Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: 4+LSQidWWwE3CY2/agbjG+SVfLLi0M1p77Vub545aSQ=
Subject key identifier: 7E:15:09:6D:F4:90:9D:D3:F1:06:EC:75:BF:F3:FE:53:15:E1:9A:BD
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 0197B7B302B9439383DD2A7A46930B39D32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 11F2
Signing time: Sat 28 Jun 2025 18:00:51 +0000
Manifest this update: Sat 28 Jun 2025 18:00:51 +0000
Manifest next update: Sun 29 Jun 2025 18:00:51 +0000
Files and hashes: 1: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: PNWbwV++UyoElv03chDtaO4FXwzrRZR3YuJTXp4V2fI=)
2: c_W11dB19ZdeKd0Hkukk0DBHzss.roa (hash: IfJHrCf86EMC8/UaqV8PdsGmuBe2nBvxRntFhIs50zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:02:b9:43:93:83:dd:2a:7a:46:93:0b:39:d3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Jun 28 18:00:51 2025 GMT
Not After : Jun 29 18:00:51 2025 GMT
Subject: CN=7e15096df4909dd3f106ec75bff3fe5315e19abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:dc:74:2b:a6:8c:8a:5d:a6:b5:e1:c7:99:
59:8f:d1:d1:16:31:29:50:06:fe:cf:3d:55:c2:8f:
16:5c:e8:df:d2:8f:ea:59:a0:4a:68:ff:d5:22:28:
fa:29:f0:54:3a:a3:01:43:e4:a3:cf:09:cd:c1:4d:
e1:47:ec:c9:7a:0e:cc:ca:df:d2:38:1e:89:d7:a6:
c4:bf:a4:42:e9:a7:25:3b:3f:36:6b:e8:3a:66:f3:
7f:b6:60:48:e9:fe:e5:3a:6c:21:63:c8:5f:cf:ca:
20:58:ba:aa:3f:04:33:90:ec:30:10:e3:e7:10:6c:
4f:7a:87:3d:50:20:00:dd:69:f4:d7:db:d8:84:62:
77:47:09:90:c3:54:e0:85:50:64:12:db:5c:fe:81:
24:17:a1:33:fa:b2:53:fb:f7:1b:ce:c0:85:f5:32:
84:15:00:d5:af:f2:b7:b5:7c:5c:f1:8f:5a:3f:54:
8f:1a:01:b9:71:10:d0:a4:a9:81:80:ce:cf:49:13:
e7:15:e5:3f:ea:7e:78:51:b1:1f:00:08:ab:2d:b0:
f0:6b:89:d0:b6:77:d9:80:aa:c6:44:f2:40:8f:32:
20:07:20:1c:86:05:e7:fd:9b:01:50:d2:ca:b8:d6:
b1:15:6e:5d:84:6d:c7:1e:f7:0b:39:24:0f:01:b8:
d1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:15:09:6D:F4:90:9D:D3:F1:06:EC:75:BF:F3:FE:53:15:E1:9A:BD
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:11:39:4b:06:73:74:f5:4d:1c:37:8c:5a:7a:1f:0a:d2:48:
88:31:86:23:53:d6:c8:ef:3b:ea:7f:21:24:2a:63:c1:ce:b2:
2a:09:ab:21:0f:86:e7:0e:8d:2f:74:51:dd:83:59:91:97:1b:
36:f5:1f:83:2a:60:36:f6:75:1e:1f:21:66:d5:df:07:4d:34:
c1:54:43:99:19:2f:db:ad:3b:c1:a5:4f:25:84:85:f1:5a:3e:
8a:21:dc:2c:0e:af:f4:2b:d6:d6:be:1b:26:a1:5c:ca:5b:9e:
68:48:50:9d:ea:76:32:57:00:66:f7:a1:b1:3c:93:6e:9c:01:
87:cb:e7:a6:f3:32:2e:55:ff:80:cb:37:79:a5:57:de:d0:a2:
90:10:2b:a6:b0:f2:3d:26:25:fb:34:81:ab:2d:7f:3f:a6:4f:
88:ac:24:bc:57:75:0e:a4:d4:a5:eb:b9:37:72:eb:4a:d0:8a:
35:b8:5b:8d:67:97:c2:94:92:49:00:c0:5e:63:e6:96:80:7e:
07:ba:24:59:41:3f:c1:f8:c4:ec:ec:a8:55:5e:90:c4:bb:f9:
96:b8:22:02:d2:b7:0a:ff:e8:ac:87:90:2d:48:22:73:07:ab:
f9:30:3d:2e:9c:24:ce:c6:5c:25:5d:32:24:92:19:1d:f9:6d:
7c:51:cb:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3swK5Q5OD3Sp6RpMLOdMqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzk2OWNkYzBiNWZmMDlkMTk5YmNhNWRhZGRiOWFhYjUx
MDQwZTcwHhcNMjUwNjI4MTgwMDUxWhcNMjUwNjI5MTgwMDUxWjAzMTEwLwYDVQQD
Eyg3ZTE1MDk2ZGY0OTA5ZGQzZjEwNmVjNzViZmYzZmU1MzE1ZTE5YWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4TcdCumjIpdprXhx5lZj9HRFjEp
UAb+zz1Vwo8WXOjf0o/qWaBKaP/VIij6KfBUOqMBQ+SjzwnNwU3hR+zJeg7Myt/S
OB6J16bEv6RC6aclOz82a+g6ZvN/tmBI6f7lOmwhY8hfz8ogWLqqPwQzkOwwEOPn
EGxPeoc9UCAA3Wn019vYhGJ3RwmQw1TghVBkEttc/oEkF6Ez+rJT+/cbzsCF9TKE
FQDVr/K3tXxc8Y9aP1SPGgG5cRDQpKmBgM7PSRPnFeU/6n54UbEfAAirLbDwa4nQ
tnfZgKrGRPJAjzIgByAchgXn/ZsBUNLKuNaxFW5dhG3HHvcLOSQPAbjRmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4VCW30kJ3T8Qbsdb/z/lMV4Zq9MB8GA1UdIwQY
MBaAFAs5ac3Atf8J0Zm8pdrduaq1EEDnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYt
NmJiNGZlZTg1NzM1LzEvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYtNmJiNGZlZTg1NzM1
LzEvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBE5SwZz
dPVNHDeMWnofCtJIiDGGI1PWyO876n8hJCpjwc6yKgmrIQ+G5w6NL3RR3YNZkZcb
NvUfgypgNvZ1Hh8hZtXfB000wVRDmRkv2607waVPJYSF8Vo+iiHcLA6v9CvW1r4b
JqFcylueaEhQnep2MlcAZvehsTyTbpwBh8vnpvMyLlX/gMs3eaVX3tCikBArprDy
PSYl+zSBqy1/P6ZPiKwkvFd1DqTUpeu5N3LrStCKNbhbjWeXwpSSSQDAXmPmloB+
B7okWUE/wfjE7OyoVV6QxLv5lrgiAtK3Cv/orIeQLUgicwer+TA9LpwkzsZcJV0y
JJIZHfltfFHLdw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:10:43 2025 by rpki-client