Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
File: czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft (raw, json)
Hash identifier: 8PE6cEsMN3DunD3ZjjTUTVXmO95mTsJY+9OI7XkwB9w=
Subject key identifier: 24:78:B5:26:D8:DD:73:40:76:ED:AF:0B:1D:EF:0C:E9:C5:A1:0F:ED
Authority key identifier: 73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE
Certificate issuer: /CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
Certificate serial: 0198D5157C01A81EB5E44AA059B1050D3D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
Manifest number: 159F
Signing time: Sat 23 Aug 2025 04:00:11 +0000
Manifest this update: Sat 23 Aug 2025 04:00:11 +0000
Manifest next update: Sun 24 Aug 2025 04:00:11 +0000
Files and hashes: 1: czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl (hash: V/IGfpeGSlXAmk3HDabsdHW1FI1wMrjfTqXfnloyuIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:7c:01:a8:1e:b5:e4:4a:a0:59:b1:05:0d:3d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
Validity
Not Before: Aug 23 04:00:11 2025 GMT
Not After : Aug 24 04:00:11 2025 GMT
Subject: CN=2478b526d8dd734076edaf0b1def0ce9c5a10fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:30:73:b9:53:f8:ae:3f:f2:e8:8c:6d:8d:e9:
38:d4:d5:9b:fc:31:0f:eb:6c:c6:c6:4a:41:7b:7b:
dd:a2:5a:5f:d8:69:60:af:0e:76:b2:8a:fa:ad:4a:
3d:37:77:00:f0:ea:71:85:f4:3d:60:9f:2c:d5:04:
90:95:ad:4f:74:00:01:f4:04:2f:25:2c:0c:00:07:
db:1f:da:a3:03:bf:bf:05:4c:e6:ef:f9:44:23:73:
6e:0d:ef:ba:4c:27:fb:48:5d:19:0d:90:4b:bc:c0:
27:45:cf:f8:25:73:b7:06:ea:b5:5b:04:fc:d4:bc:
8a:65:62:c2:46:46:76:f8:ee:ea:c3:96:65:34:70:
fd:53:a3:91:60:ac:99:57:2f:77:c8:58:be:e6:29:
d7:a7:a1:ad:61:92:0f:b9:8a:59:c9:ff:db:ad:13:
73:d9:c7:78:75:c2:1a:4d:a1:72:f9:d2:f8:e5:f7:
1f:5c:88:53:60:9f:18:77:0b:b7:32:84:32:27:52:
34:42:59:51:3d:c7:d3:62:09:ed:45:1f:76:a8:69:
4f:a6:4a:fa:65:9a:97:34:75:f2:85:a6:18:8b:3e:
9c:ef:83:2f:66:6a:0f:8b:32:06:6c:64:9f:c8:f7:
3d:87:ab:f8:b6:d0:b7:9d:de:39:a1:3c:94:4b:98:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:78:B5:26:D8:DD:73:40:76:ED:AF:0B:1D:EF:0C:E9:C5:A1:0F:ED
X509v3 Authority Key Identifier:
keyid:73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:48:a7:66:73:ea:6f:d0:30:43:6c:2a:dd:a2:a1:f2:fb:c5:
7e:de:bb:fd:ab:0c:68:70:cd:fe:79:f1:61:37:2d:c1:0d:4b:
3c:a5:4a:23:9e:4f:a1:57:85:95:83:47:2d:d2:d9:88:26:89:
ed:5c:7f:3f:4e:6e:c5:19:ab:ff:11:dc:b8:7d:3c:26:b7:b4:
c5:c7:41:72:97:eb:bd:ad:a9:86:52:59:5a:77:2d:8a:0e:c6:
a8:04:96:86:41:48:ae:29:03:55:a9:9a:5d:95:49:0c:3a:42:
5c:77:30:5f:e7:a8:44:2a:6c:2c:e5:0f:a3:a0:4e:88:f8:b4:
77:c9:81:79:ff:62:62:83:9e:30:b2:ef:ab:27:b4:36:45:91:
11:bf:f0:92:88:6b:7c:ad:3c:db:df:07:9c:cf:3d:3e:12:73:
2e:7a:e0:c4:1e:a6:01:e2:27:c8:73:0f:8f:9a:05:75:19:26:
61:b0:0e:49:4a:a4:e0:4a:71:84:25:a4:ad:b5:81:bb:88:30:
e4:63:92:c0:de:be:73:87:9c:4a:c1:6d:f0:ed:1f:9d:81:0e:
44:a6:3e:b3:85:79:80:24:ea:74:c5:2f:dd:b3:f4:e6:63:98:
40:de:12:14:fc:5f:a9:fb:4a:1f:7c:17:82:53:a4:67:6a:1d:
ef:98:c8:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFXwBqB615EqgWbEFDT0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczM2MwMWZjNmJkZmViMDkwZDU3MzJjODcyZWVkYTUzY2I0
MjFhYmUwHhcNMjUwODIzMDQwMDExWhcNMjUwODI0MDQwMDExWjAzMTEwLwYDVQQD
EygyNDc4YjUyNmQ4ZGQ3MzQwNzZlZGFmMGIxZGVmMGNlOWM1YTEwZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDBzuVP4rj/y6Ixtjek41NWb/DEP
62zGxkpBe3vdolpf2Glgrw52sor6rUo9N3cA8OpxhfQ9YJ8s1QSQla1PdAAB9AQv
JSwMAAfbH9qjA7+/BUzm7/lEI3NuDe+6TCf7SF0ZDZBLvMAnRc/4JXO3Buq1WwT8
1LyKZWLCRkZ2+O7qw5ZlNHD9U6ORYKyZVy93yFi+5inXp6GtYZIPuYpZyf/brRNz
2cd4dcIaTaFy+dL45fcfXIhTYJ8Ydwu3MoQyJ1I0QllRPcfTYgntRR92qGlPpkr6
ZZqXNHXyhaYYiz6c74MvZmoPizIGbGSfyPc9h6v4ttC3nd45oTyUS5jH6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCR4tSbY3XNAdu2vCx3vDOnFoQ/tMB8GA1UdIwQY
MBaAFHM8Afxr3+sJDVcyyHLu2lPLQhq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3p3Ql9HdmY2d2tOVnpMSWN1N2FVOHRDR3I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yOTIxMTEtYzQ1YS00ZjVhLTgxNmQt
NWEzYWJmZjIxNWNlLzEvY3p3Ql9HdmY2d2tOVnpMSWN1N2FVOHRDR3I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8yOTIxMTEtYzQ1YS00ZjVhLTgxNmQtNWEzYWJmZjIxNWNl
LzEvY3p3Ql9HdmY2d2tOVnpMSWN1N2FVOHRDR3I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkinZnPq
b9AwQ2wq3aKh8vvFft67/asMaHDN/nnxYTctwQ1LPKVKI55PoVeFlYNHLdLZiCaJ
7Vx/P05uxRmr/xHcuH08Jre0xcdBcpfrva2phlJZWnctig7GqASWhkFIrikDVama
XZVJDDpCXHcwX+eoRCpsLOUPo6BOiPi0d8mBef9iYoOeMLLvqye0NkWREb/wkohr
fK08298HnM89PhJzLnrgxB6mAeInyHMPj5oFdRkmYbAOSUqk4EpxhCWkrbWBu4gw
5GOSwN6+c4ecSsFt8O0fnYEORKY+s4V5gCTqdMUv3bP05mOYQN4SFPxfqftKH3wX
glOkZ2od75jInw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:57:20 2025 by rpki-client