Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: BW4tfyoabkLJyI+FTTQJvzyJfb5tYrnReRVCqz0AtSY=
Subject key identifier: CD:65:87:FB:28:12:7F:DF:45:F7:9A:47:E3:AC:67:01:82:93:AA:3F
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 0198D5BC461DFE678AD46F6F3F7BEA5BA339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:02:22 +0000
Manifest this update: Sat 23 Aug 2025 07:02:22 +0000
Manifest next update: Sun 24 Aug 2025 07:02:22 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: gXKVRfMUgbT3Z3YSj2Ch6KfU93rvq+JU9/J1VdXnw/Q=)
2: lhGz6B59KeMcscLlwP8SPnbuK40.roa (hash: XdPOOZD1AAjAW5oJyg1981KU15FOvGUGVn6k+W8CmHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:46:1d:fe:67:8a:d4:6f:6f:3f:7b:ea:5b:a3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Aug 23 07:02:22 2025 GMT
Not After : Aug 24 07:02:22 2025 GMT
Subject: CN=cd6587fb28127fdf45f79a47e3ac67018293aa3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:95:67:84:7b:24:63:aa:de:87:bf:9f:49:
d5:56:26:0f:dd:c9:7f:df:0c:2e:51:f1:3b:d0:00:
36:5f:93:1e:26:e9:9f:f8:34:75:01:d0:51:cb:a1:
a0:79:20:38:16:a1:34:d7:56:ff:c8:5a:28:2c:4a:
03:0a:0c:01:c0:6d:78:3f:a2:89:d4:52:03:93:b1:
1a:48:c1:d1:42:33:0e:f3:d0:a8:6e:e1:f9:c6:fa:
a0:12:a4:ae:ce:2e:ef:19:b5:c0:0a:a9:4c:2c:e8:
27:3f:14:38:11:b4:2a:ca:a8:74:40:5a:84:ac:3c:
78:a2:28:75:7a:35:67:e6:0b:2c:b8:d8:f8:76:98:
fe:f9:5e:55:2c:eb:c6:08:0e:d0:4c:6d:b7:c3:1a:
d0:fe:2b:6b:5d:46:af:1c:51:da:44:e5:f5:58:36:
4c:f4:fa:33:77:d6:e7:31:ef:93:63:fa:81:03:90:
70:a0:e9:9a:4b:be:2d:30:0f:f7:f0:92:50:7b:77:
67:47:c8:d2:42:86:d4:c1:f3:39:37:5b:00:6a:c1:
00:dd:7c:e1:93:1a:02:fc:ca:bd:f4:2d:58:6d:17:
8e:11:a7:c2:ea:89:5f:a5:23:48:d7:b3:72:39:f9:
76:a9:0e:6e:c4:ad:b1:9c:53:83:c9:55:7a:01:80:
20:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:65:87:FB:28:12:7F:DF:45:F7:9A:47:E3:AC:67:01:82:93:AA:3F
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:aa:a4:b9:d7:50:63:ec:79:b5:f0:bf:10:8b:c9:61:86:bf:
08:29:83:1b:45:7e:73:83:85:f7:3f:a6:20:f0:51:63:6f:e6:
2b:6d:bc:49:e0:59:b8:fd:fd:1a:29:fe:05:e1:84:a3:c6:6d:
f3:d3:d3:0e:70:a4:1e:0c:ef:59:88:cd:85:30:62:9d:53:bb:
b4:78:1d:b4:37:bb:37:76:84:03:99:57:ad:c3:d2:ac:59:27:
4c:a1:e9:d2:41:02:ac:fd:18:0f:25:1e:cb:a3:c1:38:a9:73:
e4:f9:43:c6:8f:2f:08:94:84:92:92:fb:31:1d:3d:1a:3a:9d:
bf:bf:3e:3d:e8:e3:f0:41:43:99:39:d6:50:fb:df:a9:1d:f2:
55:03:c6:1f:df:cd:59:d3:d9:fc:21:1f:86:92:4e:43:33:d6:
dd:29:8a:62:7c:27:b3:37:43:ec:bd:16:dc:63:d4:9b:e5:f1:
c0:5f:f9:08:6a:eb:76:c2:01:da:9b:3e:d8:3d:bf:e8:fd:1c:
e3:09:1a:57:2e:49:75:1e:5c:8d:03:61:74:81:30:b1:e3:2e:
af:28:2f:0d:4b:4a:cb:e5:60:0e:f0:13:df:dc:41:fc:6f:d9:
62:bb:c9:be:15:5f:13:73:e1:d8:76:c9:18:d5:c5:a1:e8:b4:
44:95:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:45:52 2025 by rpki-client