Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
File: czmHDhAmLGcJt7YWNxNLX5pseMo.mft (raw, json)
Hash identifier: w2s/6WADnkJjWqmDcLafp3xGqZbSl0PFdVdIBxcQLPY=
Subject key identifier: 23:C8:3E:89:80:79:07:E8:8F:CC:16:0D:38:E0:57:DC:C0:76:2C:AC
Authority key identifier: 73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA
Certificate issuer: /CN=7339870e10262c6709b7b61637134b5f9a6c78ca
Certificate serial: 01984A7822C1BDE9504017E3B28E4F6AE195
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 06:00:43 +0000
Manifest this update: Sun 27 Jul 2025 06:00:43 +0000
Manifest next update: Mon 28 Jul 2025 06:00:43 +0000
Files and hashes: 1: PXbhZwxgnHhuLjwlWCx5dOlGReg.roa (hash: j01BLIn3vk3ptsAnq3fQBlO6Lv4NALx1Y8dTw8r7J30=)
2: czmHDhAmLGcJt7YWNxNLX5pseMo.crl (hash: hKQJdiCB6iR+zn0Zjlq+ib+nDNsZVaML9zECiR/h5AQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:22:c1:bd:e9:50:40:17:e3:b2:8e:4f:6a:e1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7339870e10262c6709b7b61637134b5f9a6c78ca
Validity
Not Before: Jul 27 06:00:43 2025 GMT
Not After : Jul 28 06:00:43 2025 GMT
Subject: CN=23c83e89807907e88fcc160d38e057dcc0762cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:40:b0:1d:50:71:3d:96:d4:19:bf:eb:f5:
88:39:5e:2b:68:1e:6c:34:b6:a9:8f:ec:34:e1:c1:
86:f9:a9:32:aa:9e:fb:86:01:00:7b:81:bb:b8:5e:
a3:f7:61:5e:4e:53:ea:80:2c:4f:8a:83:56:d1:fb:
ef:48:56:16:88:f8:a5:02:27:f7:90:6c:27:4e:27:
f4:7f:ba:ba:e1:1a:a6:ff:b0:e3:08:06:30:75:07:
92:2e:70:0c:28:b4:fe:72:e8:e2:7b:e2:7a:f8:03:
43:3e:fc:a4:5e:f1:aa:01:be:bb:b8:d3:fd:ad:9a:
60:7d:fe:3c:d4:27:3f:b3:7e:9c:a1:ab:70:c3:2c:
5e:16:61:03:d5:53:29:eb:f4:98:58:e0:32:ed:7b:
5a:0f:6e:e9:df:e8:21:fc:3c:36:4e:86:23:65:97:
7a:19:94:9b:de:97:71:9a:6e:e6:a0:fc:3a:17:2d:
c5:1e:1d:26:73:78:3f:61:f8:ab:c0:ee:a4:b2:45:
10:05:14:8e:86:b9:4a:53:09:27:fd:6c:dd:66:0b:
3c:d5:b7:2e:25:da:a5:6d:a1:42:ff:24:12:39:b6:
26:7b:ff:44:a3:d6:e8:f8:99:c3:94:4f:cb:88:08:
c4:ce:f6:f1:31:ad:64:c1:d0:24:c4:3a:9f:09:bb:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C8:3E:89:80:79:07:E8:8F:CC:16:0D:38:E0:57:DC:C0:76:2C:AC
X509v3 Authority Key Identifier:
keyid:73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:71:d8:ed:44:74:95:8a:c3:36:e1:1a:0d:b4:3e:c1:21:d3:
bb:80:8c:11:5e:a3:18:ea:9b:e9:da:7f:37:3a:1d:2f:c3:b1:
4f:be:ee:bc:33:c9:4e:b6:1c:06:f2:31:34:59:ac:c9:61:d0:
68:de:6b:7d:67:bb:bf:f4:15:0e:5b:bb:ad:d6:f3:2f:f0:f3:
2b:93:61:fb:15:88:74:0d:0d:48:b4:d3:04:d5:62:d2:42:d9:
a8:3d:47:65:5a:11:e0:ef:f8:a8:5a:b5:0d:61:50:dd:0e:84:
24:86:ee:9b:55:b3:79:cc:9d:a3:65:25:2d:61:9a:71:a9:f3:
8b:1c:6b:b4:08:e6:f0:c8:9d:8f:e7:b5:b1:62:a6:9f:13:b8:
63:c0:c3:34:99:ae:8a:0f:67:56:b9:b1:e4:28:7b:88:09:f2:
52:78:3e:f0:9f:c4:c2:d8:3e:30:35:33:7d:d9:2c:80:8e:4f:
23:7d:79:2c:73:a8:d1:03:f2:d0:dc:22:d1:f9:26:3b:76:22:
cc:f3:0b:4e:c8:14:8f:b1:69:2d:3a:1f:ba:b5:d6:bd:b0:8e:
15:6d:f9:55:2a:12:35:10:5a:f3:23:88:5d:5f:59:1e:a9:d5:
aa:f3:65:86:7b:e4:13:2f:88:b8:b9:1d:4d:4c:f2:0b:27:01:
9a:2d:85:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:06 2025 by rpki-client