Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
File: CZ-qshYRGNsbd8GnTszLc-doHDY.mft (raw, json)
Hash identifier: bdkSTDixKnkiKvQe+Q7IuvwFoDzqDqJRAVYAsqTJ6dU=
Subject key identifier: 83:25:EC:FE:F1:C6:D7:05:F1:CE:59:3A:E9:E1:A2:A7:71:EC:B1:9A
Authority key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
Certificate issuer: /CN=099faab2161118db1b77c1a74ecccb73e7681c36
Certificate serial: 0199FAD8536A1E7314474D5F41F867E3FC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
Manifest number: 0104
Signing time: Sun 19 Oct 2025 05:01:44 +0000
Manifest this update: Sun 19 Oct 2025 05:01:44 +0000
Manifest next update: Mon 20 Oct 2025 05:01:44 +0000
Files and hashes: 1: CZ-qshYRGNsbd8GnTszLc-doHDY.crl (hash: 68aMvYsv7anhTInSuziundLid6aGN1Q0rACoyk45Lg0=)
2: cOJF3c93EdtdcnQUgbiiqTgw_1M.roa (hash: zobvfeY7LZCgjAH4tIKeBPeHEqZ12dFg210JqNHCaCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:53:6a:1e:73:14:47:4d:5f:41:f8:67:e3:fc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099faab2161118db1b77c1a74ecccb73e7681c36
Validity
Not Before: Oct 19 05:01:44 2025 GMT
Not After : Oct 20 05:01:44 2025 GMT
Subject: CN=8325ecfef1c6d705f1ce593ae9e1a2a771ecb19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:21:6b:7c:88:ba:8a:18:cf:37:a3:2c:04:85:
71:06:b5:e9:2b:27:0a:0c:96:d4:08:d4:df:07:83:
9c:a0:45:60:b3:77:9f:eb:d1:46:f4:20:3f:27:81:
ff:25:fc:5c:36:17:53:9f:e7:07:f9:f1:f2:c6:e0:
3e:07:92:f0:b4:33:57:7c:3c:70:f3:f9:a1:c1:07:
cd:3e:15:3f:e7:a5:1d:5c:78:79:7d:b0:6b:e6:5c:
59:55:27:0c:b6:c4:fc:e4:25:20:3f:2f:2a:a5:78:
aa:96:f5:e2:91:6f:09:37:61:25:a7:de:16:bd:16:
93:95:5c:ac:87:b3:e1:a5:ad:7b:95:b6:24:30:13:
3a:2d:64:2d:c6:0e:de:9c:29:bd:87:f6:14:06:89:
74:01:9b:94:91:28:4c:1d:30:2f:14:30:44:74:fc:
4a:f5:4b:97:99:91:c2:6e:fa:46:ec:d3:08:29:a0:
3e:fe:d7:8d:c8:82:85:ac:0b:73:09:0f:e4:ba:8a:
be:62:22:34:76:7a:b2:3f:56:e8:fd:95:96:75:20:
0c:85:b2:2b:56:23:d5:56:56:39:85:75:99:55:ad:
52:47:cb:c9:b5:9b:cd:af:d2:29:fc:c7:6f:8c:f4:
08:df:e6:0b:bf:6b:c5:be:cf:06:5d:00:dd:32:ad:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:25:EC:FE:F1:C6:D7:05:F1:CE:59:3A:E9:E1:A2:A7:71:EC:B1:9A
X509v3 Authority Key Identifier:
keyid:09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:75:fc:5d:74:3c:ce:26:8a:a4:bf:e7:ec:7d:e0:cb:03:eb:
23:6b:31:af:00:02:f1:44:eb:ea:03:ba:4d:b4:e7:23:4d:3d:
5d:4e:96:4e:26:cc:b4:97:45:08:3e:21:77:40:24:17:15:a4:
48:aa:65:6e:9d:ed:9d:5d:5c:f7:53:e3:fe:a5:3c:a1:7d:82:
f6:59:b1:2a:35:f3:3b:b4:2c:71:1a:80:36:74:73:aa:f8:51:
c8:4d:2d:6c:09:7e:94:cc:b6:4f:24:f4:13:ce:d1:ba:a9:50:
1a:0a:30:43:8d:d2:88:ae:14:a7:50:e1:fc:eb:94:44:40:ab:
1f:d1:26:97:95:db:be:03:de:14:37:d3:07:ca:33:14:c9:bf:
1e:84:a5:13:df:be:e0:dd:5e:9d:c0:ae:8e:08:05:84:6c:8c:
70:2e:13:a3:87:7d:17:39:e8:61:49:a1:29:8c:0d:45:eb:fd:
d2:60:25:5f:36:aa:dd:70:cb:5b:c4:45:61:4d:e6:52:7c:49:
44:19:b1:ec:e3:06:6b:b7:ff:de:d8:cd:8f:94:f2:73:74:30:
5c:b6:fe:99:a7:32:8f:d7:0a:ec:68:b5:80:59:ce:50:74:73:
b8:a9:a1:e0:eb:2a:b5:41:3e:4a:53:6e:37:35:71:a6:6f:bd:
16:29:e4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:38 2025 by rpki-client