Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: gyVn5e3x8B+S6mj8xr70OO55ldpjfaWL8RscUnSAx/0=
Subject key identifier: 03:98:18:D5:E2:20:97:5B:D8:62:10:EB:31:70:36:61:41:40:F7:08
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 019A4DE1E5DC4964C097978E2E4C53CA03EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 081A
Signing time: Tue 04 Nov 2025 08:00:41 +0000
Manifest this update: Tue 04 Nov 2025 08:00:41 +0000
Manifest next update: Wed 05 Nov 2025 08:00:41 +0000
Files and hashes: 1: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: f3fi7OSOl/vKqlYwIzc6xV7TclQRrTotxu8EzUwzD/o=)
2: dBWqqX7TUpjmbRpfXp44YLDQQKo.roa (hash: AVnu+TRmBANWXBo+f7zIG17k48ory+VgROMrgBy0M0A=)
3: ecJknRyfIBQOOdXuyRMagWGM6Xc.roa (hash: 2TPM3149s6UNJrrM14pEqaNWUfexd8+/2ccuazOqFbo=)
4: iuZcLP2wCYz2ZLvFGLXNkUEaDHI.roa (hash: KntVVQ+l5TkxKddv8L7Y42R3lMc8nIp6SRc9XJjEO0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e5:dc:49:64:c0:97:97:8e:2e:4c:53:ca:03:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Nov 4 08:00:41 2025 GMT
Not After : Nov 5 08:00:41 2025 GMT
Subject: CN=039818d5e220975bd86210eb317036614140f708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6c:c1:e0:6a:54:0d:72:e0:f6:e1:55:62:50:
8f:5d:62:a5:d0:b8:55:53:20:ad:8d:ef:db:e9:17:
b7:54:fd:87:5a:1c:be:13:9b:28:97:89:3e:8e:25:
7a:66:87:21:02:c2:b8:75:e6:68:f5:5e:ff:5f:0c:
b9:e5:7f:90:67:ef:ff:01:a0:40:d8:bb:1c:96:5e:
86:2a:b3:d2:b6:5d:cd:6e:4d:4e:d4:eb:ae:4c:ec:
04:07:b2:fc:dd:17:35:23:f5:a3:be:d8:6e:72:d8:
e5:09:d3:9a:5b:32:55:f7:23:80:2e:9a:b9:4e:0f:
9b:b7:cf:62:64:ca:de:de:7e:cb:85:cc:8f:21:a6:
b1:e0:50:0d:13:d2:9e:c6:d7:75:80:99:d1:58:64:
fd:98:4d:4a:42:f5:a2:e8:e2:69:80:8a:c2:c7:8c:
7b:fe:7b:5e:93:5f:fe:e6:ed:8a:91:27:5a:37:7f:
0b:b7:c4:d5:a6:77:2b:7a:85:f2:cd:c1:64:64:e3:
a1:50:fe:95:de:a1:73:8b:7b:a5:02:b1:dd:e0:62:
ab:68:e3:01:ad:fc:70:1f:f8:f2:2d:a1:4f:1b:03:
9c:69:9f:9a:ea:e8:a9:35:e6:b1:39:fb:2f:c5:89:
65:8d:5b:25:a3:cc:95:d1:21:8d:52:94:67:e9:b6:
c5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:98:18:D5:E2:20:97:5B:D8:62:10:EB:31:70:36:61:41:40:F7:08
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:24:25:69:ca:8e:e9:6a:5c:c1:f4:c4:1a:ba:3a:82:3d:9b:
b7:3b:9b:2f:20:09:bc:37:1d:99:26:6d:b3:88:c6:ea:bf:f0:
60:62:c5:41:f7:88:d1:36:1c:c1:39:72:f9:e8:d2:ed:22:f0:
4d:1a:8d:e3:8b:2b:40:22:30:bf:4c:54:d3:f6:34:4b:27:4b:
1e:f3:f5:f9:81:c9:43:57:6a:a9:03:88:7a:c9:f0:44:9e:6f:
0c:9c:7b:ae:db:89:d5:6c:bf:67:7d:77:0d:cf:15:e7:c8:39:
5e:dc:ba:06:44:ff:9b:61:09:f7:b7:37:7f:7c:57:5c:a1:b3:
8b:d4:be:70:74:84:c1:79:29:dc:01:4f:43:e4:ca:98:87:56:
e7:40:9b:d7:da:a2:1f:c9:18:ac:dd:3c:3b:d0:86:40:4a:49:
ca:37:67:7b:3d:0e:a7:3c:6c:7b:f4:31:74:ba:00:6d:c4:ec:
42:c7:18:aa:d5:8f:0d:73:ed:36:ac:4f:43:39:80:3c:8b:94:
b1:01:eb:73:28:fb:d6:78:d2:b9:a0:bc:df:cf:80:72:3e:fc:
33:5e:81:6a:18:62:dc:77:36:cc:0d:34:73:94:0b:38:8e:fb:
24:f6:08:20:b1:fd:93:54:2f:23:a5:8d:04:75:d8:ed:02:2a:
36:37:2e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:39 2025 by rpki-client