Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier: 9bpPn1X1QPeCFrVXiQmWhxhMcCLsH2gpC9spQIHcoGg=
Subject key identifier: 1A:EC:30:5B:E2:7B:84:2D:93:C5:5F:D7:96:8E:49:D4:5A:FD:6B:BE
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: 0199240CEA8BC4486AEE00ADE66B7DFEE2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number: 0F5C
Signing time: Sun 07 Sep 2025 12:00:50 +0000
Manifest this update: Sun 07 Sep 2025 12:00:50 +0000
Manifest next update: Mon 08 Sep 2025 12:00:50 +0000
Files and hashes: 1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: 1GGKKhBVWt6XoT0u360dzLwnrVbtiJzGFoceP83RJY8=)
2: DNwk8XqqsVx_0XVNBxGEv9s46iw.roa (hash: o1R3IO/6fSn30zcJzkwKmtL71+61TdQ+fmzf6z93EPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0c:ea:8b:c4:48:6a:ee:00:ad:e6:6b:7d:fe:e2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Sep 7 12:00:50 2025 GMT
Not After : Sep 8 12:00:50 2025 GMT
Subject: CN=1aec305be27b842d93c55fd7968e49d45afd6bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a5:a2:87:c4:2f:0a:0c:f3:89:7a:2c:57:91:
46:cf:42:25:4e:47:47:e6:2c:41:9c:6d:52:3f:f0:
e0:ff:09:f2:ba:df:63:d1:4a:8d:a8:07:73:2b:c1:
43:16:05:ee:c3:54:31:f1:e0:5d:70:4e:2e:07:37:
06:e7:57:a7:ed:32:b3:b8:06:2d:9a:bc:9a:cf:61:
01:4c:fb:6e:9a:db:64:76:1b:ad:71:c3:b0:a3:4d:
ad:27:af:63:d2:f5:c2:5d:1b:45:c5:27:59:5e:fb:
e4:04:50:56:4d:53:9e:3f:a6:7f:04:8b:89:4b:7c:
46:4c:09:75:40:b7:85:4a:b2:8f:c6:f7:39:32:76:
e4:fb:3a:0e:63:52:82:ff:57:69:fc:6e:9a:59:a2:
4a:ac:1f:9e:b3:f7:cd:38:a2:fe:6c:92:c4:38:54:
a3:6e:71:c2:da:f8:c1:59:41:5e:98:ad:03:95:4b:
94:2b:b3:ed:7e:2e:ca:ca:8a:b9:2c:88:07:b4:da:
54:cf:d8:c6:c5:56:29:30:85:44:cb:99:0d:eb:f2:
64:af:76:cf:a6:45:ec:d8:c6:59:8c:ab:d0:c0:ec:
28:99:23:44:9c:60:7a:b1:94:21:43:f0:e9:ba:02:
35:68:e6:09:bf:42:b5:ed:b0:34:17:81:80:da:ae:
b2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EC:30:5B:E2:7B:84:2D:93:C5:5F:D7:96:8E:49:D4:5A:FD:6B:BE
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:bb:09:da:68:a1:81:de:ff:c2:d9:40:34:ff:ba:d6:49:61:
b0:bc:b1:01:44:f1:22:79:49:3b:1f:74:d0:74:5d:7a:3f:e1:
23:bb:8c:13:47:75:c7:7f:2d:7a:3c:de:21:10:a6:48:36:e2:
72:d3:65:e6:12:ce:82:54:75:1f:c1:af:2d:40:35:3c:ef:f4:
83:62:53:ca:2e:30:35:3f:a6:57:37:0c:99:3a:e1:ef:54:b5:
67:a0:f3:be:d8:fb:98:11:7a:4c:67:21:75:67:df:a9:ed:95:
6a:83:42:2c:10:c9:f8:23:99:1b:f6:8e:52:b5:03:a2:1c:84:
11:54:50:8c:03:b2:9a:e4:8a:ad:82:8a:da:68:60:03:3c:0b:
c7:82:76:c3:eb:ac:c1:9e:3c:7e:3d:d3:39:52:20:54:ea:d8:
5c:d2:04:11:0c:ec:a1:93:6a:c0:6b:c2:d8:c8:39:f8:10:c3:
43:6c:1d:57:e7:9f:b1:32:0a:79:63:d8:7b:9d:5f:5f:b1:6c:
61:b7:e5:08:51:bc:ac:15:5e:6c:08:3e:01:56:7b:43:3a:b6:
40:0a:66:8c:d7:06:4c:dd:84:64:d4:8f:53:c1:89:51:a7:bd:
33:5f:44:b8:70:2b:e6:ee:87:a1:bd:81:7a:99:89:2c:02:f6:
1e:3e:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:40 2025 by rpki-client