Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: buWO5cgI/xawimdgdpj5BMjovGY9no6kokgJYw6iFqk=
Subject key identifier: 11:6E:58:63:97:AB:44:05:BC:41:62:B7:C4:BB:04:52:F1:61:77:CD
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 0198D5BBA4438FE82B106CB0B9DAC6245388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 0755
Signing time: Sat 23 Aug 2025 07:01:40 +0000
Manifest this update: Sat 23 Aug 2025 07:01:40 +0000
Manifest next update: Sun 24 Aug 2025 07:01:40 +0000
Files and hashes: 1: PatIGgqD86wzEVK_Ek5eJMyyPEQ.roa (hash: Jnvv+9lMqzmCQICWK+8e6OXgwkBFe9S6SxW0ystXjQE=)
2: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: /jGld9pbq+LdH4spWbqggTVf9ZOI9D+tITs5an8Kh4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a4:43:8f:e8:2b:10:6c:b0:b9:da:c6:24:53:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Aug 23 07:01:40 2025 GMT
Not After : Aug 24 07:01:40 2025 GMT
Subject: CN=116e586397ab4405bc4162b7c4bb0452f16177cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:3e:55:c9:11:23:6f:71:88:48:95:84:f9:
18:73:bb:07:27:e4:37:e9:b3:b3:b4:43:fa:bd:c7:
22:86:ea:c9:c3:b8:01:66:b3:b7:91:17:84:8e:50:
fc:21:1b:b4:d2:0c:75:bf:22:10:d5:ef:d5:9a:96:
16:e0:3b:72:90:df:75:3b:7a:2f:b4:52:59:05:be:
06:bd:b1:56:af:14:eb:85:0b:dc:33:06:4c:3f:4e:
f9:bf:ba:a6:7b:d1:d6:7f:2e:a3:9f:af:e1:d0:8b:
16:61:12:90:38:b3:f0:17:64:25:5c:b6:83:94:f0:
09:03:95:b6:d6:b8:61:c9:af:68:ca:7e:f7:02:2a:
c3:83:13:77:69:f5:a1:e4:57:9e:f9:fe:92:83:d6:
03:b2:a5:04:59:f1:26:bf:69:44:ee:1a:4a:2b:52:
8f:37:fe:26:32:eb:55:de:57:8e:cf:07:54:78:1d:
46:66:b3:31:b4:c0:d6:e5:ba:46:60:13:fc:75:ee:
1b:a1:dc:87:2b:83:76:0e:5f:4b:6b:ec:47:ce:f4:
94:66:67:c1:c3:f5:32:f0:35:2f:3b:6f:af:f4:51:
19:e5:c5:dc:3b:bf:3e:4f:ee:e8:df:8b:11:d9:66:
43:4e:bf:ba:48:98:bb:8d:8a:ff:ab:81:68:24:92:
66:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6E:58:63:97:AB:44:05:BC:41:62:B7:C4:BB:04:52:F1:61:77:CD
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:24:f1:bb:90:15:27:e1:43:c3:9d:9f:ee:de:c5:ce:13:af:
89:9d:98:9b:ee:d0:66:fa:1e:2f:52:f8:b1:60:76:4c:7a:9b:
4d:88:65:94:af:f8:c7:49:f2:da:11:76:e8:12:cf:3b:0c:f6:
eb:02:d1:76:23:c4:4a:3b:e0:d7:c1:ae:c9:f3:8f:5e:31:a6:
55:b0:72:58:d5:31:4a:28:1b:6f:94:fd:cb:77:fe:fe:d0:09:
33:d7:04:c1:45:4c:21:6c:29:ed:1a:d5:85:a7:ca:ca:bb:90:
a5:cd:02:4d:e7:8a:b6:8e:04:cd:55:3e:f1:7d:78:53:d2:1b:
fc:9f:98:6d:eb:59:35:d7:a3:42:be:36:c8:d7:3f:07:e8:90:
a5:4b:8d:6e:4c:ed:76:9a:0c:70:25:03:49:85:0a:86:53:77:
e8:89:f7:7a:58:78:24:a4:c3:72:43:c7:96:33:8c:84:ca:4d:
6b:6a:74:ca:71:ed:33:b8:69:05:c6:f9:8c:ce:82:f7:91:66:
d8:3b:17:b6:b6:79:f0:82:1e:64:16:15:a1:a1:80:57:b9:df:
47:b3:35:d9:6d:b9:8a:dd:03:d0:ca:1b:46:7c:57:f8:5f:55:
c6:41:5d:57:54:30:fd:84:b3:18:ec:16:0e:31:cf:1c:3f:9f:
5c:be:32:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:46:02 2025 by rpki-client