Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
File: czaDy4VtbZ_1jih-ipBdKS3KazQ.mft (raw, json)
Hash identifier: HLJOO91ud+5PS9LjtowJZwtC+Y/DskYYN4cYDOAibDg=
Subject key identifier: 8D:03:8E:DB:7E:AF:C5:32:98:7C:F7:E3:61:4E:F9:EC:65:FF:17:60
Authority key identifier: 73:36:83:CB:85:6D:6D:9F:F5:8E:28:7E:8A:90:5D:29:2D:CA:6B:34
Certificate issuer: /CN=733683cb856d6d9ff58e287e8a905d292dca6b34
Certificate serial: 0198D84F6E6368F631EC3C41AC40A4A4A7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
Manifest number: 1290
Signing time: Sat 23 Aug 2025 19:02:20 +0000
Manifest this update: Sat 23 Aug 2025 19:02:20 +0000
Manifest next update: Sun 24 Aug 2025 19:02:20 +0000
Files and hashes: 1: 1VNg1Q5CgydMlZtkT2gUiwyQsB8.roa (hash: hFOtYhVCGxVTmNvasMZGAdD1D7TMmY398V7CPu+M+nU=)
2: czaDy4VtbZ_1jih-ipBdKS3KazQ.crl (hash: bZFde6OGduOPAXINibjUlL4kGqrqT5Kj+6nWLkAictA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:6e:63:68:f6:31:ec:3c:41:ac:40:a4:a4:a7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733683cb856d6d9ff58e287e8a905d292dca6b34
Validity
Not Before: Aug 23 19:02:20 2025 GMT
Not After : Aug 24 19:02:20 2025 GMT
Subject: CN=8d038edb7eafc532987cf7e3614ef9ec65ff1760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:a7:61:b9:03:90:10:f0:e0:8e:fe:29:47:
f3:90:b8:93:b4:43:fe:e7:41:43:fb:27:1f:3f:ef:
79:de:4a:20:9f:8d:55:0d:71:b6:c8:ba:83:92:ca:
fb:04:43:19:1a:c5:3b:50:d0:51:91:b3:5f:15:82:
8a:99:d5:ee:53:ea:b4:c3:ba:6f:1e:2d:ae:78:13:
a9:f8:a5:ea:61:00:50:26:98:a6:56:1f:c4:b4:9d:
9f:17:9d:43:02:c5:e3:a5:e4:50:7b:dc:49:7a:fb:
4a:b0:27:bd:4f:a4:b3:10:9f:4d:a4:a5:1b:eb:e7:
d6:59:11:a6:b2:a2:6f:71:6c:75:8d:e5:a3:8f:dd:
d8:56:83:68:a9:da:83:72:63:a0:8a:f9:8e:ac:61:
21:98:fd:8d:4d:5e:9c:74:d7:4d:1f:77:66:24:4d:
6e:94:b0:94:23:c8:6c:eb:73:65:71:d3:32:7e:4e:
d9:eb:9d:3c:b4:0c:50:ed:a0:90:06:66:8d:2a:4f:
54:c9:73:67:72:6a:10:22:59:e7:ee:0e:4d:d6:5d:
e6:68:75:30:ed:ec:2b:af:61:45:e2:5a:4d:e9:9d:
f3:ad:96:bf:3e:18:4b:da:67:8f:01:2b:e0:34:89:
eb:38:d7:50:ef:ac:ce:35:6b:e7:51:9b:7f:ff:93:
40:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:03:8E:DB:7E:AF:C5:32:98:7C:F7:E3:61:4E:F9:EC:65:FF:17:60
X509v3 Authority Key Identifier:
keyid:73:36:83:CB:85:6D:6D:9F:F5:8E:28:7E:8A:90:5D:29:2D:CA:6B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:47:c4:f9:89:34:92:2a:87:e6:7e:62:a0:8e:ef:4b:65:47:
62:41:19:63:55:a8:39:89:c5:64:63:6d:4f:99:d3:1d:19:73:
dd:b5:f2:75:62:ab:5f:7e:28:d7:5e:0b:92:ee:95:1e:26:c9:
e3:68:a5:0e:7d:29:1d:c5:da:b3:7b:0a:49:0b:74:49:ba:71:
16:68:60:2b:43:80:ae:6e:ee:08:e0:70:44:d6:f4:80:14:c9:
61:d5:16:2d:51:70:bc:64:00:c6:c3:11:11:47:7e:62:a3:3a:
bd:43:34:a0:dd:cb:9b:81:21:2a:be:d7:92:3c:b2:96:38:24:
c8:94:a8:fd:4b:e4:9a:48:4c:6e:45:3e:30:ca:58:ef:ce:3e:
d5:ae:b3:da:a6:d7:1e:24:0f:75:fb:7b:bf:75:e0:6c:b4:27:
d4:78:b3:11:87:ff:4b:2e:4e:de:0f:9b:37:bb:9b:7e:8e:d7:
97:dc:fe:d3:ff:31:9e:dd:8f:3f:0c:fa:bb:2a:5e:d0:ad:d0:
93:47:19:ed:6d:f5:8b:9f:76:c1:7b:77:71:f7:4c:19:e9:6d:
44:0e:61:3e:68:e7:dd:7d:27:6f:40:db:ce:31:27:57:f5:2e:
b2:e1:b0:90:62:1a:cc:54:ce:25:da:0f:45:e7:1e:e4:e4:5b:
2d:0d:66:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:04:24 2025 by rpki-client