Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier: WFF1GmsbxOKvRI7AkyxiUxNWqC1pcGOBN10OdT65+9M=
Subject key identifier: 5D:C2:51:77:6C:9F:D7:3E:84:C2:59:42:35:7C:54:5C:54:43:DE:A6
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: 0196767A04A7A3F8775E4806B48335FF1179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number: 0DF9
Signing time: Sun 27 Apr 2025 09:00:30 +0000
Manifest this update: Sun 27 Apr 2025 09:00:30 +0000
Manifest next update: Mon 28 Apr 2025 09:00:30 +0000
Files and hashes: 1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: U283yCjgFQezyB5Lh8Dy6GcuEu1e5+/3dJ+57+ucbwM=)
2: DNwk8XqqsVx_0XVNBxGEv9s46iw.roa (hash: o1R3IO/6fSn30zcJzkwKmtL71+61TdQ+fmzf6z93EPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:04:a7:a3:f8:77:5e:48:06:b4:83:35:ff:11:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Apr 27 09:00:30 2025 GMT
Not After : Apr 28 09:00:30 2025 GMT
Subject: CN=5dc251776c9fd73e84c25942357c545c5443dea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:fd:6a:7f:19:d1:ec:0e:17:c8:73:a2:03:
36:2c:57:43:19:5f:be:f6:5d:66:12:b5:a6:a7:75:
4b:4b:d9:6f:74:aa:22:62:47:77:ea:53:1a:9b:33:
3c:64:0d:7a:6d:02:89:01:3f:c3:fb:76:59:ba:51:
e4:1c:93:49:eb:44:c1:87:05:c7:27:6c:a5:d3:40:
84:29:63:26:c8:f7:79:15:11:d1:4a:6d:45:82:cc:
ef:ac:f2:0b:6a:fc:64:df:b8:39:5b:84:64:a8:e5:
32:9b:0e:11:24:91:43:ae:c4:93:87:84:dc:b0:a4:
75:05:c1:3b:48:d8:f4:b7:8f:00:c4:86:7d:05:54:
5f:cf:04:59:47:fc:10:19:1b:ca:38:89:55:fa:70:
e0:2a:e4:2f:01:9f:6b:9a:6e:64:91:47:ab:a7:df:
fd:94:d3:99:5e:21:1d:06:65:f1:52:6f:a4:b0:cb:
eb:be:ed:45:e9:c1:db:6f:76:18:4a:e2:55:1a:57:
33:38:1a:1b:9f:ee:ec:27:7b:07:c1:4d:4b:0c:65:
95:a4:48:19:88:05:15:c3:c5:bf:97:ce:e0:b8:9a:
d8:2b:cc:4b:19:2b:5d:84:a6:ca:f1:91:36:86:ca:
a5:45:08:d3:f4:f5:e1:6e:aa:87:07:79:ba:50:cc:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C2:51:77:6C:9F:D7:3E:84:C2:59:42:35:7C:54:5C:54:43:DE:A6
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6c:fc:5a:ed:35:a1:dc:26:b2:89:b6:85:3d:f9:21:b4:ac:
e9:c2:94:d6:49:5d:40:fc:35:eb:4d:2e:0c:de:dc:2c:85:88:
06:97:79:d9:04:ab:99:81:9b:5b:18:97:1c:5a:cc:80:42:b3:
05:4a:96:d7:e2:6a:25:b1:ed:7b:83:2d:03:ff:cb:77:f9:5d:
0d:fd:26:b7:1c:9d:b0:e3:de:54:35:2c:d0:27:70:4b:67:d2:
7d:ca:f9:d3:f6:e9:8d:a5:a8:b4:01:1c:55:e1:01:01:80:d4:
ac:10:98:59:b3:ad:b5:e1:6e:b3:eb:a2:75:fd:3a:43:04:69:
e0:63:de:41:6c:5a:ef:cf:a7:6a:cf:37:1d:6a:7d:e9:f2:bf:
4a:88:54:c2:76:f6:4c:04:97:8e:ab:c3:4f:e3:7b:47:1d:66:
01:fc:42:05:94:d8:db:d7:62:69:40:c7:54:e1:00:d0:a7:84:
53:79:57:a5:82:ca:2c:5e:d4:0a:77:a7:ce:72:ee:26:f6:bd:
ee:5a:ef:eb:94:aa:c3:7a:41:c0:80:fb:c4:08:07:01:b9:f2:
40:39:3a:bb:cc:2b:75:c6:29:75:10:59:3e:b1:06:b1:1d:22:
9b:10:0c:a8:54:93:b6:2f:64:5f:21:fb:7a:e8:a9:cf:8f:f3:
4b:58:0f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:11:05 2025 by rpki-client