Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
File: crjVM-JRm2ityzt741m5M1fiscs.mft (raw, json)
Hash identifier: tRNGjPkcrIoixmqcjM4KXsGI+Kh0vF+COFHV17egNNI=
Subject key identifier: A7:3E:96:BE:D7:7A:16:AF:91:78:A1:41:6B:02:F6:5A:0A:0D:DA:34
Authority key identifier: 72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
Certificate issuer: /CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Certificate serial: 0197B745339F512E7C602E5626B241C167DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: JmXCpQWdSoFCP6yn-CKJyKpMmAM.roa (hash: Yy6MwGTUuS17SwLg+SYCwv3ZIWFTtcSoLxcVcFhPV/Q=)
2: crjVM-JRm2ityzt741m5M1fiscs.crl (hash: 0T747ZIRwRgHQrmx6uAooRd9VQ/t7jSyPpfaFZhGndg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:33:9f:51:2e:7c:60:2e:56:26:b2:41:c1:67:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=a73e96bed77a16af9178a1416b02f65a0a0dda34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:12:b2:22:62:fd:6e:62:21:2f:c5:bd:46:
df:5c:0c:b1:e7:11:48:c0:f6:89:ca:ff:4e:1d:3c:
73:58:36:6b:ca:31:18:7c:a9:9f:f4:2d:2b:7b:12:
cc:7a:b2:bf:e7:0d:7a:ed:38:6a:f2:9d:5f:d0:c3:
cd:0c:f7:31:19:19:04:fb:a5:1f:e7:ca:61:f4:f2:
41:29:75:f8:32:72:de:23:ad:f8:86:c6:be:7d:e2:
be:1f:66:f8:5d:2b:2d:12:73:2f:4b:4c:5a:31:66:
f8:20:7f:45:d6:56:85:1a:ee:4c:a5:3b:80:aa:78:
1b:41:9c:25:b6:2e:59:e6:a5:ba:2d:2e:48:0f:17:
62:f7:31:eb:f2:2d:61:8d:2d:df:83:97:74:12:45:
d6:b7:4c:d9:e2:84:a2:63:db:26:e1:67:5c:8d:9b:
db:f9:88:0a:9d:26:c4:17:9b:9d:64:a5:4d:f3:88:
39:4f:96:1e:ed:be:41:1e:b8:9a:64:91:d8:d3:66:
bf:c6:66:b3:2a:d3:ad:e2:ba:9e:1f:47:a5:d7:e9:
f0:3e:06:8f:59:4c:aa:3e:b3:28:05:ec:98:30:ab:
0a:a7:e3:4d:ed:f8:16:6f:aa:b3:3f:82:53:b1:35:
5c:5a:ee:fc:6e:94:45:3b:33:6d:48:d0:a6:02:6e:
f6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3E:96:BE:D7:7A:16:AF:91:78:A1:41:6B:02:F6:5A:0A:0D:DA:34
X509v3 Authority Key Identifier:
keyid:72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ac:2d:31:00:8f:04:bd:2f:0f:84:5e:d9:84:a3:1f:5f:ac:
ed:cf:96:bf:d6:a2:e9:a7:b5:d1:bb:e6:31:65:bd:5a:06:6a:
e7:97:8e:ea:b2:10:0b:4d:61:6f:a4:15:57:a4:58:c2:b9:2c:
8b:2f:f6:3b:00:90:3b:ad:6d:58:93:73:73:a0:f7:06:1e:6c:
ee:2a:40:3d:76:4e:a9:94:c6:8b:d1:cd:2f:75:75:94:00:bb:
64:dc:4e:9e:9a:5c:0d:6f:44:19:3f:74:c7:59:b0:0c:cd:c6:
e1:97:79:ce:26:f5:41:1b:c4:b7:8c:38:bb:bd:43:8a:7a:12:
2a:41:48:a1:23:97:82:2d:f0:cd:79:c4:ae:3a:c0:00:18:65:
25:94:ef:de:7f:68:8e:0d:1f:89:3f:76:0a:28:54:68:50:89:
d7:36:59:11:a7:3e:93:77:12:6b:3f:e5:8f:67:c0:92:2a:8a:
35:c2:6e:15:12:72:14:69:fa:c2:2a:7a:9c:61:2b:f5:6d:7b:
4b:48:c1:58:e6:6c:eb:c3:68:79:64:be:e8:02:db:db:e7:6e:
58:2e:4c:94:99:8f:8d:81:28:59:a7:30:6a:cf:03:f8:e6:25:
9f:64:0f:5b:f3:7a:75:ef:19:32:be:9d:a3:e6:07:ac:d4:d9:
a4:33:bb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:43 2025 by rpki-client