Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
File: czaDy4VtbZ_1jih-ipBdKS3KazQ.mft (raw, json)
Hash identifier: 5oNO7Mm1mJpF2ejnDE+/zNFG4ubI0jSqPiQk+H3Nn5M=
Subject key identifier: D3:55:C3:A5:6E:28:92:CA:99:D1:B7:94:FE:31:15:2F:7E:CF:FE:03
Authority key identifier: 73:36:83:CB:85:6D:6D:9F:F5:8E:28:7E:8A:90:5D:29:2D:CA:6B:34
Certificate issuer: /CN=733683cb856d6d9ff58e287e8a905d292dca6b34
Certificate serial: 01984B53D0FC1113D465DAD1A49BF3801F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
Manifest number: 1247
Signing time: Sun 27 Jul 2025 10:00:40 +0000
Manifest this update: Sun 27 Jul 2025 10:00:40 +0000
Manifest next update: Mon 28 Jul 2025 10:00:40 +0000
Files and hashes: 1: 1VNg1Q5CgydMlZtkT2gUiwyQsB8.roa (hash: hFOtYhVCGxVTmNvasMZGAdD1D7TMmY398V7CPu+M+nU=)
2: czaDy4VtbZ_1jih-ipBdKS3KazQ.crl (hash: yoYXdHzQ4vPSJg7gYnDqqicAjBpAvRme/GCHHkAzKVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:d0:fc:11:13:d4:65:da:d1:a4:9b:f3:80:1f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733683cb856d6d9ff58e287e8a905d292dca6b34
Validity
Not Before: Jul 27 10:00:40 2025 GMT
Not After : Jul 28 10:00:40 2025 GMT
Subject: CN=d355c3a56e2892ca99d1b794fe31152f7ecffe03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:8f:66:90:67:45:3f:ec:f9:26:1c:2f:bf:
c4:87:73:ae:41:9d:ff:ce:3e:d1:8b:af:0a:ae:69:
7a:a1:76:ea:a9:42:fb:2f:72:2c:0d:12:80:45:d5:
19:32:04:1d:a5:e6:f4:0f:af:2d:32:a4:46:aa:c3:
a2:29:e7:2f:ec:7e:8b:52:79:b8:61:5b:2a:f8:3b:
16:ef:4e:56:1b:46:c7:d0:e9:56:a0:9f:0f:4e:6c:
f4:76:23:d0:46:03:d1:0f:9d:4b:64:ef:12:0a:36:
ae:7a:6a:9e:69:6f:bf:8d:6c:4e:73:fe:91:f9:52:
49:dc:dc:d5:a2:98:79:02:db:c0:19:61:dd:15:45:
a7:40:21:7a:8f:3d:82:2f:77:ee:54:a6:da:ae:ab:
62:2e:3a:cc:93:da:2f:9f:ef:8e:24:5d:23:dd:e6:
0b:aa:b5:46:b7:b8:e5:10:a8:fa:7b:eb:44:53:b1:
e9:a4:ea:8d:ff:e2:b0:d5:09:00:7c:b0:09:7b:f7:
49:50:cb:0c:5b:00:62:58:e4:c5:1e:58:35:b9:51:
53:9f:b7:d9:1a:e1:32:b5:6e:0c:ef:67:93:c8:6a:
8e:75:33:44:0a:16:20:4f:97:05:22:85:52:7e:6d:
e6:c6:0a:c6:13:f8:2b:65:05:76:4f:26:b4:90:17:
0b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:55:C3:A5:6E:28:92:CA:99:D1:B7:94:FE:31:15:2F:7E:CF:FE:03
X509v3 Authority Key Identifier:
keyid:73:36:83:CB:85:6D:6D:9F:F5:8E:28:7E:8A:90:5D:29:2D:CA:6B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e6:1a:57:01:09:39:77:49:7c:aa:02:99:93:8b:d1:46:03:
8d:9c:f7:0f:70:d0:e6:ee:a1:80:80:ea:19:0c:fb:9e:61:3d:
d1:51:80:60:37:4b:63:81:e3:83:24:59:0f:e3:66:3b:f5:0a:
39:ff:3f:97:ce:d8:5b:76:92:89:19:c3:3c:48:6f:fd:16:4f:
86:b1:2e:12:81:ec:b0:f6:e3:df:40:2c:6f:6e:c8:24:51:93:
4a:8f:d9:05:5c:a9:1b:84:25:96:77:e5:0e:20:95:70:a0:ba:
3b:cb:b9:47:e1:3a:aa:f1:3a:07:94:f0:e8:6b:52:bf:28:87:
60:d8:e2:63:5d:1f:04:b4:79:64:eb:16:6c:1c:aa:3e:96:3d:
35:fd:9e:7a:f0:30:77:3a:52:f6:82:d9:3e:65:6d:35:80:0d:
77:a9:cc:81:ee:a8:36:41:aa:26:5e:ca:99:7e:6d:e5:ef:72:
de:a0:d1:d1:97:6e:50:e2:c7:92:27:76:21:b9:fd:f3:4c:e9:
5f:a5:28:9b:fc:8e:bb:a9:11:6d:1b:25:b5:95:48:cb:b3:0f:
15:28:7e:d6:28:a8:5c:26:74:92:8c:54:be:83:ce:09:04:8c:
f5:45:7c:15:03:4b:6e:1e:87:11:a4:b9:2b:ac:1e:61:a4:18:
5d:dd:1c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:09:21 2025 by rpki-client