Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
File: czHb7QiXzOhcFINxtHzIB4Ll5ys.mft (raw, json)
Hash identifier: +lGasHzTdZ9d/hmW5BUyIsvneDK0wcobuXKC1GWMefg=
Subject key identifier: 80:FE:13:5A:2C:BE:63:22:22:C1:CB:BA:1D:56:37:11:E5:01:41:6A
Authority key identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
Certificate issuer: /CN=7331dbed0897cce85c148371b47cc80782e5e72b
Certificate serial: 0198D660299D80D365565E97C2C4E2BE30B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
Manifest number: 053A
Signing time: Sat 23 Aug 2025 10:01:22 +0000
Manifest this update: Sat 23 Aug 2025 10:01:22 +0000
Manifest next update: Sun 24 Aug 2025 10:01:22 +0000
Files and hashes: 1: czHb7QiXzOhcFINxtHzIB4Ll5ys.crl (hash: 8b7u+HK/lqRDvJkJL2IYqK5v16tOC821gd/yO9ZM8Y0=)
2: x22xk2A-Apb8dLpmSadyKyJCkDo.roa (hash: gu74rPveiHXJ2A/NDXg+xf+4EJriNsSl+5m/7KHQAxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:29:9d:80:d3:65:56:5e:97:c2:c4:e2:be:30:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7331dbed0897cce85c148371b47cc80782e5e72b
Validity
Not Before: Aug 23 10:01:22 2025 GMT
Not After : Aug 24 10:01:22 2025 GMT
Subject: CN=80fe135a2cbe632222c1cbba1d563711e501416a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:7d:5f:fb:ca:d5:06:c5:23:1c:41:f3:4a:
ba:dd:c9:38:8d:26:23:0e:f0:d6:63:29:fc:89:50:
5a:ae:be:c2:0e:f2:48:5e:29:93:72:e9:57:79:5e:
81:3f:c3:fe:69:16:21:db:65:70:41:8a:e4:3d:c8:
3d:63:3b:07:f1:81:7c:f1:3b:c6:ef:cc:0f:91:60:
51:b4:3a:07:05:61:4a:fd:a4:12:2a:32:26:c7:b0:
60:86:24:f6:54:93:09:7c:cc:c3:9c:09:28:55:9a:
48:66:7d:ad:51:4e:40:a7:78:68:9c:48:63:56:62:
0a:e1:e7:b3:f3:1d:83:f6:39:4d:69:9c:b6:bd:70:
13:64:af:30:28:16:8e:63:77:e2:f4:33:6b:f1:7b:
51:28:3e:2a:fc:21:b0:91:b8:04:49:31:10:1c:f5:
60:30:88:e2:02:94:59:43:87:a7:0c:3f:9d:85:6f:
c1:82:12:4d:6c:7b:32:73:d3:b4:18:49:b0:b1:d3:
1e:12:17:ba:90:c6:5c:52:8b:0d:8b:b3:2e:1a:b5:
60:23:76:b2:8f:13:29:29:56:43:48:0d:91:40:3b:
22:35:a5:63:d5:a8:6c:83:bd:10:6b:4c:15:4a:84:
8b:10:55:d7:c5:70:ae:44:db:10:cf:f9:b3:61:fa:
ec:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FE:13:5A:2C:BE:63:22:22:C1:CB:BA:1D:56:37:11:E5:01:41:6A
X509v3 Authority Key Identifier:
keyid:73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4d:fe:50:fe:59:c9:1c:ab:ad:40:77:cc:3f:47:b4:92:0f:
71:e2:46:91:02:b4:3a:d5:11:0c:73:b2:56:8a:7e:1c:29:65:
d9:f0:3a:27:3c:c1:08:20:aa:72:a2:fe:0e:a0:e7:61:e6:a0:
c7:ca:21:78:44:d1:fb:89:12:1f:85:b2:18:51:a2:09:dd:ab:
7e:1c:cd:90:22:88:16:68:b3:f3:b5:7b:62:bc:cb:06:e4:06:
42:ad:e1:ef:28:c3:68:f6:04:20:b3:f0:35:ad:28:99:44:f0:
31:e1:74:21:94:73:ff:5d:4c:e6:1c:a4:13:ec:d8:ce:6e:c2:
7e:b9:16:69:55:a3:bd:06:a6:eb:4c:b5:5b:7d:b0:ae:9d:30:
0a:92:3f:b1:09:a1:e9:f9:2f:28:6d:66:89:84:05:3a:cb:59:
df:cf:5f:d8:d6:ff:02:14:67:7b:54:a2:fc:d8:9a:5d:2f:9b:
53:fa:2c:09:c9:35:86:be:af:2a:3c:06:e3:3a:6d:4e:1f:20:
80:bf:69:28:b8:11:83:5f:8a:82:10:ff:cc:33:b9:b9:52:2d:
c4:85:3a:d9:58:42:15:10:2b:c6:9b:82:e4:17:e2:0b:a2:32:
f4:b6:69:d2:5b:19:f6:5c:80:7d:09:26:58:67:82:1a:db:07:
e3:61:46:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYCmdgNNlVl6XwsTivjCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMzFkYmVkMDg5N2NjZTg1YzE0ODM3MWI0N2NjODA3ODJl
NWU3MmIwHhcNMjUwODIzMTAwMTIyWhcNMjUwODI0MTAwMTIyWjAzMTEwLwYDVQQD
Eyg4MGZlMTM1YTJjYmU2MzIyMjJjMWNiYmExZDU2MzcxMWU1MDE0MTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytB9X/vK1QbFIxxB80q63ck4jSYj
DvDWYyn8iVBarr7CDvJIXimTculXeV6BP8P+aRYh22VwQYrkPcg9YzsH8YF88TvG
78wPkWBRtDoHBWFK/aQSKjImx7BghiT2VJMJfMzDnAkoVZpIZn2tUU5Ap3honEhj
VmIK4eez8x2D9jlNaZy2vXATZK8wKBaOY3fi9DNr8XtRKD4q/CGwkbgESTEQHPVg
MIjiApRZQ4enDD+dhW/BghJNbHsyc9O0GEmwsdMeEhe6kMZcUosNi7MuGrVgI3ay
jxMpKVZDSA2RQDsiNaVj1ahsg70Qa0wVSoSLEFXXxXCuRNsQz/mzYfrsAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFID+E1osvmMiIsHLuh1WNxHlAUFqMB8GA1UdIwQY
MBaAFHMx2+0Il8zoXBSDcbR8yAeC5ecrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNWYwYzMtMjJlNS00ODAxLTkwZmIt
MDQ2NTA3MmU0MWEzLzEvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jNWYwYzMtMjJlNS00ODAxLTkwZmItMDQ2NTA3MmU0MWEz
LzEvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhk3+UP5Z
yRyrrUB3zD9HtJIPceJGkQK0OtURDHOyVop+HCll2fA6JzzBCCCqcqL+DqDnYeag
x8oheETR+4kSH4WyGFGiCd2rfhzNkCKIFmiz87V7YrzLBuQGQq3h7yjDaPYEILPw
Na0omUTwMeF0IZRz/11M5hykE+zYzm7CfrkWaVWjvQam60y1W32wrp0wCpI/sQmh
6fkvKG1miYQFOstZ389f2Nb/AhRne1Si/NiaXS+bU/osCck1hr6vKjwG4zptTh8g
gL9pKLgRg1+KghD/zDO5uVItxIU62VhCFRArxpuC5BfiC6Iy9LZp0lsZ9lyAfQkm
WGeCGtsH42FGqA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:40 2025 by rpki-client