Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
File: crjVM-JRm2ityzt741m5M1fiscs.mft (raw, json)
Hash identifier: 4H6QB0MqGvOUndPQE1QiRch4u357aPQUA5zsgC9yqZA=
Subject key identifier: 63:FB:9F:21:1A:E1:84:91:37:12:7B:8E:41:CF:DB:BB:90:EC:F7:5D
Authority key identifier: 72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
Certificate issuer: /CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Certificate serial: 019749318D5AC5DE29AE4E2D5E04A8D12A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 07:01:13 +0000
Manifest this update: Sat 07 Jun 2025 07:01:13 +0000
Manifest next update: Sun 08 Jun 2025 07:01:13 +0000
Files and hashes: 1: JmXCpQWdSoFCP6yn-CKJyKpMmAM.roa (hash: Yy6MwGTUuS17SwLg+SYCwv3ZIWFTtcSoLxcVcFhPV/Q=)
2: crjVM-JRm2ityzt741m5M1fiscs.crl (hash: 7LVeobOA8e/JEAFHfIyzBYpIWDxW8YQjgYoXtFzgZNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:8d:5a:c5:de:29:ae:4e:2d:5e:04:a8:d1:2a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Validity
Not Before: Jun 7 07:01:13 2025 GMT
Not After : Jun 8 07:01:13 2025 GMT
Subject: CN=63fb9f211ae1849137127b8e41cfdbbb90ecf75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:b8:0e:52:6b:df:87:30:55:23:6a:a1:62:
e8:70:7d:4b:7c:cb:d6:45:13:a0:85:cb:74:cf:05:
ad:52:14:19:2b:0c:50:01:b7:9e:8a:0f:ab:6f:13:
80:fc:4d:41:ca:df:23:da:21:25:29:ce:c7:a7:47:
6d:d7:17:f6:f2:05:92:75:44:46:1a:b0:6b:e2:17:
ae:3c:d6:69:7b:d4:b4:17:fe:9b:6f:3a:e0:04:e3:
28:a2:e0:d4:03:a9:d4:40:21:a6:9c:ec:c1:0e:3f:
97:75:58:22:0d:75:a4:bb:11:d1:d4:4c:74:63:08:
05:06:1a:55:93:51:aa:ca:99:1f:5c:bd:ed:40:08:
7c:77:6c:ca:8c:64:c9:0a:d8:2a:ca:55:bb:df:02:
6a:3c:0e:06:c1:94:2e:58:64:6f:e5:58:b8:c7:2b:
c0:88:e8:e7:fc:d2:9b:26:7c:ca:b0:02:0b:3e:75:
fb:75:2d:c4:e0:e7:ae:7b:b1:f4:fb:28:d6:59:f5:
1c:8b:33:fc:09:b4:5b:97:e8:77:42:4c:04:78:0a:
33:ca:8e:fa:70:24:49:b3:cc:d9:01:17:ca:f7:c3:
59:b7:6c:ce:ea:c5:10:d8:4a:72:71:fe:77:e2:b4:
2f:b1:bf:0f:56:89:c6:0c:70:f3:38:47:92:55:db:
0e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FB:9F:21:1A:E1:84:91:37:12:7B:8E:41:CF:DB:BB:90:EC:F7:5D
X509v3 Authority Key Identifier:
keyid:72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:32:71:38:72:3f:9f:4b:68:8a:65:a2:e7:c0:da:d9:3b:06:
94:86:c4:0c:dc:87:67:87:a6:a7:96:03:13:54:75:c0:4f:e1:
0c:e6:ae:82:48:e8:54:9f:9e:8a:5d:3a:84:04:6c:b3:9b:fc:
89:3c:56:7a:5a:d9:dd:bd:e9:fd:9a:a4:da:8d:07:fb:ed:96:
e5:0d:70:0d:46:ca:19:a1:58:47:40:39:24:54:0a:91:e5:cc:
c9:86:8d:92:60:8e:73:d6:d1:68:1c:5e:fb:86:0f:2d:fc:3d:
5a:38:99:34:c5:68:f8:22:66:00:64:1f:10:15:06:3d:8a:ff:
f7:79:fa:89:fa:15:fc:ec:5e:0c:90:96:89:b5:23:c3:6e:ab:
f6:cc:9c:f0:3e:04:36:1d:21:5d:9f:c6:e2:cd:16:71:2a:06:
0a:1c:5b:fd:c1:80:07:a0:cc:83:33:b8:2a:66:92:81:a7:82:
fd:19:1f:03:7e:11:75:a4:3e:8e:7f:bb:98:af:12:cb:be:c6:
9f:48:79:1b:59:42:c7:61:2f:dd:91:62:4e:79:e0:21:d6:e2:
c0:b6:2b:fe:e4:4d:90:e0:8e:10:d8:87:d8:2a:c5:f5:f1:76:
0b:ac:2e:d0:e2:37:91:5b:15:fc:6d:0b:08:ad:1b:6c:03:57:
e4:4f:fa:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMY1axd4prk4tXgSo0SpqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjhkNTMzZTI1MTliNjhhZGNiM2I3YmUzNTliOTMzNTdl
MmIxY2IwHhcNMjUwNjA3MDcwMTEzWhcNMjUwNjA4MDcwMTEzWjAzMTEwLwYDVQQD
Eyg2M2ZiOWYyMTFhZTE4NDkxMzcxMjdiOGU0MWNmZGJiYjkwZWNmNzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgu4DlJr34cwVSNqoWLocH1LfMvW
RROghct0zwWtUhQZKwxQAbeeig+rbxOA/E1Byt8j2iElKc7Hp0dt1xf28gWSdURG
GrBr4heuPNZpe9S0F/6bbzrgBOMoouDUA6nUQCGmnOzBDj+XdVgiDXWkuxHR1Ex0
YwgFBhpVk1GqypkfXL3tQAh8d2zKjGTJCtgqylW73wJqPA4GwZQuWGRv5Vi4xyvA
iOjn/NKbJnzKsAILPnX7dS3E4Oeue7H0+yjWWfUcizP8CbRbl+h3QkwEeAozyo76
cCRJs8zZARfK98NZt2zO6sUQ2Epycf534rQvsb8PVonGDHDzOEeSVdsO4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGP7nyEa4YSRNxJ7jkHP27uQ7PddMB8GA1UdIwQY
MBaAFHK41TPiUZtorcs7e+NZuTNX4rHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JqVk0tSlJtMml0eXp0NzQxbTVNMWZpc2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83MjA3MjAtMjdiNy00NWNhLWE5Yzgt
ZTE1YmQ3OWMzOWMzLzEvY3JqVk0tSlJtMml0eXp0NzQxbTVNMWZpc2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83MjA3MjAtMjdiNy00NWNhLWE5YzgtZTE1YmQ3OWMzOWMz
LzEvY3JqVk0tSlJtMml0eXp0NzQxbTVNMWZpc2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZjJxOHI/
n0toimWi58Da2TsGlIbEDNyHZ4emp5YDE1R1wE/hDOaugkjoVJ+eil06hARss5v8
iTxWelrZ3b3p/Zqk2o0H++2W5Q1wDUbKGaFYR0A5JFQKkeXMyYaNkmCOc9bRaBxe
+4YPLfw9WjiZNMVo+CJmAGQfEBUGPYr/93n6ifoV/OxeDJCWibUjw26r9syc8D4E
Nh0hXZ/G4s0WcSoGChxb/cGAB6DMgzO4KmaSgaeC/RkfA34RdaQ+jn+7mK8Sy77G
n0h5G1lCx2Ev3ZFiTnngIdbiwLYr/uRNkOCOENiH2CrF9fF2C6wu0OI3kVsV/G0L
CK0bbANX5E/66w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:50:04 2025 by rpki-client