Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
File: czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft (raw, json)
Hash identifier: P8ASIWgBF8yqWtLt0cWSgGxfcUFE1EmIf1ZEsIZ6v4Q=
Subject key identifier: 8D:04:77:E9:3F:63:93:7B:70:9D:C4:B0:D9:C1:AC:9F:3C:B2:33:68
Authority key identifier: 73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE
Certificate issuer: /CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
Certificate serial: 0199FC8F644B01E92BF0E670F5D109E3F23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
Manifest number: 1638
Signing time: Sun 19 Oct 2025 13:01:19 +0000
Manifest this update: Sun 19 Oct 2025 13:01:19 +0000
Manifest next update: Mon 20 Oct 2025 13:01:19 +0000
Files and hashes: 1: czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl (hash: 0v1TOxp30Ug08TdQDEq2XwcfOsSb5odsJ0fFAvHgBEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:64:4b:01:e9:2b:f0:e6:70:f5:d1:09:e3:f2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
Validity
Not Before: Oct 19 13:01:19 2025 GMT
Not After : Oct 20 13:01:19 2025 GMT
Subject: CN=8d0477e93f63937b709dc4b0d9c1ac9f3cb23368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:91:a9:87:7a:27:fc:70:b4:bc:d5:79:10:
58:33:84:09:23:e7:3f:a1:65:7b:53:5b:39:ab:9f:
2b:66:c9:58:c9:a0:52:b2:26:01:7f:d8:f8:4f:c0:
11:92:b6:65:e5:1f:1a:41:16:64:1f:79:6e:73:22:
db:25:6e:01:58:f2:8f:99:8b:1b:2a:ac:60:3c:b3:
78:6f:30:0c:f7:04:6f:cf:76:89:20:69:23:ca:be:
f0:8c:fe:78:5f:40:20:62:fc:6c:07:03:a0:8d:2b:
f4:fd:da:ca:01:5f:26:1f:fe:ea:ad:33:0b:8a:0e:
b7:33:c4:b5:c7:75:fb:78:1e:f2:25:dd:d2:a8:bd:
36:d1:6c:bb:0f:2c:57:da:f1:68:59:2e:0e:db:f5:
1f:a9:5d:72:df:4a:d1:0e:47:9b:87:5b:b1:f2:5c:
de:39:7d:87:4a:51:21:cc:19:ac:48:0d:d7:3b:83:
3d:40:56:d1:54:33:c2:fe:f2:36:77:69:94:22:64:
b7:c8:0c:cb:b5:91:63:55:e4:6d:f4:6f:ae:6f:e3:
15:1d:d0:76:1e:97:38:40:c8:f6:28:47:cb:7c:9a:
0a:28:c4:8a:e6:b3:a9:20:cc:47:c9:01:fe:90:3c:
5b:88:e6:f5:15:60:49:57:7d:48:fe:e5:29:35:fd:
58:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:04:77:E9:3F:63:93:7B:70:9D:C4:B0:D9:C1:AC:9F:3C:B2:33:68
X509v3 Authority Key Identifier:
keyid:73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6e:ae:72:16:af:d1:b5:62:2c:5a:cc:5d:50:46:3e:7b:96:
08:f9:76:78:f9:62:6a:6c:49:ef:38:81:04:d2:2f:02:05:79:
1b:7b:42:2a:71:1e:bb:48:bd:49:b9:c6:1c:dc:f7:d9:f9:12:
11:e5:57:86:57:f5:b8:22:ca:5f:3e:55:84:77:ef:ac:24:eb:
88:4d:3c:eb:aa:95:b0:0c:e2:6a:d7:77:db:45:b4:b0:1f:70:
c2:86:bb:42:80:6c:54:6d:dc:f6:ff:48:05:45:84:af:b3:8b:
23:7f:87:39:9c:0f:5f:63:97:61:40:66:da:d3:f4:f9:f8:c3:
32:58:04:1a:db:b7:15:ac:59:1b:a2:74:e7:59:8e:11:9a:bc:
be:7b:16:2b:ff:a2:39:b1:bb:42:74:3b:dc:f9:34:e7:1f:fe:
53:d6:e5:b1:57:2f:b9:7c:b4:4b:9f:66:d1:89:60:ae:05:70:
8f:70:21:b7:93:ea:b0:e6:64:f1:8e:82:18:13:78:67:11:a7:
9a:f3:20:b7:60:da:20:f2:f0:0f:60:b6:05:62:3b:5c:a9:b5:
f0:30:a4:1c:b2:56:e9:ed:1a:cd:bf:10:81:cb:3d:f8:3d:43:
0f:d0:9a:8f:cb:5a:fb:c6:f8:b8:30:9c:a4:e1:4e:ae:20:fa:
21:c9:60:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:33 2025 by rpki-client