Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: tlYp2D/44aeV/hjG96vfAmJmC1/KczYuJmVntBnOtGw=
Subject key identifier: 04:6B:26:15:C6:E2:4C:B6:0D:6B:6E:D0:FA:A4:40:FB:03:97:FF:82
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 01984965A1B881D9BAEDAF8674E3368B36BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 0738
Signing time: Sun 27 Jul 2025 01:00:53 +0000
Manifest this update: Sun 27 Jul 2025 01:00:53 +0000
Manifest next update: Mon 28 Jul 2025 01:00:53 +0000
Files and hashes: 1: 0o1YRHDHs6Y_Qq6pCAQcKlyWFz8.roa (hash: nsMIKNS3OeQBs34bWYRCT4THehdiZrvKLdywuELl5UY=)
2: U5txbLmFPtaoMKOU1TbkV_FaGV8.roa (hash: z+0QM51o7tqW6/RjLGXF1BwNrcfJdd2i6D7WxQKXfAc=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: nPH3FICrJbgfRviWDI6SKavhrN9cAk4CyK5PSyd03lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:a1:b8:81:d9:ba:ed:af:86:74:e3:36:8b:36:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Jul 27 01:00:53 2025 GMT
Not After : Jul 28 01:00:53 2025 GMT
Subject: CN=046b2615c6e24cb60d6b6ed0faa440fb0397ff82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:77:d9:28:d2:3b:ec:4a:ec:61:2a:71:93:2d:
a6:68:55:85:7f:00:83:bf:3e:89:0c:cc:43:f2:4f:
e5:22:9c:72:9b:96:d2:33:f9:a4:56:fa:6c:54:1f:
88:31:fc:43:54:61:6a:f3:14:5f:4e:b0:e1:2d:7a:
a7:25:99:60:e5:c8:a3:24:77:0b:77:40:7d:76:60:
94:18:00:25:62:65:5c:0b:5f:2d:de:9b:ee:44:85:
65:9e:02:dc:aa:d9:95:f4:15:c5:9c:5c:fb:b5:ba:
d4:1b:4b:cc:eb:3a:7a:3c:a8:e0:d7:66:59:b4:f3:
cf:5a:8d:96:ab:0e:2f:c7:99:96:fd:cc:91:de:7d:
f6:0f:ec:db:3e:26:de:f4:6c:e1:8d:8c:df:50:74:
43:06:d3:2d:19:b2:82:5d:80:35:f5:6c:09:e5:fe:
77:ad:61:af:04:02:a6:6e:cd:bb:71:62:e4:fc:f1:
58:e9:37:f8:aa:79:9c:7c:f9:8d:e1:da:18:22:df:
33:db:62:8a:a0:f9:46:d4:34:75:da:25:36:1d:a2:
37:ab:ee:12:1d:2e:8e:76:3c:c2:f3:bb:6b:3d:47:
58:86:45:ac:bc:57:c7:10:62:c2:93:5c:0e:53:7f:
00:d1:98:24:95:b6:7d:18:7b:75:76:ae:6d:53:af:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6B:26:15:C6:E2:4C:B6:0D:6B:6E:D0:FA:A4:40:FB:03:97:FF:82
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ae:15:62:2d:bd:f0:42:c5:60:8c:ce:55:55:0b:94:f7:7c:
d0:20:64:37:72:85:a1:03:00:ff:24:e7:19:f9:8a:81:75:36:
82:16:a4:49:1c:fe:9a:de:5a:09:75:45:2f:f9:8f:95:a0:01:
49:87:f1:e4:ec:9f:dd:7d:fd:42:51:c4:c5:c6:7a:7f:89:ad:
17:45:b1:a3:8f:3c:5d:ad:23:b1:e5:db:69:2d:e2:22:54:7a:
7b:02:ed:b2:ea:21:e8:e1:e8:00:90:60:20:fe:11:8a:1b:5a:
be:f8:61:52:6e:00:ab:54:78:d9:e1:b1:bf:6a:a2:d3:99:b0:
4f:cb:44:71:7a:b8:91:a9:f6:fc:a8:e2:46:e5:5d:25:d9:dc:
98:d2:b1:83:64:66:dc:24:7e:27:81:a9:24:2f:88:75:fc:2d:
3e:90:c3:bf:b4:d6:34:66:e7:40:29:34:dd:69:c7:e1:96:e3:
b5:9a:d2:94:71:e9:23:2b:d9:94:f0:9d:ab:41:ea:37:67:26:
f6:68:5c:25:ef:6c:6c:b3:43:84:c4:f7:82:5f:3f:7d:08:80:
92:3f:92:42:31:79:cd:76:47:b1:99:99:ea:2a:74:44:ed:27:
f8:33:0f:71:46:23:42:18:6e:67:4a:f8:99:48:9c:b9:6d:83:
09:d3:5e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:28:14 2025 by rpki-client