Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: YQlCHONHMbBU09nDEugVg8WGBe1KcXjHalSZxdBdWQw=
Subject key identifier: 38:A5:86:87:2E:A0:10:04:BF:BD:10:DA:15:B8:67:BE:4F:77:41:C3
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 0199FCFD714471FB1FAD3C80E80AA451566F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 04FD
Signing time: Sun 19 Oct 2025 15:01:32 +0000
Manifest this update: Sun 19 Oct 2025 15:01:32 +0000
Manifest next update: Mon 20 Oct 2025 15:01:32 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: NPv23NcVjL6KwAWwuj1xU7BIIHl7GIZ5HM1YC+DIudQ=)
2: ayUSDw8mdGoHelr_2bHuT_Ht97M.roa (hash: gvA+DDKSQOPFRf0cxBqKQel7xs/RAWw3rOxPxkz9/ZY=)
3: i3ThCtdNGW1cjUxQLhhdn5p0rJI.roa (hash: GXqzqfOOBrl4UZP/OkbdiBzFUWkoVhn5KODt99i+lAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:71:44:71:fb:1f:ad:3c:80:e8:0a:a4:51:56:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Oct 19 15:01:32 2025 GMT
Not After : Oct 20 15:01:32 2025 GMT
Subject: CN=38a586872ea01004bfbd10da15b867be4f7741c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:8c:20:e6:2f:e4:11:db:b1:68:32:f5:01:
5b:a9:8d:e0:f3:60:1d:76:23:df:92:b5:dc:f8:f8:
13:86:9f:96:4b:57:cb:a7:f7:af:61:3e:92:e4:34:
2b:fa:b5:06:23:58:8c:12:5d:f4:64:6d:07:64:68:
38:b1:21:56:49:a5:18:2e:00:66:9e:78:26:ca:19:
06:d3:68:7b:b3:5b:1c:9e:4f:92:aa:41:6c:5d:1b:
f6:a1:00:d5:1f:df:30:70:3d:05:ec:6f:07:17:d7:
05:1e:b0:f5:88:68:5f:66:ef:6f:46:c6:70:1c:15:
7c:09:84:1d:1b:02:6b:d3:5a:fe:00:ce:3f:e0:c5:
92:6a:88:ef:a9:0a:91:57:83:94:dd:f0:6a:b8:74:
13:9d:4f:76:ce:40:61:85:f6:20:e2:e6:49:a2:5c:
7a:b3:15:a4:85:f3:56:52:69:0f:6f:21:89:51:a2:
46:d9:12:04:f1:e5:fd:6b:ad:a8:f8:6d:cb:d9:d5:
3d:a7:41:61:2c:71:35:e2:39:51:9e:db:b7:c2:76:
5f:94:b6:cf:09:88:f3:3e:98:aa:7d:7a:a8:00:0b:
86:47:3e:20:f0:46:1e:02:f1:e0:2f:7b:62:eb:e2:
8d:2e:87:6e:07:36:c2:bd:0f:13:7b:38:6a:fd:b0:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A5:86:87:2E:A0:10:04:BF:BD:10:DA:15:B8:67:BE:4F:77:41:C3
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:03:f2:99:da:71:e1:40:95:4a:fa:d9:ae:7b:bb:6a:3e:c6:
82:bc:fe:91:3b:bf:71:1d:24:82:80:01:e8:7b:da:54:a5:16:
3a:99:67:60:47:59:b8:a3:79:58:ae:25:58:60:a7:35:ee:e1:
ba:69:ac:35:77:bd:85:f1:24:82:91:de:33:7a:18:29:ad:55:
93:3b:3f:e1:31:af:63:b6:c8:f5:0d:66:86:4a:64:c8:28:fc:
ac:59:8c:7b:d6:7b:0f:6e:36:a2:d0:dd:21:20:f2:99:cf:d0:
5e:bd:32:62:f8:75:68:1c:0e:e7:d0:8e:ff:d1:47:ee:82:9d:
2b:ec:ab:c5:e5:ec:b8:7a:7d:bc:df:86:04:3e:30:f2:ed:47:
a3:3c:66:9f:d8:bb:2f:6b:db:fa:af:ee:c0:71:cc:07:c0:33:
29:27:fa:da:bb:e8:91:b7:30:3e:00:42:cb:cd:b7:f1:9a:4d:
36:0f:99:76:ef:66:ab:1f:0e:ea:cd:27:a5:37:78:5f:36:09:
93:62:97:b8:04:68:0e:97:28:6d:33:fc:7c:a8:ed:89:c4:a6:
fa:36:3f:e6:85:4e:99:2b:ea:3a:bb:44:a4:da:e0:e5:03:b7:
96:cc:ca:f2:e7:f4:45:e3:08:f5:e4:23:9d:a3:de:68:49:4b:
29:51:4d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:46 2025 by rpki-client