Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
File: CzVgh8IMejJUFv2oA8t289p5R6k.mft (raw, json)
Hash identifier: fjJYaxbtw02fDOYCAOtEY5IxEvKQ88ivenPy/hk8bJw=
Subject key identifier: B5:F5:7B:64:85:7F:D3:70:09:3B:A9:25:C9:FE:2F:27:C8:5B:2B:05
Authority key identifier: 0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
Certificate issuer: /CN=0b356087c20c7a325416fda803cb76f3da7947a9
Certificate serial: 01984AAF28B565E25908E8AE39BACD532D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
Manifest number: 038B
Signing time: Sun 27 Jul 2025 07:00:49 +0000
Manifest this update: Sun 27 Jul 2025 07:00:49 +0000
Manifest next update: Mon 28 Jul 2025 07:00:49 +0000
Files and hashes: 1: CzVgh8IMejJUFv2oA8t289p5R6k.crl (hash: ZP94y4oHuCA/p/vLkbd4WgnD3NF0xxGAjjQYTjdL9VA=)
2: VWgiKeUlZyr_tkfBtwpTnh3j5es.roa (hash: F+rSoMMmSh1ZRMmb8OY6V8ChtegfB1X8DkMugPNoNpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:28:b5:65:e2:59:08:e8:ae:39:ba:cd:53:2d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b356087c20c7a325416fda803cb76f3da7947a9
Validity
Not Before: Jul 27 07:00:49 2025 GMT
Not After : Jul 28 07:00:49 2025 GMT
Subject: CN=b5f57b64857fd370093ba925c9fe2f27c85b2b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:54:61:b1:46:39:57:0b:97:0a:de:a3:f9:
65:28:7c:aa:93:a0:1c:4b:36:25:e2:7d:d2:cb:42:
d9:87:44:9a:a0:4e:2d:db:0e:87:54:be:40:a6:73:
4b:9f:4b:23:ec:c4:52:ab:10:6c:93:88:69:94:8a:
92:61:c0:f8:97:94:85:9f:d8:72:7a:36:7e:9d:24:
e9:c2:d7:81:57:76:8e:5c:53:75:05:48:7d:11:16:
1e:98:5f:14:fd:3b:50:3b:31:4f:e9:c7:b1:1b:5e:
82:43:65:ae:32:fa:6b:c4:12:f7:45:50:c8:8c:5c:
ff:91:a0:09:67:6c:5f:fd:cf:fd:08:69:c7:88:fd:
5b:8d:02:7c:d2:4b:37:ea:d9:dd:f8:6f:13:21:62:
d4:7c:3a:5a:33:c6:89:5d:8c:f0:d6:d5:7e:37:a9:
b0:42:59:43:d5:07:9e:1a:c6:b2:25:76:00:c9:80:
67:20:3f:d3:b9:18:c7:48:5f:31:66:c9:ee:ea:39:
49:9c:76:72:13:a9:60:d3:5f:98:3f:4f:17:7a:e8:
41:6c:60:d7:8d:89:d9:df:18:b3:19:5b:8b:ef:20:
e7:df:69:aa:01:2b:c2:73:6c:77:06:12:28:ad:11:
6d:7a:62:57:60:a3:c9:60:f2:35:ac:af:bc:44:a8:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F5:7B:64:85:7F:D3:70:09:3B:A9:25:C9:FE:2F:27:C8:5B:2B:05
X509v3 Authority Key Identifier:
keyid:0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5b:54:f9:9d:29:7a:ba:c6:66:aa:9e:d9:ca:94:43:9f:78:
d2:05:46:2a:bf:a5:d5:1a:1d:cb:82:24:60:de:e1:7b:a0:97:
d5:72:60:08:3f:d5:d5:51:04:cd:80:32:d4:3d:f6:5a:f5:75:
4d:2a:82:6a:01:f9:53:15:86:34:d0:d4:a5:2a:08:9e:2e:71:
84:43:a2:56:c8:87:44:2d:56:40:90:02:2a:b6:d7:b9:62:fa:
9e:2c:ab:43:20:97:c0:ac:5a:f3:49:93:e5:30:e6:75:85:a4:
a8:7b:c1:ef:ec:72:b6:47:15:9b:62:f7:cc:aa:7c:64:68:d2:
2f:b6:6d:d3:da:66:c8:36:96:17:bd:30:fb:b1:99:df:18:70:
ad:5a:89:02:6b:e9:08:34:77:f6:1c:0b:cc:a0:4c:6b:1b:15:
e0:6b:0c:ba:4d:d7:d4:67:b2:2e:bd:18:6e:1d:39:02:40:18:
58:ba:e4:9b:3a:34:38:3c:18:b0:e4:31:9e:59:80:89:30:e2:
e5:24:0b:05:c3:ac:6f:3d:11:6c:34:7d:5a:db:da:cb:08:40:
97:72:23:55:40:a3:cd:75:d7:8a:1a:54:3a:1d:52:b3:4f:9e:
94:95:9b:e7:fa:98:51:8a:21:2a:5a:20:df:b4:27:54:38:9e:
da:b4:0a:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKryi1ZeJZCOiuObrNUy0aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzU2MDg3YzIwYzdhMzI1NDE2ZmRhODAzY2I3NmYzZGE3
OTQ3YTkwHhcNMjUwNzI3MDcwMDQ5WhcNMjUwNzI4MDcwMDQ5WjAzMTEwLwYDVQQD
EyhiNWY1N2I2NDg1N2ZkMzcwMDkzYmE5MjVjOWZlMmYyN2M4NWIyYjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsidUYbFGOVcLlwreo/llKHyqk6Ac
SzYl4n3Sy0LZh0SaoE4t2w6HVL5ApnNLn0sj7MRSqxBsk4hplIqSYcD4l5SFn9hy
ejZ+nSTpwteBV3aOXFN1BUh9ERYemF8U/TtQOzFP6cexG16CQ2WuMvprxBL3RVDI
jFz/kaAJZ2xf/c/9CGnHiP1bjQJ80ks36tnd+G8TIWLUfDpaM8aJXYzw1tV+N6mw
QllD1QeeGsayJXYAyYBnID/TuRjHSF8xZsnu6jlJnHZyE6lg01+YP08XeuhBbGDX
jYnZ3xizGVuL7yDn32mqASvCc2x3BhIorRFtemJXYKPJYPI1rK+8RKiZhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLX1e2SFf9NwCTupJcn+LyfIWysFMB8GA1UdIwQY
MBaAFAs1YIfCDHoyVBb9qAPLdvPaeUepMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kN2NmOTQtYWM2MS00ZmJmLWFkZjAt
NTdlYWY4MzNhYjBiLzEvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9kN2NmOTQtYWM2MS00ZmJmLWFkZjAtNTdlYWY4MzNhYjBi
LzEvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFtU+Z0p
errGZqqe2cqUQ5940gVGKr+l1Rody4IkYN7he6CX1XJgCD/V1VEEzYAy1D32WvV1
TSqCagH5UxWGNNDUpSoIni5xhEOiVsiHRC1WQJACKrbXuWL6niyrQyCXwKxa80mT
5TDmdYWkqHvB7+xytkcVm2L3zKp8ZGjSL7Zt09pmyDaWF70w+7GZ3xhwrVqJAmvp
CDR39hwLzKBMaxsV4GsMuk3X1GeyLr0Ybh05AkAYWLrkmzo0ODwYsOQxnlmAiTDi
5SQLBcOsbz0RbDR9WtvaywhAl3IjVUCjzXXXihpUOh1Ss0+elJWb5/qYUYohKlog
37QnVDie2rQK8Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:18:19 2025 by rpki-client