Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: 0HLbXrW8MFfSXEzouy+CqZTJSTve4YJgS0hHRJ3ii1Q=
Subject key identifier: 65:AC:9E:BB:EF:92:04:03:9B:0F:C5:F8:D7:1A:6A:97:EC:CA:E6:28
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 019A006C6C2EE262669289952C8F09775270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0907
Signing time: Mon 20 Oct 2025 07:01:36 +0000
Manifest this update: Mon 20 Oct 2025 07:01:36 +0000
Manifest next update: Tue 21 Oct 2025 07:01:36 +0000
Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: 3ZZIvw+ALxsMg/og3RDIICe4xgNTxx8akSQ4y+uhA0M=)
2: FPJFYvyzXbEavvZceGEpAmRa5eE.roa (hash: KrHxHkJK94MeV09/oo41P41TLRUgYghpsKtbBPIW45s=)
3: euzuAPfeJuv2-cm-rKuGKDxPe8I.roa (hash: 96LpiX/MLfmTkOgA68PX4zJcqAm4CD3qIp5sMcLFqNU=)
4: uqI-e9Q5-oja9rvPU1QcSBBgp4Y.roa (hash: RtcbvrEpnnUY7EwUTMkcJmd+p3YJpS4SOiugiRag4tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:6c:2e:e2:62:66:92:89:95:2c:8f:09:77:52:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Oct 20 07:01:36 2025 GMT
Not After : Oct 21 07:01:36 2025 GMT
Subject: CN=65ac9ebbef9204039b0fc5f8d71a6a97eccae628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cc:0e:a4:f4:08:6b:86:7b:47:d6:87:ca:70:
97:ee:c6:77:ff:3c:1d:ee:de:20:d7:fa:65:2b:fe:
cd:b2:dd:1c:be:ac:3b:59:2f:f8:67:6d:0c:58:93:
1e:ff:12:35:a3:c4:e9:11:d4:6d:a2:ec:56:3b:98:
63:2f:33:04:00:e5:f8:4f:c0:37:06:28:48:c3:03:
b2:54:6c:f0:f0:71:fd:bc:a5:f8:0b:5c:c0:cc:0c:
56:92:c8:47:84:00:a2:3a:28:b5:50:b8:87:e6:50:
cf:87:fb:db:80:e0:bb:85:03:7f:19:64:74:4b:88:
4d:80:84:ce:11:be:2a:08:60:0d:50:e1:07:ec:35:
5b:2e:5f:00:0c:8a:6e:59:07:98:d2:58:ef:83:60:
3b:a2:58:31:14:b7:34:5c:b4:40:93:77:8a:3c:5a:
b2:f6:6d:04:c6:a3:e6:c7:a3:65:7f:f3:19:ff:68:
b0:63:7b:6f:55:cc:74:e3:6d:70:3c:03:ad:af:64:
fc:0e:6d:09:0e:2c:f8:26:a0:24:44:5b:5a:93:05:
45:4c:97:6e:5d:8e:13:2b:88:aa:87:61:af:0d:7d:
eb:31:ff:d4:02:7f:6b:63:11:b6:af:f9:9c:1d:bb:
92:8d:36:0b:d0:af:a1:bc:9a:c8:7c:0f:6f:0a:40:
60:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AC:9E:BB:EF:92:04:03:9B:0F:C5:F8:D7:1A:6A:97:EC:CA:E6:28
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b2:ca:c3:15:c6:bb:35:6f:81:e8:26:09:30:7a:12:50:9b:
2b:44:11:38:bd:da:aa:9b:32:64:5d:0f:da:93:9e:75:6b:68:
b7:84:c5:ba:e1:65:31:25:a7:c9:6f:03:9d:11:69:b5:64:62:
04:87:00:05:7a:30:00:40:f1:f0:c9:65:9a:59:0d:1a:6f:98:
03:ea:fc:76:b8:92:23:58:06:ed:58:ef:50:28:4d:7a:a5:ee:
c9:37:c1:ce:bd:87:cb:cc:05:46:f5:d0:1e:c8:56:2c:0b:32:
91:05:7e:37:57:4b:f7:fd:b5:41:d1:12:29:54:95:87:88:44:
17:6e:77:04:f7:d4:6d:44:d7:61:ee:3c:ba:8f:30:0b:e9:18:
b2:e9:e0:b6:63:f7:5c:9e:34:db:db:4d:29:ae:b6:d5:40:bc:
0d:a6:ea:bf:ff:05:23:e2:82:96:8d:31:04:d5:6f:54:a0:87:
14:28:95:68:74:3c:0d:c3:5f:c6:52:7a:2f:3a:a2:18:ce:a7:
4d:74:26:0f:95:59:ba:7e:a1:16:a9:ed:b3:21:26:d8:d1:7a:
b4:3b:f6:ef:f1:66:d5:2d:a3:c2:11:9b:7d:6f:82:d8:97:63:
15:b9:e1:4b:56:b0:02:a4:25:55:f0:9c:5a:10:30:d3:3c:ea:
a6:98:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:20:52 2025 by rpki-client