
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: 8OmURW+4oJ932SwIv6LsQ15YFgynw+Kcf9/1TLAcGJc=
Subject key identifier: 2F:FB:47:BE:2A:7B:24:5F:84:81:79:0C:2B:97:7D:28:8A:A6:7E:E6
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 0199FCC67B2CB2A606FC97154A27423A2A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 07F0
Signing time: Sun 19 Oct 2025 14:01:29 +0000
Manifest this update: Sun 19 Oct 2025 14:01:29 +0000
Manifest next update: Mon 20 Oct 2025 14:01:29 +0000
Files and hashes: 1: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: maJZlGDMpiHoRIKuuvvUwPQTJeefR82mBswyODsjQ/M=)
2: dBWqqX7TUpjmbRpfXp44YLDQQKo.roa (hash: AVnu+TRmBANWXBo+f7zIG17k48ory+VgROMrgBy0M0A=)
3: ecJknRyfIBQOOdXuyRMagWGM6Xc.roa (hash: 2TPM3149s6UNJrrM14pEqaNWUfexd8+/2ccuazOqFbo=)
4: iuZcLP2wCYz2ZLvFGLXNkUEaDHI.roa (hash: KntVVQ+l5TkxKddv8L7Y42R3lMc8nIp6SRc9XJjEO0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7b:2c:b2:a6:06:fc:97:15:4a:27:42:3a:2a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Oct 19 14:01:29 2025 GMT
Not After : Oct 20 14:01:29 2025 GMT
Subject: CN=2ffb47be2a7b245f8481790c2b977d288aa67ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:07:90:d8:9b:10:69:37:f5:35:fb:54:0f:bb:
21:7c:c0:8d:33:f9:6d:4f:a5:a5:f3:69:3f:4e:ba:
0c:ce:56:26:5b:20:e2:1d:b8:bf:70:c2:80:56:dd:
c6:f9:59:57:21:15:7b:1d:63:df:ee:fc:dc:2a:db:
25:4f:70:eb:0e:08:ba:87:7a:70:1e:ad:42:2a:c6:
c6:a2:01:54:e1:6e:9f:d9:ad:ce:5f:5c:b3:a5:07:
f5:6c:73:64:18:d6:e0:96:f5:0b:0a:11:fc:98:c3:
a1:58:97:f5:8f:6b:84:42:0e:5f:9a:bb:cf:ea:6d:
5c:94:19:b1:9f:47:d0:55:a6:b6:40:f3:95:2d:7a:
42:12:8c:a7:fe:b6:75:f6:5a:b7:75:2f:b5:ec:12:
ed:d3:72:be:82:76:cf:90:79:7f:ee:d2:7a:77:06:
24:df:f4:3d:84:a6:79:42:f7:6b:f4:0f:96:ce:68:
e7:27:1e:0c:5d:5a:70:e4:fe:10:b1:10:a0:cd:24:
bd:3b:bd:98:3b:1e:57:95:9b:50:5f:4c:70:1d:35:
fe:db:df:0f:ab:2e:3f:fd:fe:d4:5a:4a:3e:5a:0b:
33:16:d2:ff:cf:71:1d:e5:80:12:d0:d4:52:cc:0e:
83:1e:20:9d:27:29:54:ca:89:76:57:bd:c3:3c:de:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FB:47:BE:2A:7B:24:5F:84:81:79:0C:2B:97:7D:28:8A:A6:7E:E6
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:29:af:7b:5e:fc:d7:40:53:ee:b7:ba:3f:07:e2:49:16:1c:
ae:bf:05:a1:1a:86:96:fb:4f:cf:6b:23:5d:cf:16:ed:14:ff:
dd:5e:c4:e9:00:8b:f5:41:16:0b:8c:a3:6c:58:af:eb:bb:bc:
c9:e8:51:14:d1:c8:91:31:51:4d:69:75:20:53:b8:44:cc:41:
e0:0d:74:70:f6:8b:72:00:8b:48:16:d5:76:26:89:bb:f3:ea:
0e:81:15:03:fa:a8:90:5e:4e:ca:98:60:b5:13:50:b5:b4:39:
21:f2:9d:ea:01:ab:2d:b4:ea:c4:7d:8d:0f:af:27:49:02:e7:
e6:3b:99:f7:4b:55:88:77:e8:3a:c4:cf:1a:81:53:a7:de:50:
85:95:43:93:85:ee:48:54:ac:ef:96:36:6a:55:b7:3d:25:7c:
dc:76:64:97:e0:88:af:ba:fa:f0:d7:cc:df:fa:22:34:25:e5:
f2:e0:c0:4e:22:de:c3:04:08:90:03:fb:25:7c:93:ec:11:23:
55:76:9c:1d:e5:16:82:87:f6:52:43:ca:0b:5d:88:b2:cc:7a:
36:7b:9c:66:68:21:79:48:c7:fa:d8:23:14:f7:82:c4:d5:8a:
8e:0e:ef:ae:b4:43:98:56:67:08:95:dc:64:af:92:8d:0d:41:
8f:41:05:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xnsssqYG/JcVSidCOip+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYmJkMmZhMTgzMTk2MzllMjVmZmJmNGJkYmZhMDA4NjYw
MTU4YWUwHhcNMjUxMDE5MTQwMTI5WhcNMjUxMDIwMTQwMTI5WjAzMTEwLwYDVQQD
EygyZmZiNDdiZTJhN2IyNDVmODQ4MTc5MGMyYjk3N2QyODhhYTY3ZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QeQ2JsQaTf1NftUD7shfMCNM/lt
T6Wl82k/TroMzlYmWyDiHbi/cMKAVt3G+VlXIRV7HWPf7vzcKtslT3DrDgi6h3pw
Hq1CKsbGogFU4W6f2a3OX1yzpQf1bHNkGNbglvULChH8mMOhWJf1j2uEQg5fmrvP
6m1clBmxn0fQVaa2QPOVLXpCEoyn/rZ19lq3dS+17BLt03K+gnbPkHl/7tJ6dwYk
3/Q9hKZ5Qvdr9A+WzmjnJx4MXVpw5P4QsRCgzSS9O72YOx5XlZtQX0xwHTX+298P
qy4//f7UWko+WgszFtL/z3Ed5YAS0NRSzA6DHiCdJylUyol2V73DPN6ZpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/7R74qeyRfhIF5DCuXfSiKpn7mMB8GA1UdIwQY
MBaAFHK70voYMZY54l/79L2/oAhmAViuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kYzQ0MjAtNDA2Mi00Nzc4LTkzNTgt
MGFmMmU1NDE2NDZjLzEvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kYzQ0MjAtNDA2Mi00Nzc4LTkzNTgtMGFmMmU1NDE2NDZj
LzEvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSmve178
10BT7re6PwfiSRYcrr8FoRqGlvtPz2sjXc8W7RT/3V7E6QCL9UEWC4yjbFiv67u8
yehRFNHIkTFRTWl1IFO4RMxB4A10cPaLcgCLSBbVdiaJu/PqDoEVA/qokF5Oyphg
tRNQtbQ5IfKd6gGrLbTqxH2ND68nSQLn5juZ90tViHfoOsTPGoFTp95QhZVDk4Xu
SFSs75Y2alW3PSV83HZkl+CIr7r68NfM3/oiNCXl8uDATiLewwQIkAP7JXyT7BEj
VXacHeUWgof2UkPKC12Issx6NnucZmgheUjH+tgjFPeCxNWKjg7vrrRDmFZnCJXc
ZK+SjQ1Bj0EFEg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:36 2025 by rpki-client