Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
File: CzAFeBftL9lZWEYyD9uBTJ_EShM.mft (raw, json)
Hash identifier: 4IxhJTcdswxIT+P59E94PjCncE30lenLVd0OEMvhRnc=
Subject key identifier: 02:7B:D1:41:47:F1:3A:E4:F1:D2:B9:06:3A:FE:37:3E:26:A1:31:9C
Authority key identifier: 0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
Certificate issuer: /CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Certificate serial: 0199FB7C91DD113111FA7DEEC1178721BC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
Manifest number: 80
Signing time: Sun 19 Oct 2025 08:01:08 +0000
Manifest this update: Sun 19 Oct 2025 08:01:08 +0000
Manifest next update: Mon 20 Oct 2025 08:01:08 +0000
Files and hashes: 1: 5rGgrqdPoueZL9n49lewJLQalrU.roa (hash: TQRxGNLMYQGT2NG1xMafNXAuCm7U0yoBgbBdMTpn79I=)
2: CzAFeBftL9lZWEYyD9uBTJ_EShM.crl (hash: qc7QbkGAXcE5UfrLEBJezAPXiUEtbbNRTWP1XtyNwv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:91:dd:11:31:11:fa:7d:ee:c1:17:87:21:bc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Validity
Not Before: Oct 19 08:01:08 2025 GMT
Not After : Oct 20 08:01:08 2025 GMT
Subject: CN=027bd14147f13ae4f1d2b9063afe373e26a1319c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:8c:f9:1c:12:55:9e:f6:d1:f2:13:6f:c8:
b6:be:d3:60:17:1b:64:f1:d2:76:48:1b:ad:1a:16:
c4:6f:70:57:80:88:7c:d7:0d:d2:22:a9:1e:cd:6f:
8c:d6:ce:5f:67:7f:1e:a2:3e:26:cd:08:ff:dc:ce:
30:60:9f:ed:11:03:9a:78:b2:1f:0e:c1:59:8a:68:
c4:42:24:b4:e7:c8:4e:d8:1a:ad:0e:8f:0f:5f:dd:
bf:ec:60:98:d9:09:b5:76:aa:e0:08:9b:bc:74:9d:
ab:70:8d:7c:46:43:16:c1:ab:fc:0d:12:5a:6d:f7:
7f:e2:ff:f6:4c:5f:bc:73:09:18:f2:2e:65:ac:a2:
6a:ce:1a:33:11:95:ab:f8:46:cd:c6:b8:63:5e:c8:
72:c9:60:58:95:e3:63:78:0d:4a:d8:8d:dc:5e:f1:
98:e2:43:44:0b:6a:b6:5a:e5:d1:b1:0f:71:8f:68:
78:66:ed:23:bb:c4:95:a5:9d:eb:30:a2:fd:dd:00:
f7:f1:35:8b:5a:2e:68:97:8c:18:50:39:fc:b8:8c:
61:58:b6:63:fe:0d:8d:c1:70:42:58:f6:f1:89:72:
ef:d1:dd:b6:22:b6:19:86:bd:ba:52:b3:25:fc:67:
9e:3b:d7:0a:b0:6e:74:a3:ca:d9:a3:7b:db:4e:4c:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7B:D1:41:47:F1:3A:E4:F1:D2:B9:06:3A:FE:37:3E:26:A1:31:9C
X509v3 Authority Key Identifier:
keyid:0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:25:4e:2f:a8:d8:de:dd:e9:d1:3c:64:43:90:ae:70:3b:04:
45:47:f4:88:72:21:94:c2:5f:1d:ce:de:1f:11:bb:ff:be:fb:
3a:cc:af:fb:de:c5:55:a4:73:58:f1:b9:18:cb:5e:d6:d4:79:
87:76:7f:5b:31:94:c1:c3:c1:2a:eb:9f:91:11:f9:94:9b:53:
60:ab:97:5a:1d:0f:98:62:cf:c7:3d:bd:bc:63:b3:bb:65:4f:
3d:65:50:1e:65:ac:8e:cd:1b:e4:9a:ae:1b:8c:60:99:a6:97:
bd:24:4d:2b:cb:86:27:17:39:4a:01:f2:98:f8:eb:36:c6:48:
1c:bc:22:ed:48:37:f7:d3:c7:0b:c5:5a:f9:3f:08:26:64:61:
0e:05:f4:a6:ad:6b:8b:29:96:58:2a:8a:46:52:9c:b5:72:dd:
fc:49:b4:87:84:8a:ee:1b:0b:84:14:1a:ea:d1:75:48:b2:74:
9c:aa:52:4b:50:8f:99:d6:40:b6:1b:ea:a5:b2:14:ae:2d:1d:
d8:fe:ba:4e:cb:4d:ef:07:64:f2:aa:9e:5f:e2:1d:90:ba:a4:
eb:f3:53:57:1c:0d:93:df:b5:b1:a7:cc:d6:7e:dd:b6:ea:53:
ba:32:57:8f:e9:43:54:d6:a6:13:d6:70:5a:47:01:37:42:49:
bb:5f:68:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fJHdETER+n3uwReHIbwXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzAwNTc4MTdlZDJmZDk1OTU4NDYzMjBmZGI4MTRjOWZj
NDRhMTMwHhcNMjUxMDE5MDgwMTA4WhcNMjUxMDIwMDgwMTA4WjAzMTEwLwYDVQQD
EygwMjdiZDE0MTQ3ZjEzYWU0ZjFkMmI5MDYzYWZlMzczZTI2YTEzMTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIeM+RwSVZ720fITb8i2vtNgFxtk
8dJ2SButGhbEb3BXgIh81w3SIqkezW+M1s5fZ38eoj4mzQj/3M4wYJ/tEQOaeLIf
DsFZimjEQiS058hO2BqtDo8PX92/7GCY2Qm1dqrgCJu8dJ2rcI18RkMWwav8DRJa
bfd/4v/2TF+8cwkY8i5lrKJqzhozEZWr+EbNxrhjXshyyWBYleNjeA1K2I3cXvGY
4kNEC2q2WuXRsQ9xj2h4Zu0ju8SVpZ3rMKL93QD38TWLWi5ol4wYUDn8uIxhWLZj
/g2NwXBCWPbxiXLv0d22IrYZhr26UrMl/GeeO9cKsG50o8rZo3vbTkxWdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJ70UFH8Trk8dK5Bjr+Nz4moTGcMB8GA1UdIwQY
MBaAFAswBXgX7S/ZWVhGMg/bgUyfxEoTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pBRmVCZnRMOWxaV0VZeUQ5dUJUSl9FU2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wZjA4N2ItNzI1My00NjFlLTkwMjEt
OWE5MTIxOWYwNmUxLzEvQ3pBRmVCZnRMOWxaV0VZeUQ5dUJUSl9FU2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8wZjA4N2ItNzI1My00NjFlLTkwMjEtOWE5MTIxOWYwNmUx
LzEvQ3pBRmVCZnRMOWxaV0VZeUQ5dUJUSl9FU2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCVOL6jY
3t3p0TxkQ5CucDsERUf0iHIhlMJfHc7eHxG7/777Osyv+97FVaRzWPG5GMte1tR5
h3Z/WzGUwcPBKuufkRH5lJtTYKuXWh0PmGLPxz29vGOzu2VPPWVQHmWsjs0b5Jqu
G4xgmaaXvSRNK8uGJxc5SgHymPjrNsZIHLwi7Ug399PHC8Va+T8IJmRhDgX0pq1r
iymWWCqKRlKctXLd/Em0h4SK7hsLhBQa6tF1SLJ0nKpSS1CPmdZAthvqpbIUri0d
2P66TstN7wdk8qqeX+IdkLqk6/NTVxwNk9+1safM1n7dtupTujJXj+lDVNamE9Zw
WkcBN0JJu19oLw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:55 2025 by rpki-client