Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
File: czHb7QiXzOhcFINxtHzIB4Ll5ys.mft (raw, json)
Hash identifier: ffWHE4LU3L1x3mpCeCPXUzW2oRf7FzvJFwHDETYk5Dc=
Subject key identifier: 5C:F0:54:06:BD:40:61:92:6F:BD:66:61:38:8A:2F:40:D1:C3:93:B8
Authority key identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
Certificate issuer: /CN=7331dbed0897cce85c148371b47cc80782e5e72b
Certificate serial: 019836169E6BDE7BF29299C5EC4E28BF119D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
Manifest number: 04E7
Signing time: Wed 23 Jul 2025 07:01:48 +0000
Manifest this update: Wed 23 Jul 2025 07:01:48 +0000
Manifest next update: Thu 24 Jul 2025 07:01:48 +0000
Files and hashes: 1: czHb7QiXzOhcFINxtHzIB4Ll5ys.crl (hash: dV9wcsQUz+aV+7okHnxWTafRoDly+mUF9lRhClecttU=)
2: x22xk2A-Apb8dLpmSadyKyJCkDo.roa (hash: gu74rPveiHXJ2A/NDXg+xf+4EJriNsSl+5m/7KHQAxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 06:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:16:9e:6b:de:7b:f2:92:99:c5:ec:4e:28:bf:11:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7331dbed0897cce85c148371b47cc80782e5e72b
Validity
Not Before: Jul 23 07:01:48 2025 GMT
Not After : Jul 24 07:01:48 2025 GMT
Subject: CN=5cf05406bd4061926fbd6661388a2f40d1c393b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:fa:19:56:00:4c:49:a2:09:ec:1f:82:76:
01:e1:2f:c7:82:e7:5f:aa:38:b2:f8:ea:e9:e6:6d:
ca:d5:36:5b:52:7a:20:50:6a:21:ea:d5:e4:8d:5b:
bb:11:28:5d:ac:f2:d6:e3:4a:87:19:36:a4:eb:67:
3b:63:f7:87:cd:4d:40:34:36:01:c0:a8:5a:4e:6f:
13:11:46:9d:14:5f:0c:b7:b3:46:4c:33:54:6f:1f:
c9:32:3a:20:52:3e:c3:4c:66:29:45:87:15:42:a6:
f9:4d:24:5b:63:25:61:d6:78:7a:56:3e:8b:fa:b7:
7b:e1:47:28:a3:38:64:2a:b2:41:09:84:2a:a6:4e:
20:3e:8b:5e:da:19:ad:b4:e4:9a:93:d0:48:fd:8b:
09:84:f7:01:2a:7a:99:29:28:ce:f8:38:96:d5:d5:
bf:36:ae:66:79:d1:92:c3:a9:64:69:63:99:cb:4a:
25:8b:60:fe:3f:bb:ec:61:00:a4:31:f0:ed:09:ed:
2f:3f:5e:70:37:12:8d:e2:57:34:54:a7:1b:8c:9e:
77:74:81:14:06:c4:8b:b1:61:76:69:a4:f0:0d:71:
42:61:b1:a9:8f:e0:00:fb:4d:0b:e0:ae:62:bd:16:
fc:65:70:52:ba:82:96:e0:33:b6:23:05:24:11:bf:
56:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F0:54:06:BD:40:61:92:6F:BD:66:61:38:8A:2F:40:D1:C3:93:B8
X509v3 Authority Key Identifier:
keyid:73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:fc:7d:4c:31:47:fa:0f:fc:00:ca:cb:03:69:55:5a:0d:f1:
3e:e8:a4:b8:61:62:6f:06:43:82:33:24:fa:0f:ff:dc:3d:af:
27:a0:8a:94:ce:1c:9c:af:a4:4d:01:e2:61:69:6a:41:1a:bf:
a1:a3:59:82:61:c5:09:4c:2e:fa:65:fc:6c:bb:ce:f4:59:d8:
fc:e4:16:11:80:cf:09:ed:40:2e:28:a8:ed:a7:99:64:2a:31:
06:f8:dd:19:d2:b6:a1:52:7b:c2:6d:1c:ce:fe:f1:a5:7d:da:
c7:70:48:6b:0f:0c:01:bc:a7:f9:eb:cd:bc:d3:48:27:61:11:
e4:95:53:65:c7:c7:37:22:8f:a9:37:78:d0:48:52:64:19:4a:
dc:a7:86:7b:cd:46:06:e9:cb:fe:d1:f0:f7:50:f0:50:e3:b7:
c7:55:f6:bd:40:6c:f4:f2:fe:14:f2:57:c2:77:75:45:63:fd:
5e:78:0b:7e:e3:d2:52:fb:17:79:89:1d:dc:ba:b0:ba:12:2a:
d2:bf:53:49:4c:81:8a:29:35:0a:fb:54:1f:b1:3a:d8:13:32:
52:f9:36:af:31:ba:66:13:6c:aa:84:b1:90:3d:b4:a2:47:fc:
c9:2d:a2:ab:ab:84:11:30:a1:ea:95:5e:e7:72:dd:9b:c2:32:
01:f0:6c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 07:54:46 2025 by rpki-client