Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json)
Hash identifier: exw6WRdPAxg05WPaVWLB6k76DmQ6D86sHLVDvp4BA60=
Subject key identifier: 6A:14:C6:89:34:1D:F5:5E:B6:89:05:27:E4:00:F2:6A:AD:D9:85:16
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 0198D4E098047CC75B0E3B1561B1360E126D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
Manifest number: 14D6
Signing time: Sat 23 Aug 2025 03:02:25 +0000
Manifest this update: Sat 23 Aug 2025 03:02:25 +0000
Manifest next update: Sun 24 Aug 2025 03:02:25 +0000
Files and hashes: 1: 5MNHm2fG2K7ej_6HfywzVnWXnf8.roa (hash: a7dXOZ9Zvi0UjZGpNNuJ2dVdNWGu8ufMXG6I2NU70ow=)
2: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: VPwslKAP16xvasym78uldayb8+os9dlxjGdEs4cd2R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:98:04:7c:c7:5b:0e:3b:15:61:b1:36:0e:12:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: Aug 23 03:02:25 2025 GMT
Not After : Aug 24 03:02:25 2025 GMT
Subject: CN=6a14c689341df55eb6890527e400f26aadd98516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ff:d5:6f:ab:69:36:17:f3:f3:52:e9:8e:8d:
91:48:26:00:3a:2b:cd:7b:4d:d7:d9:dc:86:00:94:
f0:e5:f8:b6:50:f5:0b:77:fe:cf:41:f5:04:f0:56:
3c:25:5c:8d:5b:03:bd:b3:b9:ad:e3:f1:09:af:fb:
a3:45:f6:23:23:11:92:69:33:9c:d4:be:b2:55:70:
6b:39:f3:02:1f:4e:c7:61:29:3b:9b:36:da:94:80:
9e:5b:ef:e2:74:7f:df:b8:d0:2d:db:16:c3:c6:a6:
db:0d:e0:51:06:25:df:cb:76:b6:4a:3c:89:0d:6b:
eb:f4:9d:91:30:30:bd:55:30:9c:b7:34:15:9b:66:
64:db:8f:54:d4:39:04:10:ad:62:44:47:27:40:71:
1e:4b:8c:2c:9c:7c:8b:53:91:04:a1:de:12:60:d6:
df:8d:69:02:8f:4d:07:81:57:4f:cf:f6:ec:73:84:
f8:25:db:ca:66:23:ef:aa:04:12:94:d4:b9:3e:3f:
bb:d5:5b:c9:eb:fd:e5:d5:30:1f:8e:4a:84:6d:34:
5e:94:14:68:e9:cf:61:ba:6e:a9:32:1f:20:b2:b6:
26:7c:57:50:ca:fb:4b:41:cb:85:d2:23:d1:ba:94:
b3:64:15:ba:e8:9f:94:35:43:99:8f:e5:25:e3:b3:
53:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:14:C6:89:34:1D:F5:5E:B6:89:05:27:E4:00:F2:6A:AD:D9:85:16
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:41:10:c1:35:c8:43:85:82:f1:e9:39:33:f5:96:04:52:d4:
97:5e:00:c0:e0:8e:b3:52:ae:27:a4:a0:a8:4b:5b:8a:13:6b:
ab:33:27:2f:fe:b2:91:10:1a:13:9e:3c:7d:58:0f:70:1c:4d:
11:cc:c6:08:86:01:9f:24:da:1f:7d:8f:32:8d:de:26:2c:64:
d3:e2:13:a2:20:3e:0f:f3:08:c8:0f:d0:99:36:c5:c7:2a:51:
10:49:dd:9a:ac:ca:50:01:1e:e1:d2:14:9e:6c:e4:3c:9d:da:
ce:b4:d9:1f:1b:4a:0c:d1:89:87:53:90:d9:3e:5d:0b:61:88:
d6:3f:a7:58:cc:16:21:ef:45:0e:3b:3c:c3:e9:40:aa:be:61:
35:80:69:45:b9:35:8d:cd:ad:b5:0a:4c:e9:6f:9b:86:f4:f3:
ca:6e:5c:54:66:53:a7:c3:48:f6:c8:b1:a5:73:a1:07:47:19:
2d:d8:e0:f3:a6:d4:1b:48:3c:b3:87:d5:a7:0b:bc:43:e3:19:
aa:3f:33:b7:e2:76:fc:18:81:5d:64:2f:29:37:06:06:6f:e3:
23:26:e3:10:76:78:a7:0e:1a:83:38:db:73:9d:86:b0:15:5e:
e5:75:f6:ab:64:c3:a4:a2:ad:5a:28:4d:64:cd:26:58:59:99:
8e:36:ba:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:12 2025 by rpki-client