Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: kG0dUQc+q5sCq/R5SzW1YqppxPZvTBemzbMIQ1YLX+g=
Subject key identifier: 9C:31:5C:E8:E6:D6:52:B5:EC:35:37:96:AB:65:6D:16:86:D3:00:BD
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 019673E6F7066FE5C4BA5A7B652BC740AE87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 0619
Signing time: Sat 26 Apr 2025 21:00:38 +0000
Manifest this update: Sat 26 Apr 2025 21:00:38 +0000
Manifest next update: Sun 27 Apr 2025 21:00:38 +0000
Files and hashes: 1: 9B_nRxWCf-IC__yWPSp2TtcLH_U.roa (hash: HIni5u9YKsNdRHwljtSVtJZz+uwQKEAkuVEZPM74tyE=)
2: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: S+E5IdBZSsGN6vHRh4jeQulIVeg5HRlq193s76RJcR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e6:f7:06:6f:e5:c4:ba:5a:7b:65:2b:c7:40:ae:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Apr 26 21:00:38 2025 GMT
Not After : Apr 27 21:00:38 2025 GMT
Subject: CN=9c315ce8e6d652b5ec353796ab656d1686d300bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:00:ae:e4:a3:b6:00:8b:6e:bd:19:49:4a:e4:
f7:26:f3:42:ed:49:79:01:a0:62:18:86:44:b0:9f:
74:45:ed:77:ea:69:2d:c5:dd:c1:ce:a3:9f:0c:97:
ad:7c:52:ac:0e:96:4c:df:92:ec:7f:d9:3c:5b:e6:
ed:f1:b9:a2:42:00:8d:d4:ba:31:3b:2d:1f:63:d7:
7d:0a:c4:b7:07:2d:8b:35:c5:72:f0:8a:2f:d4:62:
31:61:63:3a:57:22:89:4c:09:c7:67:6d:72:b7:23:
65:37:b3:f0:66:99:36:f1:8d:60:c2:87:cd:27:51:
11:3a:4f:37:e8:d4:b6:b9:60:24:b2:fa:e8:d1:3c:
c7:65:17:31:3e:6e:fc:85:bc:ac:4f:43:bc:92:86:
0f:e1:0c:85:48:12:3c:40:a4:cb:1c:fa:0d:1c:fd:
3b:e4:29:bb:9f:8b:58:86:b5:74:f3:4e:78:4c:c2:
a2:32:9b:34:47:d4:94:88:b1:fc:d9:e1:50:49:07:
c1:36:62:fa:7d:da:3d:e0:67:ae:c3:6d:4b:01:0c:
8f:a0:df:9c:7d:ba:fe:3b:50:ef:69:9a:4c:0c:9c:
c5:7c:47:fd:74:ab:25:41:c0:41:99:40:42:6c:84:
20:9a:21:e8:24:a5:d6:80:76:4a:c0:a0:e8:eb:31:
d0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:31:5C:E8:E6:D6:52:B5:EC:35:37:96:AB:65:6D:16:86:D3:00:BD
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:65:d1:cc:ec:79:68:71:f0:d3:6c:1c:50:d9:d4:55:02:2d:
e6:7d:2a:85:8c:b9:5c:04:ba:8f:ab:6b:75:bb:e2:a4:a9:5c:
ef:f7:84:81:22:c7:a2:ef:36:80:8b:b9:70:3f:c9:62:b6:ae:
ac:e5:e5:05:f2:24:27:6c:c8:b0:77:3d:7f:51:40:5a:90:12:
46:29:94:5a:71:69:04:25:90:69:39:df:8f:08:fb:08:1c:a3:
85:c2:be:0f:e0:16:fb:fd:a4:5a:e2:c7:f1:57:1a:4f:2a:7a:
ae:0e:dc:52:f8:ef:de:97:d9:87:b9:32:9f:f0:e8:a5:2a:ca:
53:57:f2:8d:45:0b:5f:61:36:3f:a6:fb:61:85:fd:43:c9:50:
88:a3:e7:e4:b6:3a:60:ed:c8:d9:14:bf:11:8b:b2:bf:87:ee:
24:54:cd:a1:3d:84:71:d7:85:52:64:25:e1:d4:f7:df:50:d5:
fc:57:f6:4d:d6:65:f8:96:52:4f:9f:8a:fd:06:d5:ba:00:83:
5b:d5:88:e1:81:8b:06:74:7c:b5:c9:1f:94:da:21:03:99:bd:
2b:ad:49:92:0c:8a:9c:8e:42:2a:36:72:85:11:1e:85:d7:40:
de:e2:53:f3:b5:f0:ac:ef:42:39:56:c6:43:09:39:76:55:9c:
e2:c6:00:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZz5vcGb+XEulp7ZSvHQK6HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYmJkMmZhMTgzMTk2MzllMjVmZmJmNGJkYmZhMDA4NjYw
MTU4YWUwHhcNMjUwNDI2MjEwMDM4WhcNMjUwNDI3MjEwMDM4WjAzMTEwLwYDVQQD
Eyg5YzMxNWNlOGU2ZDY1MmI1ZWMzNTM3OTZhYjY1NmQxNjg2ZDMwMGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQCu5KO2AItuvRlJSuT3JvNC7Ul5
AaBiGIZEsJ90Re136mktxd3BzqOfDJetfFKsDpZM35Lsf9k8W+bt8bmiQgCN1Lox
Oy0fY9d9CsS3By2LNcVy8Iov1GIxYWM6VyKJTAnHZ21ytyNlN7PwZpk28Y1gwofN
J1EROk836NS2uWAksvro0TzHZRcxPm78hbysT0O8koYP4QyFSBI8QKTLHPoNHP07
5Cm7n4tYhrV08054TMKiMps0R9SUiLH82eFQSQfBNmL6fdo94Geuw21LAQyPoN+c
fbr+O1DvaZpMDJzFfEf9dKslQcBBmUBCbIQgmiHoJKXWgHZKwKDo6zHQ2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwxXOjm1lK17DU3lqtlbRaG0wC9MB8GA1UdIwQY
MBaAFHK70voYMZY54l/79L2/oAhmAViuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9kYzQ0MjAtNDA2Mi00Nzc4LTkzNTgt
MGFmMmU1NDE2NDZjLzEvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9kYzQ0MjAtNDA2Mi00Nzc4LTkzNTgtMGFmMmU1NDE2NDZj
LzEvY3J2Uy1oZ3hsam5pWF92MHZiLWdDR1lCV0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2XRzOx5
aHHw02wcUNnUVQIt5n0qhYy5XAS6j6trdbvipKlc7/eEgSLHou82gIu5cD/JYrau
rOXlBfIkJ2zIsHc9f1FAWpASRimUWnFpBCWQaTnfjwj7CByjhcK+D+AW+/2kWuLH
8VcaTyp6rg7cUvjv3pfZh7kyn/DopSrKU1fyjUULX2E2P6b7YYX9Q8lQiKPn5LY6
YO3I2RS/EYuyv4fuJFTNoT2EcdeFUmQl4dT331DV/Ff2TdZl+JZST5+K/QbVugCD
W9WI4YGLBnR8tckflNohA5m9K61JkgyKnI5CKjZyhREehddA3uJT87XwrO9COVbG
Qwk5dlWc4sYAkA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:37:42 2025 by rpki-client