Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: UuyQK7os7EjvvacU71Xy9ga8CuHg+GNrrRXSgNh/bWQ=
Subject key identifier: 09:9F:18:49:C0:39:2C:BD:F3:C0:F0:2A:2E:D5:77:05:63:E8:63:83
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 0197B6A0DAC7FF4706885900BB3E7E4D2B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 06C0
Signing time: Sat 28 Jun 2025 13:01:24 +0000
Manifest this update: Sat 28 Jun 2025 13:01:24 +0000
Manifest next update: Sun 29 Jun 2025 13:01:24 +0000
Files and hashes: 1: 9B_nRxWCf-IC__yWPSp2TtcLH_U.roa (hash: HIni5u9YKsNdRHwljtSVtJZz+uwQKEAkuVEZPM74tyE=)
2: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: qkDTv8Aspxd+LvS17ZyI8TtB7d3Pd5f1S2MWAyJHv2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:da:c7:ff:47:06:88:59:00:bb:3e:7e:4d:2b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Jun 28 13:01:24 2025 GMT
Not After : Jun 29 13:01:24 2025 GMT
Subject: CN=099f1849c0392cbdf3c0f02a2ed5770563e86383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d1:c9:9a:ad:e9:64:ff:6c:22:54:24:0a:ee:
a0:f0:ae:ef:28:8d:38:85:40:de:48:6a:03:16:dd:
2f:80:ba:0b:bb:6a:bd:46:3c:ff:0e:d6:d2:7a:32:
50:de:90:48:0d:ed:14:04:16:76:08:f4:8d:bd:4c:
a7:be:1e:48:82:8d:84:f2:71:e9:6d:18:74:b0:c5:
22:ed:ad:44:c9:54:1c:dc:7a:a5:70:f6:8a:82:38:
d7:24:56:c0:b3:16:69:a7:97:dd:a2:4d:72:e1:3c:
3b:8f:2c:d3:c7:20:df:3d:41:6e:86:ff:57:a3:5b:
7b:0a:20:9b:88:c3:27:03:64:f4:b7:68:e3:d4:a3:
a2:5d:32:f4:3a:bd:3b:94:57:4f:53:24:f7:f9:b6:
7e:d8:1c:c6:d5:ba:39:10:ee:b8:61:8a:1b:85:41:
e8:65:bc:ec:79:82:b5:84:f9:25:60:db:f4:b9:4d:
e5:2e:ea:c7:15:d5:92:47:18:e1:de:96:e6:f4:cf:
a9:f0:cd:37:d1:86:f2:d7:c9:42:ad:89:90:9b:b9:
05:57:6c:73:93:ce:0b:0d:16:7e:1d:bf:9d:1a:be:
63:95:ba:f5:ab:5b:e5:3b:cf:2a:b6:74:a9:1c:ee:
c4:2c:b8:fe:da:94:44:c3:7b:ab:0c:fe:b3:70:51:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9F:18:49:C0:39:2C:BD:F3:C0:F0:2A:2E:D5:77:05:63:E8:63:83
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:eb:e6:14:32:dd:7b:b0:b0:d6:5a:2b:8d:56:09:7b:6d:75:
dc:f3:2e:f8:b3:ed:7d:06:3e:27:66:25:d4:6c:f2:b7:3d:7b:
7f:c0:b9:48:1e:24:79:b5:5f:7b:3a:36:6b:d8:b1:75:0a:35:
b2:41:1a:8b:e7:b0:b9:2e:79:f5:6d:23:52:8c:5f:e3:a9:f6:
ca:86:55:b2:34:d0:dd:32:be:ee:de:98:ce:50:43:08:98:65:
85:6f:88:c5:db:23:4d:2d:77:bf:33:fc:08:2e:ec:ba:79:8c:
ad:12:69:f8:84:54:fb:c2:c5:23:a1:1c:bf:4a:c9:a9:12:fa:
c0:36:a1:5e:5e:29:17:fb:fa:a1:43:61:70:90:41:09:87:cf:
e0:17:b2:78:d1:98:f6:a9:f9:d3:a7:61:6e:af:de:65:43:32:
6d:1c:00:df:a5:3c:80:3b:b7:0a:a5:27:63:65:3d:ab:23:f1:
ba:cc:44:82:76:b4:8d:1a:29:58:c9:be:d0:bd:dc:80:10:58:
03:06:b3:9a:d9:fa:7f:a0:c7:db:37:8d:77:79:7b:7b:56:25:
3b:be:b2:e4:db:b0:4a:e3:d4:35:90:4a:7f:c5:c2:17:9a:18:
03:39:0a:40:13:cc:7d:ba:e5:c4:07:81:41:fd:19:5e:20:5d:
db:06:70:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oNrH/0cGiFkAuz5+TSskMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYmJkMmZhMTgzMTk2MzllMjVmZmJmNGJkYmZhMDA4NjYw
MTU4YWUwHhcNMjUwNjI4MTMwMTI0WhcNMjUwNjI5MTMwMTI0WjAzMTEwLwYDVQQD
EygwOTlmMTg0OWMwMzkyY2JkZjNjMGYwMmEyZWQ1NzcwNTYzZTg2MzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNHJmq3pZP9sIlQkCu6g8K7vKI04
hUDeSGoDFt0vgLoLu2q9Rjz/DtbSejJQ3pBIDe0UBBZ2CPSNvUynvh5Igo2E8nHp
bRh0sMUi7a1EyVQc3HqlcPaKgjjXJFbAsxZpp5fdok1y4Tw7jyzTxyDfPUFuhv9X
o1t7CiCbiMMnA2T0t2jj1KOiXTL0Or07lFdPUyT3+bZ+2BzG1bo5EO64YYobhUHo
ZbzseYK1hPklYNv0uU3lLurHFdWSRxjh3pbm9M+p8M030Yby18lCrYmQm7kFV2xz
k84LDRZ+Hb+dGr5jlbr1q1vlO88qtnSpHO7ELLj+2pREw3urDP6zcFHxhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmfGEnAOSy988DwKi7VdwVj6GODMB8GA1UdIwQY
MBaAFHK70voYMZY54l/79L2/oAhmAViuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kYzQ0MjAtNDA2Mi00Nzc4LTkzNTgt
MGFmMmU1NDE2NDZjLzEvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kYzQ0MjAtNDA2Mi00Nzc4LTkzNTgtMGFmMmU1NDE2NDZj
LzEvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALevmFDLd
e7Cw1lorjVYJe2113PMu+LPtfQY+J2Yl1Gzytz17f8C5SB4kebVfezo2a9ixdQo1
skEai+ewuS559W0jUoxf46n2yoZVsjTQ3TK+7t6YzlBDCJhlhW+IxdsjTS13vzP8
CC7sunmMrRJp+IRU+8LFI6Ecv0rJqRL6wDahXl4pF/v6oUNhcJBBCYfP4BeyeNGY
9qn506dhbq/eZUMybRwA36U8gDu3CqUnY2U9qyPxusxEgna0jRopWMm+0L3cgBBY
Awazmtn6f6DH2zeNd3l7e1YlO76y5NuwSuPUNZBKf8XCF5oYAzkKQBPMfbrlxAeB
Qf0ZXiBd2wZw7g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:26:58 2025 by rpki-client