Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: JIHQP7zjzBoxJfzOrefF5hO2W4sT1yQeGdMkwr1frqA=
Subject key identifier: AB:53:F0:A4:3F:9B:C8:9B:81:BC:65:C2:CD:27:D9:AA:01:C5:73:18
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 0199FDE0E84658724087D2FF24AB7C4EAC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 1322
Signing time: Sun 19 Oct 2025 19:09:59 +0000
Manifest this update: Sun 19 Oct 2025 19:09:59 +0000
Manifest next update: Mon 20 Oct 2025 19:09:59 +0000
Files and hashes: 1: 4c8--QgXbx8QC_JFp2ao9vSi3cQ.roa (hash: 9rzljFXZsljfliBgRYCkXTC5VYqcqhOIMYMb68KvfKw=)
2: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: w6QvZcQnTsvMVUz8TD3ppBesPpATJsQKM/+5mUF2RxI=)
3: vxv8ENh4EI_tMsSJTaREb1s4HS4.roa (hash: s6edGTCnGf7BmNVSJxjNDIf8u6heNhTcAFkCRw0VThE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:e0:e8:46:58:72:40:87:d2:ff:24:ab:7c:4e:ac:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Oct 19 19:09:59 2025 GMT
Not After : Oct 20 19:09:59 2025 GMT
Subject: CN=ab53f0a43f9bc89b81bc65c2cd27d9aa01c57318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:80:e9:d4:1f:e9:98:a7:2c:b0:62:95:a7:
4d:89:67:23:92:69:bc:90:c8:f8:9d:36:f1:d8:0f:
9d:c1:4c:f5:df:51:94:b8:b3:b8:76:4c:8d:96:d7:
98:2c:a3:2f:dc:01:ac:a9:b8:dc:4d:76:0a:56:4d:
94:5d:5e:9c:40:9a:97:d7:e3:34:24:a3:fe:da:ee:
d8:bb:d0:6d:10:7d:88:1b:41:25:96:42:ac:8f:d6:
44:64:21:b8:5d:f5:90:7d:9d:51:1c:58:14:e4:2a:
28:2e:f3:72:a3:0b:34:3b:b9:da:95:d5:35:41:af:
e4:27:25:37:9d:45:8a:e3:e2:4e:28:66:e3:1c:a7:
b9:b9:be:ba:07:d6:5f:15:4f:67:68:85:3f:0d:11:
db:d3:10:ec:0c:ff:92:57:8c:be:88:c2:06:29:76:
7a:0a:e8:07:b8:28:a1:ea:19:86:29:8f:02:f9:6e:
86:ea:3e:09:0e:3c:01:97:f4:d0:46:bf:f8:e8:7d:
6d:fc:f3:09:0c:45:03:3c:1e:69:c9:eb:4c:61:44:
3f:81:d5:ff:ba:0d:a6:79:f2:99:b4:9c:d0:ad:d4:
09:8e:5c:cf:d1:b0:1e:71:30:69:7d:9c:b2:08:7b:
fe:f7:ff:ac:55:87:7f:1d:93:c6:f7:29:81:f2:88:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:53:F0:A4:3F:9B:C8:9B:81:BC:65:C2:CD:27:D9:AA:01:C5:73:18
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:74:b3:90:e0:5f:50:19:84:f8:e6:0e:04:dc:39:08:39:16:
46:57:b8:b3:ae:46:2e:df:d2:f2:50:44:a9:45:3b:63:f5:bd:
e2:4b:e6:11:90:74:55:e1:13:f9:7f:75:0f:2b:a8:cc:4d:2e:
69:c2:e1:d0:86:9a:7f:9f:1b:79:27:46:c2:c9:db:dd:f0:de:
88:9a:37:bb:1c:f7:8c:10:d7:b6:75:f2:d0:52:41:5c:02:c2:
4c:97:28:e2:b0:a3:c1:3d:0c:5f:1c:23:b7:fd:c4:2d:39:da:
67:be:2b:ba:3e:b7:1e:f9:d1:48:71:19:c5:5b:33:75:ec:61:
33:51:e7:9f:64:31:7c:69:e5:cd:57:e9:6a:60:8e:12:31:cc:
f4:63:30:2b:0f:7c:ba:21:a5:f6:f1:ec:83:c1:34:3e:f8:90:
d1:74:c3:f0:e2:bd:f9:e7:52:3b:7d:1b:c6:55:dd:72:98:46:
18:f6:6f:74:07:f6:e3:f4:93:1b:ae:81:8a:19:15:cb:df:56:
1a:c6:15:2f:cb:e5:8e:1b:fd:c9:73:05:6e:86:3a:b5:b9:8e:
b8:66:df:30:51:05:9a:14:a2:6c:c6:62:74:5c:2f:a8:c9:68:
96:19:84:8f:fd:c4:8e:f3:b3:e5:73:d8:8a:16:2f:b0:9e:7c:
2a:56:fc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:31 2025 by rpki-client