Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
File: czmHDhAmLGcJt7YWNxNLX5pseMo.mft (raw, json)
Hash identifier: 6mWUgtv2pMg3eAM/kpcJkh44IWuvOsR72wJr8d+L2G8=
Subject key identifier: 01:8F:04:FA:FD:D1:BC:3B:D4:92:95:C9:EC:BC:17:8E:8A:70:40:22
Authority key identifier: 73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA
Certificate issuer: /CN=7339870e10262c6709b7b61637134b5f9a6c78ca
Certificate serial: 0197B7B2FBA8320A89A4D54D59C534610FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:00:49 +0000
Manifest this update: Sat 28 Jun 2025 18:00:49 +0000
Manifest next update: Sun 29 Jun 2025 18:00:49 +0000
Files and hashes: 1: PXbhZwxgnHhuLjwlWCx5dOlGReg.roa (hash: j01BLIn3vk3ptsAnq3fQBlO6Lv4NALx1Y8dTw8r7J30=)
2: czmHDhAmLGcJt7YWNxNLX5pseMo.crl (hash: bE9aIedriX6L79ColSrIhnA/eUW0r5SOIDMliGrTVt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:fb:a8:32:0a:89:a4:d5:4d:59:c5:34:61:0f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7339870e10262c6709b7b61637134b5f9a6c78ca
Validity
Not Before: Jun 28 18:00:49 2025 GMT
Not After : Jun 29 18:00:49 2025 GMT
Subject: CN=018f04fafdd1bc3bd49295c9ecbc178e8a704022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:71:d7:9e:d2:6e:83:32:94:85:20:f8:33:
fd:5e:a4:e0:63:6d:02:98:ad:6a:9e:1a:d3:58:1a:
f5:14:ca:e9:c5:c6:c2:e3:9c:3d:7c:5f:81:42:39:
24:15:78:00:c7:5b:84:64:64:c0:e7:ab:d8:17:a9:
4e:3f:81:83:d5:22:34:f7:e6:f1:bf:26:77:2b:af:
2b:8b:77:90:51:d7:c7:87:f1:ec:68:37:50:65:7a:
c4:f8:b4:36:61:30:7a:89:44:b5:7e:3f:ff:bd:2c:
6a:94:8e:e0:d6:1f:44:c8:6e:74:a8:e7:3e:33:ee:
7f:8c:62:62:7e:32:c5:92:97:01:ac:69:16:c4:4b:
1f:91:f9:eb:21:c5:80:b5:fb:79:a5:a1:08:22:9f:
f8:f1:59:e4:b1:08:a5:cc:08:89:8d:80:1e:3f:b2:
9e:4d:4e:4c:f2:71:8d:25:9d:e3:21:2e:9a:3a:83:
12:26:db:df:a2:79:1f:63:37:88:73:48:40:de:c5:
6f:9e:ad:b0:52:84:e7:0f:28:31:6f:67:c7:2a:fc:
b9:be:8e:b4:71:f4:65:d0:fd:47:23:b8:f5:da:68:
5b:f4:e2:6f:4f:83:4c:a5:de:4f:f2:3b:4a:04:8f:
73:8f:89:30:02:c4:e4:80:2e:76:ad:d4:10:0f:8d:
96:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8F:04:FA:FD:D1:BC:3B:D4:92:95:C9:EC:BC:17:8E:8A:70:40:22
X509v3 Authority Key Identifier:
keyid:73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d0:be:cf:ee:42:98:c9:a3:9b:c1:30:ae:b4:27:47:6b:a5:
2b:4e:21:cf:62:08:2d:27:b2:ee:78:46:24:cb:c8:11:12:17:
fa:7c:75:68:23:7a:6e:b4:94:16:be:b2:bc:49:7f:e3:b8:d2:
d5:d3:c9:ec:4f:73:df:c8:9a:8e:e5:80:51:30:dd:0b:ca:c5:
f1:53:20:be:2a:d1:9f:25:4a:da:43:cb:66:05:0c:cb:34:ff:
6d:be:7c:72:dc:0f:03:c9:4e:8e:1c:3d:55:99:94:a4:d6:4e:
8e:32:7e:68:cd:97:b9:06:6d:f6:b8:a8:1b:dc:33:08:3d:e6:
46:e2:53:5c:72:87:2e:e7:c4:c5:d9:a0:de:e9:a8:07:f0:2c:
9b:2b:da:8b:e7:d3:9d:99:b8:85:c2:3a:34:13:56:38:d0:39:
a1:45:0b:9c:69:47:52:89:00:4a:d5:9c:dd:bd:fd:21:c9:50:
db:c0:bf:75:be:b5:09:88:6c:2d:a5:d7:51:4a:96:6b:6b:85:
b5:0a:7c:57:94:98:8a:5c:e6:86:e0:ac:1e:b2:4f:e3:94:9f:
0b:4e:5e:f8:99:7e:47:28:19:ed:59:b0:4c:68:3d:f2:84:3b:
e4:b8:09:1f:9a:d0:c6:4f:da:44:47:8a:36:be:55:8f:ec:e4:
87:b7:71:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:43 2025 by rpki-client