Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: NpI4U0oHqxszChHsIHiX5MriXs5wFwv+3U0WPY7z+/k=
Subject key identifier: A1:F2:68:47:18:4A:4C:A1:CB:5A:C8:16:57:BD:2B:31:78:9D:FD:78
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 0198D6984A66F9A58FBA6F12C53E73013F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 086C
Signing time: Sat 23 Aug 2025 11:02:41 +0000
Manifest this update: Sat 23 Aug 2025 11:02:41 +0000
Manifest next update: Sun 24 Aug 2025 11:02:41 +0000
Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: LBaVSjwiR6Fi1GTsMRYOw/lq8sbjzQXy0FBDOUnCckk=)
2: RQEsj5U6gDhjJcVy0TlXi-Wv0Jw.roa (hash: 5spwbq7vTMKhgpfXnPqWkbfUupwJGaz4yD3OLMK3ImM=)
3: euzuAPfeJuv2-cm-rKuGKDxPe8I.roa (hash: 96LpiX/MLfmTkOgA68PX4zJcqAm4CD3qIp5sMcLFqNU=)
4: uqI-e9Q5-oja9rvPU1QcSBBgp4Y.roa (hash: RtcbvrEpnnUY7EwUTMkcJmd+p3YJpS4SOiugiRag4tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:4a:66:f9:a5:8f:ba:6f:12:c5:3e:73:01:3f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Aug 23 11:02:41 2025 GMT
Not After : Aug 24 11:02:41 2025 GMT
Subject: CN=a1f26847184a4ca1cb5ac81657bd2b31789dfd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a2:92:5d:cf:29:c4:e4:5e:c0:84:3d:c7:38:
a7:da:e0:dd:cb:9f:c3:cc:f1:2c:ff:9e:c5:de:4b:
f6:af:05:d8:c6:ef:79:75:86:c8:6b:81:b4:37:a6:
68:c8:e4:38:8f:f2:61:9e:41:c3:6a:17:d6:ce:94:
a5:f8:df:7f:e6:c1:c3:5d:1c:10:f0:3b:ae:72:60:
ff:5f:8a:78:6a:8b:58:f3:5b:7a:25:d0:4c:64:6b:
a5:d8:3f:77:03:ca:7f:b2:05:5b:da:59:66:5b:9d:
b4:d9:67:87:bf:49:27:71:0d:30:44:d4:c1:e1:f5:
85:66:26:05:a2:f0:0e:28:90:5c:8c:80:5d:ae:6a:
18:76:97:93:2d:92:97:8b:e9:2c:7c:08:56:cd:43:
52:fe:95:d5:c8:d0:d0:ce:54:54:21:ec:19:5f:aa:
48:fa:a9:f5:82:00:f8:c7:42:b4:92:40:ec:6c:06:
17:1c:37:ed:6a:41:ab:2b:b5:d5:e1:69:c4:82:43:
01:48:93:93:47:da:1c:e2:55:d9:80:a4:23:4a:84:
9e:22:ee:9d:81:56:86:88:61:bd:38:f3:fd:df:f3:
05:18:7a:b9:a7:f9:72:92:ec:0b:51:b8:01:66:51:
92:81:72:5f:8f:21:4c:87:1a:da:d4:d6:86:21:4a:
44:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F2:68:47:18:4A:4C:A1:CB:5A:C8:16:57:BD:2B:31:78:9D:FD:78
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:fe:c8:47:0c:75:b5:10:c0:50:b6:36:fe:47:9b:8d:e3:af:
75:47:f5:5b:63:ed:69:7a:cc:07:2e:f2:9c:87:c3:01:34:6c:
fd:19:d2:5c:9f:e5:0f:b0:cf:1f:04:81:44:ec:ce:d8:a8:98:
95:03:7f:c9:d9:e9:75:dc:96:a7:a7:40:ae:ac:52:73:b3:fe:
31:77:97:07:93:96:27:3f:11:dd:fe:12:2b:78:c6:f2:6b:f7:
04:65:dd:c2:f1:af:29:04:e6:70:2d:29:2b:c0:57:48:78:3f:
87:ab:b9:11:43:83:bc:a1:b4:3e:a2:9d:97:26:28:b1:ec:f5:
ec:44:a5:e7:65:67:57:16:bf:68:a6:2c:63:11:9b:97:eb:e1:
5d:55:ab:18:03:89:5e:86:de:00:6a:b8:c7:73:08:ef:a9:bb:
89:29:f6:b4:8d:7b:3b:cf:77:1b:79:87:26:32:d2:d6:58:2c:
d0:5f:fe:96:6e:ec:30:b3:f3:26:3c:f0:5c:8f:73:cf:aa:46:
53:f0:17:cc:b3:b3:b1:98:c6:ec:25:9d:1f:27:ff:61:f5:c8:
ec:49:4b:5a:2e:78:c6:35:89:3b:17:ce:c2:3a:bc:86:08:3f:
75:dc:f3:d0:c1:61:fe:0d:e0:0d:73:a6:e7:82:09:ba:aa:68:
c5:e1:c0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:40 2025 by rpki-client