Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
File: CZ05RkE90RFhtGx99q02Kpk41dQ.mft (raw, json)
Hash identifier: ILMk8KTQHduIVq2PxoE/4tLqSHkhl7YBFyLO+jJpEiI=
Subject key identifier: 82:17:7C:BE:96:1C:4F:70:BA:F8:B2:F8:65:F8:C4:F7:5C:66:4F:1C
Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Certificate issuer: /CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Certificate serial: 019A02232E0C1276D14064E940AAABD46718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
Manifest number: 04B5
Signing time: Mon 20 Oct 2025 15:00:51 +0000
Manifest this update: Mon 20 Oct 2025 15:00:51 +0000
Manifest next update: Tue 21 Oct 2025 15:00:51 +0000
Files and hashes: 1: 1-jvgd6RnvKghGloVJb1Iw3eDs48.roa (hash: B7s4SajlBd3EvNe+3zoLXiT8A5U0bChHVGW9zyQgNFY=)
2: CZ05RkE90RFhtGx99q02Kpk41dQ.crl (hash: zs2ZoJPcK3gs8FyCEK7Qy7FuFsxQsA4oST0BroHPlu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:23:2e:0c:12:76:d1:40:64:e9:40:aa:ab:d4:67:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Validity
Not Before: Oct 20 15:00:51 2025 GMT
Not After : Oct 21 15:00:51 2025 GMT
Subject: CN=82177cbe961c4f70baf8b2f865f8c4f75c664f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:02:22:13:dd:77:97:c7:df:a6:28:1f:1b:b4:
58:05:9f:8c:a7:52:c2:aa:b8:37:a4:c3:bd:85:2e:
ca:dd:74:75:9a:42:8d:5e:6f:b6:c5:62:af:74:1b:
d5:ff:62:f2:92:86:77:dc:21:0e:aa:2d:4d:b8:4d:
b0:7a:36:5c:ca:de:07:92:e2:99:19:5a:c6:9d:76:
33:08:e2:49:df:76:e0:83:aa:7c:a4:23:2a:f0:e9:
2c:6f:27:80:b8:ed:9c:97:0f:0c:78:09:83:54:38:
b8:34:21:97:cc:bc:14:0d:e4:21:0e:a6:18:07:ff:
90:2e:ff:1c:ce:77:1e:96:88:f3:f8:55:57:83:f8:
f1:ed:ff:5e:2b:84:98:26:03:68:fe:4b:85:1b:f2:
52:74:03:3b:83:25:bf:7b:66:df:41:a2:50:61:5a:
de:c2:d7:e8:6b:51:8c:b8:15:63:13:03:09:dd:e2:
0b:84:b8:2f:36:81:9d:d6:8c:e8:dd:e6:7d:2f:96:
19:05:32:4c:c0:38:24:d7:48:35:85:19:7c:75:61:
8c:19:5a:e4:57:0b:0e:55:8f:eb:c6:56:0c:89:d5:
36:32:bc:89:8a:f1:17:43:84:ba:16:08:80:66:5c:
83:ce:a8:db:b1:b6:7b:a7:a7:a2:89:a9:7a:4a:7a:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:17:7C:BE:96:1C:4F:70:BA:F8:B2:F8:65:F8:C4:F7:5C:66:4F:1C
X509v3 Authority Key Identifier:
keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:77:95:16:c9:33:d5:e7:e2:23:c6:8b:6a:59:6e:b3:d7:53:
d0:0b:bd:7c:66:b9:67:56:b6:dd:b7:9c:54:86:31:f3:ca:dd:
b3:91:20:62:4c:6c:36:d1:d9:99:c4:57:58:b7:f9:19:92:f7:
48:69:83:26:c0:8f:c0:0a:48:35:62:d0:c0:6e:5d:d6:97:03:
93:d1:25:e9:f5:33:21:e5:16:ff:da:54:b5:5e:38:63:54:a5:
2a:66:cb:81:f2:02:ff:c9:56:ae:a0:f7:57:85:29:58:8b:9b:
57:2d:ac:e4:39:35:d4:8b:b2:0f:b2:1f:d2:17:3c:92:fb:6b:
4b:28:15:13:cd:db:fe:2b:08:50:9b:ee:6c:29:47:d2:5d:c5:
0f:27:c9:a8:aa:85:fd:19:71:76:de:68:c4:32:ac:08:3c:20:
36:02:3e:75:59:8c:2e:3c:72:b2:68:72:2b:43:de:de:b6:6c:
d9:34:d4:6c:11:17:75:fa:c4:df:e3:de:9b:7d:f7:61:d0:80:
1f:77:5d:6e:0e:e3:44:3f:5b:c7:04:4b:96:21:50:1a:56:f2:
e9:0a:06:54:92:e8:a0:c8:a3:50:07:1d:0c:50:64:34:fd:d2:
e2:c4:a3:6b:7d:3d:d7:f7:c6:a0:80:22:1c:a8:e9:31:71:a5:
c3:c9:a7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:03:27 2025 by rpki-client