Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
File: crjVM-JRm2ityzt741m5M1fiscs.mft (raw, json)
Hash identifier: rgJURxSY9Q8GgTd1odWd6P/FPKt8MQi+cQPW6bn9oaU=
Subject key identifier: B6:EA:67:B2:C6:E0:4C:FA:14:FA:7A:54:9B:DC:54:A1:FB:79:7B:58
Authority key identifier: 72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
Certificate issuer: /CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Certificate serial: 019676B15306EC114279ABDE15FBB5C4BBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 10:00:54 +0000
Manifest this update: Sun 27 Apr 2025 10:00:54 +0000
Manifest next update: Mon 28 Apr 2025 10:00:54 +0000
Files and hashes: 1: JmXCpQWdSoFCP6yn-CKJyKpMmAM.roa (hash: Yy6MwGTUuS17SwLg+SYCwv3ZIWFTtcSoLxcVcFhPV/Q=)
2: crjVM-JRm2ityzt741m5M1fiscs.crl (hash: RFfsLfq4zQgLvjYNzjHVFd8HRBhhO9h/0q5oLc3xXzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:53:06:ec:11:42:79:ab:de:15:fb:b5:c4:bb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b8d533e2519b68adcb3b7be359b93357e2b1cb
Validity
Not Before: Apr 27 10:00:54 2025 GMT
Not After : Apr 28 10:00:54 2025 GMT
Subject: CN=b6ea67b2c6e04cfa14fa7a549bdc54a1fb797b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:52:e8:b1:2b:fa:d6:a0:0b:bd:09:f7:8b:
a0:8d:0b:95:0b:75:5a:bf:17:0a:a9:aa:97:19:96:
3d:28:f1:67:73:81:70:46:04:8e:f3:44:4e:0d:b0:
fd:8a:a0:ac:5d:a8:b3:d3:1d:85:34:0d:83:e2:53:
a3:78:5d:00:d0:c0:fa:e1:e5:15:41:ff:22:01:9a:
67:86:f6:78:89:18:7e:43:8c:7f:9b:53:e2:a0:e0:
39:d0:95:e7:3b:ff:06:c2:dd:6d:30:32:47:a1:19:
c3:73:27:ab:30:ee:d8:a4:ed:db:84:7c:2b:b6:23:
e4:98:b9:e8:15:e2:15:9d:58:86:a1:2e:98:ec:09:
bd:7d:45:3d:0b:35:84:75:12:3c:6c:5d:ca:97:02:
55:6a:e0:4d:30:6f:4c:c7:58:91:76:16:4c:6c:b1:
cc:c3:73:92:84:28:ba:d7:d6:e5:60:51:b8:a4:f6:
4f:62:c1:2c:5a:9e:e0:ec:8f:d8:c9:76:79:bb:0d:
b3:cd:92:83:17:8d:47:eb:0c:d6:2b:29:25:51:24:
33:03:0e:a3:53:66:40:3b:9c:50:f8:3e:6c:cd:97:
27:88:e4:f7:22:bd:1f:72:f3:aa:c8:77:05:60:86:
0e:ee:18:e2:47:75:c9:70:93:81:76:4c:b2:ef:93:
40:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EA:67:B2:C6:E0:4C:FA:14:FA:7A:54:9B:DC:54:A1:FB:79:7B:58
X509v3 Authority Key Identifier:
keyid:72:B8:D5:33:E2:51:9B:68:AD:CB:3B:7B:E3:59:B9:33:57:E2:B1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crjVM-JRm2ityzt741m5M1fiscs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720720-27b7-45ca-a9c8-e15bd79c39c3/1/crjVM-JRm2ityzt741m5M1fiscs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f7:8f:1d:9a:f5:a4:3b:94:93:d9:c6:ea:f5:78:63:a2:dc:
ab:e4:40:76:eb:1b:c2:33:5c:5e:1b:65:41:e6:c7:56:da:90:
0f:8d:e4:59:72:d3:39:b3:55:f8:0c:f0:5e:cf:b4:4c:09:d5:
5e:bf:99:32:22:bf:f1:60:75:c5:ee:b1:54:24:f2:85:4b:dd:
0c:a1:de:3e:3a:45:24:09:92:69:53:1f:a6:ce:39:99:5b:80:
96:df:5b:ee:b6:4f:1f:f0:cf:2e:a8:28:07:1c:14:3c:16:ba:
68:7c:8a:d3:44:6a:14:26:97:e7:98:f0:4b:09:11:8e:11:dc:
52:43:25:bd:3c:82:33:36:c1:6d:31:a3:be:18:c4:13:ee:36:
a9:94:01:c8:8a:90:27:e3:f1:5d:f6:af:35:6e:70:67:c9:87:
a7:3c:e4:f9:c4:16:82:9a:f3:5d:46:45:e9:09:3f:aa:b0:b5:
5f:cd:18:38:ad:b3:6e:ac:6b:a9:4f:20:a4:e8:da:5c:ee:6e:
79:19:63:f2:a7:05:ad:67:32:1e:64:f8:56:5a:51:39:a5:af:
01:ee:e9:0d:42:8f:26:25:c0:63:ad:74:03:6e:6c:bf:29:5d:
7a:07:ca:38:19:2d:30:f9:5e:6c:df:32:8e:43:9d:84:70:2c:
ff:2b:70:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2sVMG7BFCeaveFfu1xLuiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjhkNTMzZTI1MTliNjhhZGNiM2I3YmUzNTliOTMzNTdl
MmIxY2IwHhcNMjUwNDI3MTAwMDU0WhcNMjUwNDI4MTAwMDU0WjAzMTEwLwYDVQQD
EyhiNmVhNjdiMmM2ZTA0Y2ZhMTRmYTdhNTQ5YmRjNTRhMWZiNzk3YjU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZBS6LEr+tagC70J94ugjQuVC3Va
vxcKqaqXGZY9KPFnc4FwRgSO80RODbD9iqCsXaiz0x2FNA2D4lOjeF0A0MD64eUV
Qf8iAZpnhvZ4iRh+Q4x/m1PioOA50JXnO/8Gwt1tMDJHoRnDcyerMO7YpO3bhHwr
tiPkmLnoFeIVnViGoS6Y7Am9fUU9CzWEdRI8bF3KlwJVauBNMG9Mx1iRdhZMbLHM
w3OShCi619blYFG4pPZPYsEsWp7g7I/YyXZ5uw2zzZKDF41H6wzWKyklUSQzAw6j
U2ZAO5xQ+D5szZcniOT3Ir0fcvOqyHcFYIYO7hjiR3XJcJOBdkyy75NAFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbqZ7LG4Ez6FPp6VJvcVKH7eXtYMB8GA1UdIwQY
MBaAFHK41TPiUZtorcs7e+NZuTNX4rHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JqVk0tSlJtMml0eXp0NzQxbTVNMWZpc2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83MjA3MjAtMjdiNy00NWNhLWE5Yzgt
ZTE1YmQ3OWMzOWMzLzEvY3JqVk0tSlJtMml0eXp0NzQxbTVNMWZpc2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83MjA3MjAtMjdiNy00NWNhLWE5YzgtZTE1YmQ3OWMzOWMz
LzEvY3JqVk0tSlJtMml0eXp0NzQxbTVNMWZpc2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPePHZr1
pDuUk9nG6vV4Y6Lcq+RAdusbwjNcXhtlQebHVtqQD43kWXLTObNV+AzwXs+0TAnV
Xr+ZMiK/8WB1xe6xVCTyhUvdDKHePjpFJAmSaVMfps45mVuAlt9b7rZPH/DPLqgo
BxwUPBa6aHyK00RqFCaX55jwSwkRjhHcUkMlvTyCMzbBbTGjvhjEE+42qZQByIqQ
J+PxXfavNW5wZ8mHpzzk+cQWgprzXUZF6Qk/qrC1X80YOK2zbqxrqU8gpOjaXO5u
eRlj8qcFrWcyHmT4VlpROaWvAe7pDUKPJiXAY610A25svyldegfKOBktMPlebN8y
jkOdhHAs/ytwIw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 12:57:04 2025 by rpki-client