Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier: 6rsKABvU7mZAvrhy8lrsteCTZ7J7Be/jG/bsP5iwr5U=
Subject key identifier: A4:ED:04:94:42:98:15:2A:76:9B:33:4E:E4:73:78:44:F4:68:A0:3D
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: 0197B70EB3E536484775249428AAAF8A511C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number: 0E9F
Signing time: Sat 28 Jun 2025 15:01:23 +0000
Manifest this update: Sat 28 Jun 2025 15:01:23 +0000
Manifest next update: Sun 29 Jun 2025 15:01:23 +0000
Files and hashes: 1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: ZhJ0vtcse4azZMXrqoP31L9M5nehHTUeweH2z90x57U=)
2: DNwk8XqqsVx_0XVNBxGEv9s46iw.roa (hash: o1R3IO/6fSn30zcJzkwKmtL71+61TdQ+fmzf6z93EPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b3:e5:36:48:47:75:24:94:28:aa:af:8a:51:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Jun 28 15:01:23 2025 GMT
Not After : Jun 29 15:01:23 2025 GMT
Subject: CN=a4ed04944298152a769b334ee4737844f468a03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fe:a2:37:61:b2:69:a0:97:c3:90:bf:30:27:
e8:50:d7:e5:4f:36:ee:f5:98:f0:85:ef:76:6d:44:
f2:9b:53:52:f4:6e:c8:45:72:8f:76:91:df:6d:07:
e9:6d:88:7b:01:5d:af:be:ad:bd:1c:3a:7e:51:f6:
c4:7a:ec:d8:58:9a:30:9f:4d:03:cd:3d:32:4d:52:
fc:36:40:47:92:f6:cd:25:fe:b6:14:2d:57:83:ec:
33:aa:69:e6:1b:e5:1c:c0:8c:fc:d1:4b:4c:4e:47:
6b:a5:5f:51:22:9b:6f:93:5f:f7:d9:4a:4b:8c:f6:
20:b1:dd:0f:98:25:8f:f8:3d:e2:67:f1:af:3a:64:
d3:7d:63:f8:dd:c7:d0:f9:85:9c:8b:7d:63:a3:3b:
b8:d4:dc:0b:fd:d0:a4:a6:fd:41:61:72:f2:0a:f4:
b9:39:11:ab:4f:5a:28:fd:8a:61:e1:ab:4b:0d:5e:
60:8d:e7:65:16:41:69:d7:82:c2:f2:2a:26:7d:11:
6a:86:df:00:3a:27:0b:c4:e3:62:78:69:af:75:53:
7e:8a:34:e8:61:0e:8e:b8:1f:8a:53:d7:b2:b6:6d:
48:f7:18:ff:14:03:d9:c6:ce:94:0b:b9:23:b9:a4:
18:3c:2c:c1:cd:b5:fc:76:01:b1:8d:aa:ef:6b:22:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:ED:04:94:42:98:15:2A:76:9B:33:4E:E4:73:78:44:F4:68:A0:3D
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:61:2e:0a:69:aa:99:e2:e9:29:14:11:95:cb:8b:7b:0f:e8:
b6:82:86:e5:17:aa:66:95:cf:28:81:5c:4b:eb:92:a5:b0:ab:
89:01:8a:b3:38:e0:e0:bb:d1:9b:89:5a:0e:46:9b:ad:ec:2e:
92:ba:d3:50:f7:9d:dd:ad:c8:f5:fc:9c:5d:be:0f:cb:a5:79:
00:1d:02:62:81:b5:7d:34:8c:a2:38:ef:65:80:37:67:84:93:
35:b4:81:89:32:d1:6a:67:bc:04:f0:52:66:a2:2e:c8:d7:1c:
c4:66:fd:41:20:f4:29:ab:b7:cf:13:98:82:16:6c:ab:29:73:
2b:19:9a:05:17:1a:23:11:47:6b:c4:91:2a:cd:b3:ee:c5:4c:
7d:5e:ce:c9:45:0f:f9:0d:8f:a1:db:94:c0:9a:6f:6b:f9:84:
df:59:52:4f:c1:7e:65:4b:f8:2f:2f:ed:72:70:0a:85:9d:9f:
3b:93:fd:b3:c3:3d:67:d5:03:c6:f3:63:a0:1f:ac:05:11:90:
cc:0f:c3:49:c5:74:a5:d9:78:c6:24:2c:d9:f9:3a:ab:5a:88:
b7:8f:1e:91:b5:f0:a4:e7:bb:c9:75:32:c3:07:1c:4e:c7:63:
ea:16:ba:c1:c0:62:0a:82:13:70:2c:2c:77:96:3d:5e:6a:91:
90:f7:1e:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DrPlNkhHdSSUKKqvilEcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MTBhZjEwMDY3ZjUzMDFmYzhmNjA4NDhmNTViM2MzM2Mx
ODBmNTMwHhcNMjUwNjI4MTUwMTIzWhcNMjUwNjI5MTUwMTIzWjAzMTEwLwYDVQQD
EyhhNGVkMDQ5NDQyOTgxNTJhNzY5YjMzNGVlNDczNzg0NGY0NjhhMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5v6iN2GyaaCXw5C/MCfoUNflTzbu
9Zjwhe92bUTym1NS9G7IRXKPdpHfbQfpbYh7AV2vvq29HDp+UfbEeuzYWJown00D
zT0yTVL8NkBHkvbNJf62FC1Xg+wzqmnmG+UcwIz80UtMTkdrpV9RIptvk1/32UpL
jPYgsd0PmCWP+D3iZ/GvOmTTfWP43cfQ+YWci31jozu41NwL/dCkpv1BYXLyCvS5
ORGrT1oo/Yph4atLDV5gjedlFkFp14LC8iomfRFqht8AOicLxONieGmvdVN+ijTo
YQ6OuB+KU9eytm1I9xj/FAPZxs6UC7kjuaQYPCzBzbX8dgGxjarvayJxswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTtBJRCmBUqdpszTuRzeET0aKA9MB8GA1UdIwQY
MBaAFAkQrxAGf1MB/I9ghI9Vs8M8GA9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iZWIwNzAtZTEyOS00NGI2LWE3N2Mt
MmU3YThhMzk0YzQ1LzEvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9iZWIwNzAtZTEyOS00NGI2LWE3N2MtMmU3YThhMzk0YzQ1
LzEvQ1JDdkVBWl9Vd0g4ajJDRWoxV3p3endZRDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2EuCmmq
meLpKRQRlcuLew/otoKG5ReqZpXPKIFcS+uSpbCriQGKszjg4LvRm4laDkabrewu
krrTUPed3a3I9fycXb4Py6V5AB0CYoG1fTSMojjvZYA3Z4STNbSBiTLRame8BPBS
ZqIuyNccxGb9QSD0Kau3zxOYghZsqylzKxmaBRcaIxFHa8SRKs2z7sVMfV7OyUUP
+Q2PoduUwJpva/mE31lST8F+ZUv4Ly/tcnAKhZ2fO5P9s8M9Z9UDxvNjoB+sBRGQ
zA/DScV0pdl4xiQs2fk6q1qIt48ekbXwpOe7yXUywwccTsdj6ha6wcBiCoITcCws
d5Y9XmqRkPceQQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:32 2025 by rpki-client