Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json)
Hash identifier: phLdC5RF07tVsfXkEUTLEr5RoO+ItOWzta+KahYA9fM=
Subject key identifier: A3:16:D8:D6:B2:06:36:71:B5:B1:BC:75:82:B5:C4:CD:95:21:95:CA
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 0197B70E7A206BE69E969297A406BB845D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
Manifest number: 1442
Signing time: Sat 28 Jun 2025 15:01:08 +0000
Manifest this update: Sat 28 Jun 2025 15:01:08 +0000
Manifest next update: Sun 29 Jun 2025 15:01:08 +0000
Files and hashes: 1: 5MNHm2fG2K7ej_6HfywzVnWXnf8.roa (hash: a7dXOZ9Zvi0UjZGpNNuJ2dVdNWGu8ufMXG6I2NU70ow=)
2: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: rxfLRBtMxFyEAD5ZBz/rbqDwOk2wViEYJ7iacA4vBiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7a:20:6b:e6:9e:96:92:97:a4:06:bb:84:5d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: Jun 28 15:01:08 2025 GMT
Not After : Jun 29 15:01:08 2025 GMT
Subject: CN=a316d8d6b2063671b5b1bc7582b5c4cd952195ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:fd:c1:6c:5d:10:a3:08:e3:8a:bd:23:63:
67:47:a0:b1:ed:b5:43:c6:cc:93:45:65:a3:44:10:
d6:8a:51:05:0b:20:58:e9:15:44:eb:e9:cd:91:25:
2d:d4:15:ea:03:33:a6:2e:28:3a:47:c8:aa:c5:4a:
49:17:20:15:80:f1:69:cb:63:a3:a3:91:0d:a2:4f:
14:5a:5e:2c:f5:17:9e:67:9f:26:02:3c:4c:63:92:
84:43:29:37:24:b7:1c:9f:18:89:90:93:4d:59:b2:
6d:11:da:42:ff:66:bd:24:52:14:5c:fc:a8:4f:8d:
18:c6:96:d8:82:4a:e1:bf:dc:2f:f7:61:ec:54:32:
02:b5:c8:f4:63:91:49:57:0b:40:d9:dc:e2:9a:67:
ed:fc:99:c3:b6:2f:bd:07:22:98:39:49:db:48:21:
8a:6f:f8:ad:3c:5a:e1:2c:9c:6e:0e:12:e2:80:03:
7f:53:fe:36:ba:45:f7:cd:9f:e5:2c:3c:48:b6:78:
0b:1d:d8:40:44:4b:e4:87:48:0b:0e:8f:15:64:4b:
b0:1d:17:0d:fe:52:9e:be:d2:96:01:49:24:a4:7b:
b3:0e:84:58:f7:e8:29:e3:8a:83:91:4a:04:6b:b7:
72:2d:34:48:a9:1d:e4:28:d7:6b:b9:fb:52:b2:96:
ff:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:16:D8:D6:B2:06:36:71:B5:B1:BC:75:82:B5:C4:CD:95:21:95:CA
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:9f:83:44:cc:6d:4f:e7:b7:68:58:f8:48:48:8f:ff:27:29:
c7:12:29:86:31:f7:13:b1:db:80:e3:84:10:53:94:17:67:43:
e9:7d:3c:9d:f9:91:98:dd:33:98:e4:ff:28:2a:9a:6a:e8:70:
ef:8e:c8:f0:49:fd:8f:fb:53:c4:33:3d:26:9b:53:15:90:89:
0d:d3:a5:76:33:83:48:be:88:dc:59:20:11:ad:76:36:77:99:
0d:9f:bf:26:d5:27:33:34:96:d5:d3:18:56:97:8d:dc:41:d2:
38:5c:f4:32:65:03:87:f3:80:e5:e8:04:8c:13:c1:22:1b:c0:
94:49:98:18:21:67:fc:2b:2c:8c:d3:76:4f:d4:48:f2:e1:34:
ec:b4:b4:4d:47:ec:a6:17:ef:86:a4:7d:dc:31:6b:fd:cf:f4:
bd:ab:1f:2d:ba:a8:71:94:31:7f:f2:1d:05:c5:c9:56:3f:c0:
68:40:56:c3:b7:5a:df:7e:19:0b:2b:2d:4a:c5:89:8d:24:e1:
79:19:c7:a2:91:ea:40:9b:2f:72:f6:6b:51:d0:f1:89:cb:71:
75:21:11:1e:51:29:69:75:ef:d4:8b:fa:70:8e:03:f9:75:01:
0a:68:47:bc:e8:1d:2f:62:2a:93:0e:27:ee:57:e7:ac:87:69:
78:10:5c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:07 2025 by rpki-client