Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
File: crvS-hgxljniX_v0vb-gCGYBWK4.mft (raw, json)
Hash identifier: PUCff4dmH95OrAk0Dv+lrCoJzZ5lAu5lt4xjtboblPU=
Subject key identifier: 44:3B:A1:36:1C:D1:7D:4D:45:34:B6:A3:6F:82:AA:47:4A:27:FC:0F
Authority key identifier: 72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
Certificate issuer: /CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Certificate serial: 0198752BBEB95DC7316CD5818ADB0436237A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
Manifest number: 0723
Signing time: Mon 04 Aug 2025 13:00:57 +0000
Manifest this update: Mon 04 Aug 2025 13:00:57 +0000
Manifest next update: Tue 05 Aug 2025 13:00:57 +0000
Files and hashes: 1: PatIGgqD86wzEVK_Ek5eJMyyPEQ.roa (hash: Jnvv+9lMqzmCQICWK+8e6OXgwkBFe9S6SxW0ystXjQE=)
2: crvS-hgxljniX_v0vb-gCGYBWK4.crl (hash: JJcbhs8Edvn+MmqPJKOeVELpiEsaFghhefygeWgKaiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:2b:be:b9:5d:c7:31:6c:d5:81:8a:db:04:36:23:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bbd2fa18319639e25ffbf4bdbfa008660158ae
Validity
Not Before: Aug 4 13:00:57 2025 GMT
Not After : Aug 5 13:00:57 2025 GMT
Subject: CN=443ba1361cd17d4d4534b6a36f82aa474a27fc0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:64:99:4e:60:e1:84:e5:c5:60:eb:bd:9a:
60:c9:18:ac:6f:69:27:b1:b6:d0:38:fa:38:2c:1e:
48:88:a5:ab:d4:bf:ee:77:df:74:36:0b:67:e5:b0:
f2:23:1b:a4:64:d7:11:2d:17:0c:9e:3f:7e:67:a3:
fc:84:fa:96:08:9e:4f:9b:b8:be:db:97:31:9b:78:
87:b5:ac:f8:5d:af:1e:b4:2c:1e:ca:76:5e:9a:ef:
0a:5f:dd:37:5c:e8:2e:cd:5f:6b:e4:11:c3:49:35:
55:4a:eb:28:77:ed:4d:80:ef:02:ce:d4:bf:c8:ec:
90:9e:ce:fc:1c:e7:8a:69:e7:35:24:82:64:77:2b:
22:df:e9:14:12:dc:93:00:d2:70:c5:a9:a3:7b:d9:
70:fa:2a:82:c0:1d:94:06:a5:99:d9:6b:1d:17:2b:
47:a8:0b:80:74:10:88:d4:cb:e8:af:98:2e:fd:3a:
94:7f:7f:2c:20:d7:2c:b1:04:12:e7:4c:b7:ec:bf:
ff:c4:74:b3:8c:90:7b:2c:9a:3e:03:59:e0:46:ce:
91:68:12:3d:2c:05:f8:b9:cb:91:ed:54:5f:1f:bb:
a3:6c:cf:d6:3d:da:41:4d:e7:8a:73:f8:4d:91:c7:
15:b8:2c:99:73:44:ce:80:9f:2b:c3:5a:dc:6a:37:
80:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3B:A1:36:1C:D1:7D:4D:45:34:B6:A3:6F:82:AA:47:4A:27:FC:0F
X509v3 Authority Key Identifier:
keyid:72:BB:D2:FA:18:31:96:39:E2:5F:FB:F4:BD:BF:A0:08:66:01:58:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crvS-hgxljniX_v0vb-gCGYBWK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/dc4420-4062-4778-9358-0af2e541646c/1/crvS-hgxljniX_v0vb-gCGYBWK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:79:8b:10:03:f5:08:9c:bc:9c:8f:5e:02:1f:f2:9b:43:c6:
d3:71:1b:e9:1b:ef:ac:ba:c3:bf:43:35:aa:09:88:80:20:c6:
f9:13:91:aa:e2:a9:e2:5f:cf:2b:05:01:e4:8e:b0:39:34:83:
72:17:ef:bd:78:2c:20:06:d6:7c:f3:e2:0c:ca:29:ee:18:46:
fd:cf:a9:18:7e:ab:5b:d7:ce:1b:1e:0a:6a:ef:ee:b0:91:bd:
86:e3:76:c2:9d:d7:92:19:9f:91:ab:08:97:2f:2e:e0:74:79:
6c:1a:84:88:0d:bb:81:25:5c:85:52:34:bd:3e:30:0b:74:e1:
bc:ed:2d:a8:6b:f7:c4:d8:23:d3:3c:93:b8:65:95:b5:f8:46:
42:01:1b:29:1d:42:85:40:be:86:ba:9d:aa:83:03:0d:67:c6:
b1:38:03:a5:e9:e0:f6:80:1f:cc:8a:bd:d8:b7:b1:33:31:8b:
52:54:38:b3:39:3c:b4:79:0d:a3:97:49:d4:99:75:37:fb:a2:
12:ca:6f:89:c6:0f:05:c8:f4:13:e7:6d:e4:e3:84:dc:4d:de:
8d:ed:ac:65:32:e5:1b:47:33:8b:13:06:8e:7f:d5:a3:3f:bd:
47:e0:f0:a8:c6:86:bd:f3:d8:11:05:df:26:bd:5e:9f:ff:42:
3b:46:a3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:34 2025 by rpki-client