Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
File: czaDy4VtbZ_1jih-ipBdKS3KazQ.mft (raw, json)
Hash identifier: 4ErZAi7U/ERjI9JdvYmQt87V0KDO7mOyudWcdoIrGNY=
Subject key identifier: AE:27:8B:FB:EF:DB:9A:B0:F3:7B:AB:09:03:83:9A:B3:45:8C:97:C4
Authority key identifier: 73:36:83:CB:85:6D:6D:9F:F5:8E:28:7E:8A:90:5D:29:2D:CA:6B:34
Certificate issuer: /CN=733683cb856d6d9ff58e287e8a905d292dca6b34
Certificate serial: 0199FDDA1B63F48AF43BE8012BFCA5D1A6A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
Manifest number: 1328
Signing time: Sun 19 Oct 2025 19:02:33 +0000
Manifest this update: Sun 19 Oct 2025 19:02:33 +0000
Manifest next update: Mon 20 Oct 2025 19:02:33 +0000
Files and hashes: 1: 1VNg1Q5CgydMlZtkT2gUiwyQsB8.roa (hash: hFOtYhVCGxVTmNvasMZGAdD1D7TMmY398V7CPu+M+nU=)
2: czaDy4VtbZ_1jih-ipBdKS3KazQ.crl (hash: ezWf7oEWm33aAQ0BzsC+Kg5emtMAomvtrvHUq7YJF04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:1b:63:f4:8a:f4:3b:e8:01:2b:fc:a5:d1:a6:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733683cb856d6d9ff58e287e8a905d292dca6b34
Validity
Not Before: Oct 19 19:02:33 2025 GMT
Not After : Oct 20 19:02:33 2025 GMT
Subject: CN=ae278bfbefdb9ab0f37bab0903839ab3458c97c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:dd:17:0c:65:eb:63:81:66:a5:ff:5b:9b:
ac:ab:20:bb:ae:a8:56:a1:e3:02:92:67:ea:7d:80:
2f:9c:8c:71:e8:43:86:88:67:a5:1b:c3:0a:8c:95:
1a:56:0e:a0:3f:7a:19:38:81:4c:29:f7:1f:63:9e:
29:32:58:e3:d3:6f:33:bc:e2:ad:c2:db:ab:d9:d2:
1f:a6:a7:00:73:40:f2:62:ca:71:f3:82:60:45:f3:
69:26:ab:ff:bb:ee:96:70:59:e1:d9:1d:1a:4f:56:
69:59:16:ac:9f:64:4e:d7:da:05:d4:e6:9b:93:3f:
43:51:47:16:1e:47:22:24:bc:bf:80:30:04:9b:07:
fc:21:22:ca:42:76:cc:76:0e:c8:2d:02:5e:a0:70:
e6:33:94:8f:77:3d:47:41:b0:16:b5:5b:12:d7:ed:
62:d6:63:fe:0b:08:c1:82:2d:ae:db:90:99:5e:3d:
06:f2:84:1e:2f:81:db:85:c6:1e:a3:d9:bc:15:be:
4a:b8:f8:d6:47:4f:ee:e2:8b:2d:f2:32:42:13:f8:
c6:71:a8:ce:ab:e6:75:e0:2f:6c:e8:82:af:f8:58:
1f:4e:71:52:b8:27:8d:5b:92:eb:31:a9:3e:c5:de:
42:6c:50:a3:2d:67:37:49:04:5e:ab:c3:b6:13:ce:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:27:8B:FB:EF:DB:9A:B0:F3:7B:AB:09:03:83:9A:B3:45:8C:97:C4
X509v3 Authority Key Identifier:
keyid:73:36:83:CB:85:6D:6D:9F:F5:8E:28:7E:8A:90:5D:29:2D:CA:6B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:3d:71:00:44:39:4b:ec:53:d2:58:7f:30:f0:17:ae:79:b1:
a6:97:d4:2c:42:44:10:d2:99:67:6f:af:4f:43:c9:b5:68:dc:
a5:f7:b4:9e:ba:2f:2e:00:2f:bc:f7:06:70:58:a3:a1:91:52:
ac:69:db:9e:a9:47:d0:0c:11:19:7a:76:f7:58:57:85:dc:d4:
8f:2f:2e:9b:c0:ec:11:55:bc:88:56:2d:78:88:71:16:7f:fe:
f0:ec:45:9e:dd:3d:f9:14:bb:e3:a7:e1:70:42:b1:f9:bf:61:
41:c8:5d:2a:78:e4:2f:b4:6b:00:88:4a:ad:2d:df:eb:53:ed:
a7:57:a1:74:54:8c:b4:ce:5e:bf:ff:66:fb:cb:c8:bc:7f:4b:
76:17:3d:57:3b:1e:80:03:da:36:f3:0c:52:28:0c:6d:9a:55:
2c:85:61:70:1a:6a:d1:98:40:a1:1a:6c:c1:4e:e2:63:1a:ec:
3b:03:c0:c7:b5:0a:1f:c0:ce:90:cf:5a:39:59:86:55:5c:7a:
7e:1e:f6:7f:58:8f:1c:87:dc:15:3d:01:61:4f:d0:b8:ae:48:
fc:11:e8:22:74:41:ac:69:8f:92:77:10:b3:44:7d:ab:7a:9b:
c6:8e:fa:4e:93:32:12:7d:c9:cf:6b:4a:19:bf:b2:d8:f0:1a:
8d:f6:30:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:16:08 2025 by rpki-client