Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
File: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft (raw, json)
Hash identifier: UOJ3zxdVsuvXNtu+yjP5g3DohTzdY6pmnYShl9nHnaQ=
Subject key identifier: 49:30:29:97:4D:5E:9D:77:52:50:12:AC:67:9F:36:44:69:F6:DC:5C
Authority key identifier: 09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
Certificate issuer: /CN=0910af10067f5301fc8f60848f55b3c33c180f53
Certificate serial: 01976F9A7D1EA824389871D3E8904B65556E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
Manifest number: 0E7A
Signing time: Sat 14 Jun 2025 18:01:24 +0000
Manifest this update: Sat 14 Jun 2025 18:01:24 +0000
Manifest next update: Sun 15 Jun 2025 18:01:24 +0000
Files and hashes: 1: CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl (hash: Wv7pmDIMO111LM1bI98e3l6bEgtArwBbbw/oNxJc0Js=)
2: DNwk8XqqsVx_0XVNBxGEv9s46iw.roa (hash: o1R3IO/6fSn30zcJzkwKmtL71+61TdQ+fmzf6z93EPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:7d:1e:a8:24:38:98:71:d3:e8:90:4b:65:55:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0910af10067f5301fc8f60848f55b3c33c180f53
Validity
Not Before: Jun 14 18:01:24 2025 GMT
Not After : Jun 15 18:01:24 2025 GMT
Subject: CN=493029974d5e9d77525012ac679f364469f6dc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:02:7c:1c:4d:35:a0:3f:90:27:dd:1b:c8:95:
00:49:2e:28:5d:f0:dc:81:a7:3d:20:9b:ce:97:40:
47:4a:73:15:1b:d2:7b:96:4f:d3:1a:15:3e:32:80:
68:6e:70:47:1c:12:97:03:81:d0:f8:49:82:73:89:
48:a5:2b:da:ae:c2:f8:c6:f0:b4:d0:38:a8:01:e6:
3d:a5:1f:dd:e7:2b:2d:e0:6c:f3:82:74:8f:ef:da:
46:f1:d1:64:0e:08:98:26:99:3d:b6:cc:25:e1:c5:
d2:ab:2e:8f:e6:02:97:48:65:46:d2:66:c2:24:ff:
f9:20:5b:08:5a:36:53:b8:4c:4f:7f:42:48:80:4a:
ab:4a:a3:b0:aa:3c:af:bd:69:9e:e4:37:d0:6b:36:
a3:11:a9:36:ff:8c:48:c1:ce:4b:c7:a0:a8:9d:dc:
72:1a:a1:f9:fa:81:4c:56:57:c1:c8:73:58:0a:3b:
0f:2c:d8:58:90:ae:11:26:b3:b4:c3:cb:48:ec:20:
35:5d:e8:b9:2e:da:81:f4:a1:10:0e:3b:17:d8:61:
d0:6e:49:3b:3a:94:d2:5f:1e:18:5e:6b:44:21:04:
fd:30:f3:ff:0e:6f:23:6e:a3:d6:8b:0c:d0:c5:ec:
67:55:43:62:9a:89:2d:27:3e:c2:db:04:36:55:f8:
8f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:30:29:97:4D:5E:9D:77:52:50:12:AC:67:9F:36:44:69:F6:DC:5C
X509v3 Authority Key Identifier:
keyid:09:10:AF:10:06:7F:53:01:FC:8F:60:84:8F:55:B3:C3:3C:18:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/beb070-e129-44b6-a77c-2e7a8a394c45/1/CRCvEAZ_UwH8j2CEj1WzwzwYD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ae:58:ee:0d:c5:16:c3:2d:15:2c:a9:ce:c4:10:77:a1:1c:
a3:1d:74:b0:48:04:08:bd:fb:1f:f0:f3:8a:37:a2:9b:77:77:
dc:46:84:7c:89:15:c7:8a:80:f3:74:77:46:fa:07:cd:08:99:
b7:47:86:d8:8c:ac:d5:72:a1:67:71:a1:46:45:b7:30:82:07:
06:c7:2f:82:da:bd:00:4d:95:f4:e0:5f:bd:f7:35:9e:5a:8f:
62:ff:3e:7c:ad:6d:cd:bd:ce:e6:de:16:1f:04:fe:f6:66:79:
15:07:6e:2d:17:f0:fd:f5:89:a8:b1:ed:ae:9a:7f:41:e7:95:
c4:b4:f2:18:c0:69:a2:53:47:bc:6f:ee:b6:42:60:9d:73:55:
1b:ed:1a:05:68:07:b5:de:53:1a:75:41:21:09:c5:3c:ce:90:
b9:3b:98:a7:2b:e6:e0:e6:9d:29:3e:e7:14:08:10:1e:31:9f:
89:1a:d1:2f:ba:ea:68:77:4c:83:8f:b3:09:b8:37:b0:a3:8b:
54:26:91:ee:78:f1:c9:c0:44:a5:06:81:42:9d:05:ab:a4:5f:
29:5a:97:9d:2f:b5:62:aa:cb:9f:33:df:db:a9:a7:75:b1:8e:
18:3d:6a:da:57:e2:e6:2a:59:d2:e7:af:91:50:95:1e:87:54:
59:b9:cd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:47:56 2025 by rpki-client