Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: Gmid9M2KUI1kyp/H8pLpyCn04YGtOGdmq503o5EQEK8=
Subject key identifier: EE:A7:B0:05:3C:5E:3A:E8:34:6C:C1:7E:81:1D:47:B0:17:19:11:1B
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 0199FD343399A62F922129AA785F54FDD77E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:20 +0000
Manifest this update: Sun 19 Oct 2025 16:01:20 +0000
Manifest next update: Mon 20 Oct 2025 16:01:20 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: B+Orn94kdv2kEWeMYmrGClQdw/rn4Fk/wqPobP7hq7E=)
2: lhGz6B59KeMcscLlwP8SPnbuK40.roa (hash: XdPOOZD1AAjAW5oJyg1981KU15FOvGUGVn6k+W8CmHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:33:99:a6:2f:92:21:29:aa:78:5f:54:fd:d7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Oct 19 16:01:20 2025 GMT
Not After : Oct 20 16:01:20 2025 GMT
Subject: CN=eea7b0053c5e3ae8346cc17e811d47b01719111b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e8:00:46:88:c7:84:21:82:d3:bc:29:92:5e:
95:e8:17:04:c3:fb:84:1d:65:cf:e5:62:e4:cb:c6:
4d:ff:ea:5c:e1:ce:58:a7:47:35:fa:3b:f5:53:6b:
1d:92:6a:6e:a7:c4:ef:96:7f:06:11:a4:be:6f:66:
81:22:5d:84:17:6b:c9:33:41:7f:44:74:46:dd:f6:
e4:73:52:26:0d:f2:6d:90:5c:e2:c6:93:44:ba:96:
53:ee:b7:b1:f4:54:df:6a:b3:33:f0:82:31:48:4c:
2d:81:3b:db:df:55:df:be:cf:ba:8f:7e:ed:66:4d:
f1:57:30:46:f3:82:1f:7f:07:16:41:5f:24:7c:45:
d4:5b:29:e7:01:77:a2:bf:73:ad:52:2d:ca:83:98:
51:6a:5e:fb:54:70:73:a8:b2:6a:7b:4d:34:43:f3:
11:c2:04:82:54:f8:df:cd:2c:4e:6a:15:1a:ec:67:
34:dc:82:52:4e:4a:74:98:b5:fb:49:20:9c:73:fc:
72:72:53:f5:fb:00:16:c5:79:90:97:61:27:1c:af:
c4:09:9c:30:04:85:c3:fa:04:3f:3a:13:fc:01:68:
f6:25:eb:96:90:62:42:0b:13:b0:6a:49:88:11:32:
05:62:b0:de:96:9e:96:3b:e0:ce:ba:41:4b:7e:f3:
7f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A7:B0:05:3C:5E:3A:E8:34:6C:C1:7E:81:1D:47:B0:17:19:11:1B
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:24:d2:18:e6:7d:dc:70:72:c2:76:a5:9c:54:cb:b4:48:a7:
4c:60:59:7b:d1:62:f2:07:a2:fe:2c:e9:84:95:01:b2:12:f1:
b1:46:4b:f4:55:4f:71:2a:ad:c4:06:74:10:fc:d2:1b:5b:37:
b6:9b:00:9d:42:dc:0d:1b:71:a4:19:1f:94:2f:b4:cf:01:56:
60:bc:19:e1:d2:dd:28:d1:88:64:c6:47:81:9f:9f:4d:af:c6:
64:35:09:00:e4:3c:dd:a5:bc:3a:40:41:1a:78:d7:95:49:20:
17:9a:63:a3:57:d7:82:2a:68:4e:27:ad:61:d2:96:29:aa:06:
f5:2f:e5:28:d2:1b:8e:c7:4a:78:e1:ff:a5:f9:90:f1:b7:52:
56:0c:23:85:e6:57:00:88:1c:6d:b4:a4:7c:00:d3:91:2e:02:
c5:29:8e:85:3f:bb:49:59:d3:a3:cd:34:46:43:d9:cb:f3:f0:
45:61:b9:66:12:34:82:ea:3d:22:59:96:68:6f:1f:c9:4c:78:
8b:3b:5d:fc:8e:7b:ff:cb:e2:51:c7:d2:14:66:8a:b1:c9:dd:
ae:ec:3d:a6:0f:7b:9b:75:0d:98:e1:68:ed:ae:a8:7b:ca:40:
e3:a2:09:54:11:74:45:4e:5b:77:96:4d:52:7c:49:64:af:64:
38:a8:c6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:58 2025 by rpki-client