Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: fQIDOSPPTXuqCcth43ngwtclEcJzI1KUJqTJYd4YSJQ=
Subject key identifier: 84:61:47:F8:B7:14:29:32:89:11:A7:BE:BD:DE:7C:DC:6F:DC:ED:1A
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 0198D5836FCDD5BBBCC5F74E45FC23657957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 1286
Signing time: Sat 23 Aug 2025 06:00:17 +0000
Manifest this update: Sat 23 Aug 2025 06:00:17 +0000
Manifest next update: Sun 24 Aug 2025 06:00:17 +0000
Files and hashes: 1: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: KIsqghdps7/hr7agdQctmU1fpccb7fCc8Q61rEInxcU=)
2: c_W11dB19ZdeKd0Hkukk0DBHzss.roa (hash: IfJHrCf86EMC8/UaqV8PdsGmuBe2nBvxRntFhIs50zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:6f:cd:d5:bb:bc:c5:f7:4e:45:fc:23:65:79:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Aug 23 06:00:17 2025 GMT
Not After : Aug 24 06:00:17 2025 GMT
Subject: CN=846147f8b71429328911a7bebdde7cdc6fdced1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2c:f3:ba:12:98:ae:88:ca:db:13:66:55:d0:
83:e3:7a:de:15:1e:4f:4e:22:43:64:a0:97:bc:f6:
d7:16:67:a8:02:eb:5a:cd:44:a5:58:3d:fc:c4:8a:
5d:31:5f:72:f8:95:f2:d6:da:28:84:ac:87:0e:4d:
1a:73:47:be:b5:68:a0:78:ef:90:aa:6e:32:1c:fd:
be:47:ed:09:87:74:ef:96:5f:65:10:80:f0:e3:42:
0a:42:28:3f:a6:5c:cd:73:b6:04:78:16:57:b0:8a:
4d:86:1a:dd:a0:c6:d3:5b:84:f9:53:22:08:ba:e7:
83:be:a9:dd:20:b6:22:c5:30:93:ff:52:5e:36:c5:
dc:da:96:4f:26:97:a4:80:2c:f9:c5:74:c4:e0:c4:
8b:d0:c2:86:b4:0d:e7:f2:09:61:95:59:24:70:22:
8e:41:61:fa:31:c4:69:7c:d6:48:71:de:47:d2:49:
0d:2b:9d:ad:ed:be:59:5f:15:5e:04:7b:c7:2e:a6:
0a:d3:64:da:d3:c0:8a:ec:df:b6:39:f3:ee:3b:0a:
bb:dc:2b:ff:0e:da:13:fe:c6:2f:e7:88:9b:14:91:
42:36:15:c7:47:9d:09:3f:0d:1d:48:31:28:d2:b6:
d1:3c:23:d9:1d:42:00:91:c3:6c:8e:02:18:9f:9e:
a7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:61:47:F8:B7:14:29:32:89:11:A7:BE:BD:DE:7C:DC:6F:DC:ED:1A
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c6:d7:9c:e6:43:37:49:4f:f3:61:8d:63:49:bc:f2:09:6d:
b6:64:69:10:97:9c:7f:31:43:87:8d:de:50:c2:d4:7b:f1:77:
38:6c:cd:2f:0b:21:87:7a:1e:cd:0c:3b:e3:93:e2:db:5a:20:
34:15:41:15:72:35:d9:8f:7a:76:55:c8:26:0d:18:33:04:3a:
79:93:f2:a5:92:d9:04:87:82:a1:7c:48:a2:19:e8:f1:df:65:
82:95:71:49:b2:78:09:55:48:71:1d:9d:91:4f:5c:90:45:e3:
22:f3:d0:3e:50:d4:ba:9f:90:5e:7f:a2:15:09:7c:b8:e5:15:
37:e0:10:8c:72:f3:b8:b9:0e:f4:6b:f4:02:d2:4d:1a:07:04:
4f:35:1b:08:ba:02:8d:b5:44:b6:ef:65:1b:04:a7:39:5e:68:
72:fa:0e:27:59:c4:dc:d8:c7:1b:d1:b9:fc:ca:ea:96:2a:45:
16:de:34:a4:9e:e4:a5:71:7d:8f:d9:15:f0:03:5e:77:bf:c4:
e2:8f:1c:50:b2:11:2b:e2:8b:03:7c:ab:5d:bf:fc:07:af:23:
ec:9c:c9:fa:f8:fb:7b:42:37:f8:f5:ab:1c:76:43:aa:1a:b0:
83:62:f3:e8:21:83:e7:7c:88:0b:02:26:c8:55:67:96:e7:d5:
c4:57:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:44:58 2025 by rpki-client