:b0:4c:9b:97:d3:
ca:f2:75:95:79:30:54:55:20:33:f9:3f:eb:07:4b:
92:81:bc:7c:de:9c:26:12:e6:e9:8f:ba:a2:29:46:
59:88:88:29:33:5d:30:2b:22:31:f1:4d:ce:42:45:
18:cf:3a:da:1e:91:57:d4:35:50:e8:44:66:95:d6:
e9:4e:10:82:97:c0:88:44:c2:dd:07:d2:63:2b:5f:
b3:4b:fc:ac:2e:44:71:de:74:23:e7:75:23:04:a7:
84:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:86:89:97:67:92:7A:E5:AD:C1:AF:A0:6F:6D:60:66:39:33:A8:5E
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f5:2a:ea:d0:8c:b8:5f:0b:97:74:44:14:85:ed:4f:ec:d5:
69:86:46:6b:86:42:d5:71:65:6e:c0:51:67:61:f8:fa:d0:0e:
3a:dc:cc:0a:92:11:f8:ee:94:a4:14:16:5e:70:38:d4:4f:8e:
6b:53:8d:53:b5:45:da:e9:18:81:56:8b:13:bd:81:a8:0b:12:
17:60:22:5d:34:9b:61:e9:cf:50:8c:6c:f0:9d:b9:78:08:9a:
ee:3a:07:64:f2:0c:a9:2f:2f:da:e9:4a:be:f4:35:8c:11:36:
66:0f:10:87:8b:da:e5:6b:01:b1:7c:c1:6d:9b:1b:b4:c0:b0:
fd:4d:d9:0b:ac:9a:cb:6b:27:c0:37:ed:56:9a:a7:19:a3:d2:
7a:3a:d0:c1:ae:60:24:fe:d6:a9:94:ed:b4:e0:62:35:31:53:
12:b2:9b:35:b8:c4:17:8a:12:e5:20:27:9d:bf:01:c2:f2:b0:
0e:b4:7c:8d:6b:d8:0d:20:25:e6:4d:87:6c:bd:0a:60:5b:8a:
58:09:17:dc:a0:79:a7:7b:62:b0:6f:5d:75:87:62:7a:30:40:
90:b8:4a:f6:94:77:1c:16:19:02:e6:37:51:e5:b5:45:65:51:
ae:6b:5d:2f:13:c7:5b:cf:35:5a:ca:5b:b3:4b:df:98:8f:2d:
90:1d:b7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:05 2025 by rpki-client