Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
File: czFVtC-vxzVab8gJx9nM9bL4zcI.mft (raw, json)
Hash identifier: 9SXx2FiRxSZbRihDXlv1YCR0rz5jBcDCZkgmlfEjrX0=
Subject key identifier: A8:D4:C5:97:D0:37:76:1F:A3:AF:2B:5B:70:60:B8:06:34:89:8B:C5
Authority key identifier: 73:31:55:B4:2F:AF:C7:35:5A:6F:C8:09:C7:D9:CC:F5:B2:F8:CD:C2
Certificate issuer: /CN=733155b42fafc7355a6fc809c7d9ccf5b2f8cdc2
Certificate serial: 019847E55427325CCD330DD97AC773D10EE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
Manifest number: 0528
Signing time: Sat 26 Jul 2025 18:01:08 +0000
Manifest this update: Sat 26 Jul 2025 18:01:08 +0000
Manifest next update: Sun 27 Jul 2025 18:01:08 +0000
Files and hashes: 1: czFVtC-vxzVab8gJx9nM9bL4zcI.crl (hash: hIR6VbsmXulX0weENSanT8XQ5w/fI442SzQCJoz2FP8=)
2: l0CnYB9TqdwdMbmMIDN6gmU04y4.roa (hash: uHgPuHlAwsjfMv6nb8pkc75mAM6+gk2FAGFMxkvLSjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:54:27:32:5c:cd:33:0d:d9:7a:c7:73:d1:0e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733155b42fafc7355a6fc809c7d9ccf5b2f8cdc2
Validity
Not Before: Jul 26 18:01:08 2025 GMT
Not After : Jul 27 18:01:08 2025 GMT
Subject: CN=a8d4c597d037761fa3af2b5b7060b80634898bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7d:cf:10:d4:5e:63:0d:66:6c:4e:db:87:e0:
79:06:3d:b9:22:f3:d6:68:13:f4:ee:2a:03:d5:fe:
46:9f:be:62:8f:9f:33:3d:5c:b8:80:e5:ed:b6:c4:
00:33:53:75:1d:bf:86:f6:d4:92:2b:12:3c:81:fd:
d9:a0:86:94:7e:ce:4e:08:d2:c3:b8:08:f6:7b:ff:
2c:7f:3b:cf:d5:da:0a:35:d2:e2:ce:71:e9:a9:c3:
bc:91:b7:26:da:f7:ee:0a:95:38:12:88:d5:3d:b1:
ea:2e:b6:f7:bf:c3:74:d6:df:d4:68:83:52:c4:9c:
dc:a9:a5:26:cb:d4:61:91:18:96:cf:4f:3f:09:0c:
43:42:46:90:db:e4:76:12:9c:c1:65:c9:a6:9d:26:
c0:34:44:88:73:78:c9:c4:84:a8:cf:0a:fa:30:49:
77:f3:6d:8f:5f:d3:ea:13:97:54:b4:73:1c:46:53:
af:82:0d:c1:de:c2:78:a0:4c:42:8f:98:e1:1e:39:
a7:51:d6:eb:ec:c8:42:97:1a:4e:0a:0a:4e:6c:95:
54:58:12:8b:56:63:6c:5a:f2:91:a6:69:61:08:3a:
02:2e:b1:5f:89:22:cf:b6:af:9d:52:ac:ea:c2:be:
6b:b7:33:f6:21:07:62:50:b6:61:3e:dd:cb:3d:75:
9b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D4:C5:97:D0:37:76:1F:A3:AF:2B:5B:70:60:B8:06:34:89:8B:C5
X509v3 Authority Key Identifier:
keyid:73:31:55:B4:2F:AF:C7:35:5A:6F:C8:09:C7:D9:CC:F5:B2:F8:CD:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a9:b1:7a:84:37:56:79:4f:10:79:8d:f2:06:1c:a5:55:c5:
c8:bb:17:c1:8f:03:3b:e8:b5:3d:7c:f6:63:74:a9:d5:79:90:
82:85:9d:50:3e:45:71:76:7b:9f:a8:cd:92:a6:aa:86:07:b5:
0f:fa:11:1a:dc:b7:be:54:22:49:5d:a1:e9:37:3c:2c:8a:f5:
9d:dd:b2:15:de:a9:58:9a:c1:b1:81:78:54:3c:4d:4d:6c:03:
28:f5:19:bc:ad:4f:73:b6:87:2f:55:bc:55:ac:b4:ba:d5:68:
13:b4:48:77:04:22:6f:c9:9b:f0:7d:fb:22:4a:21:f6:34:8a:
0d:11:58:a2:19:ba:8a:4a:f1:00:ca:d4:f1:af:0f:f4:1a:66:
0f:13:7d:f2:16:1c:1b:67:eb:02:5d:e0:f3:2b:43:19:d2:14:
5d:26:e2:18:70:53:83:cf:30:13:c3:2e:6f:5f:47:70:6e:f2:
80:68:0a:31:22:52:0d:d0:e6:79:9d:b0:46:e1:d6:58:9c:5f:
fb:cb:4a:7c:9c:fb:9a:69:cd:08:da:ac:26:8d:99:42:7e:39:
7c:86:d5:26:63:50:82:91:a9:40:c4:ab:6d:ad:30:b1:fe:9a:
b1:40:8c:c4:18:fd:6c:55:58:0a:04:78:6a:31:7f:1b:96:6a:
26:9e:22:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:53:40 2025 by rpki-client