Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json)
Hash identifier: yVxfr7iIlF0aNK8kA//BIFzX4pg4FAAPa5oSl5rxlVs=
Subject key identifier: 80:76:BF:32:25:DD:82:1B:B0:3F:5F:AF:16:B5:A4:F9:1B:50:FD:13
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 019849D2E07C191C45E1F9F63FF49F2E8192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
Manifest number: 148E
Signing time: Sun 27 Jul 2025 03:00:13 +0000
Manifest this update: Sun 27 Jul 2025 03:00:13 +0000
Manifest next update: Mon 28 Jul 2025 03:00:13 +0000
Files and hashes: 1: 5MNHm2fG2K7ej_6HfywzVnWXnf8.roa (hash: a7dXOZ9Zvi0UjZGpNNuJ2dVdNWGu8ufMXG6I2NU70ow=)
2: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: FsHt2RuBCFz4xpTXdiDLxTvibVmWkKi/DEOHhiI0O/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:e0:7c:19:1c:45:e1:f9:f6:3f:f4:9f:2e:81:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: Jul 27 03:00:13 2025 GMT
Not After : Jul 28 03:00:13 2025 GMT
Subject: CN=8076bf3225dd821bb03f5faf16b5a4f91b50fd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:b3:75:c4:1c:ef:c2:5d:5e:69:28:17:3c:
f6:cc:d4:8e:9d:65:e9:db:4a:6f:6e:fa:35:4b:4c:
83:6f:8b:ed:a8:06:8e:33:b1:af:07:99:49:49:eb:
53:17:66:73:82:5a:ef:4d:88:68:96:cd:4b:7e:80:
b4:05:5d:34:d8:9a:6f:7d:9b:92:44:d4:b4:01:73:
e4:2c:32:a0:9a:37:fc:48:c3:50:93:14:91:d0:8a:
2c:5e:96:d7:56:e4:7d:e5:ac:9b:ca:ec:70:ef:ec:
0e:37:5f:94:58:41:8a:2d:16:c7:be:1d:3a:b2:a8:
9c:dd:6e:4d:8e:26:0f:ae:8d:39:9c:25:34:35:62:
dd:95:e0:d2:0c:67:8d:37:e1:58:0c:eb:07:77:e9:
a6:3e:25:07:4f:c6:16:d2:47:7b:6c:f6:f3:b4:1a:
29:ce:c7:cd:c8:9c:59:26:d3:fc:13:13:3f:50:01:
64:b4:dc:b9:20:5c:df:1a:97:03:91:87:92:d4:ad:
64:43:14:87:93:2c:88:38:1b:8b:5d:e1:8d:dc:cd:
7a:03:4c:d7:e4:ee:98:3a:fe:ad:4e:de:d8:0c:43:
f5:c2:c4:6a:7b:5f:15:bc:66:9d:19:74:0c:2a:ba:
b8:89:76:5c:32:16:7f:a5:2b:df:f4:b6:7d:ff:76:
c3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:76:BF:32:25:DD:82:1B:B0:3F:5F:AF:16:B5:A4:F9:1B:50:FD:13
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:30:8c:f9:cf:4c:92:f0:27:c7:84:66:de:0e:aa:13:ec:cf:
cf:33:f5:56:c9:58:ae:35:3f:9f:11:c8:6b:10:bd:bf:57:b4:
7f:eb:46:78:96:48:e0:a9:de:cd:3b:a2:4d:fe:e6:c6:8f:1c:
9b:c7:fe:7b:f6:22:6f:79:eb:54:bf:18:70:9b:d8:24:ed:6f:
4b:ba:17:b6:e6:e8:b2:6b:28:65:45:3f:14:0e:1f:a5:fb:fa:
1a:21:98:bf:65:01:9d:96:1e:5f:c2:68:a8:3d:3a:03:b0:90:
69:87:06:43:5a:ca:01:d1:63:ed:e3:13:e1:87:e0:a9:59:d6:
66:3b:ec:a3:68:94:0f:e9:36:ca:2f:f1:9a:03:c3:ae:8b:54:
a4:37:1b:87:c1:e7:62:0b:88:b5:cb:5f:0d:33:08:e2:3a:e8:
aa:e4:59:4b:f0:51:19:c7:ad:29:91:95:07:9e:76:19:43:f5:
af:04:3a:83:1a:38:48:02:02:00:5f:e5:81:a3:d1:77:f2:3e:
46:50:52:74:13:94:49:33:2f:a3:0d:6c:af:fa:08:21:7b:d2:
3b:50:ec:77:f8:aa:bf:71:f7:70:26:a2:26:1b:8e:1b:3f:6c:
03:80:ab:14:91:01:6f:58:5e:c8:09:10:01:02:6f:16:53:4a:
90:23:31:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ0uB8GRxF4fn2P/SfLoGSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzEyZmU5NzQ2NGJjMGU2YTFlZmZhMmYxYzg5NmY3YThh
MDI2NzgwHhcNMjUwNzI3MDMwMDEzWhcNMjUwNzI4MDMwMDEzWjAzMTEwLwYDVQQD
Eyg4MDc2YmYzMjI1ZGQ4MjFiYjAzZjVmYWYxNmI1YTRmOTFiNTBmZDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CuzdcQc78JdXmkoFzz2zNSOnWXp
20pvbvo1S0yDb4vtqAaOM7GvB5lJSetTF2ZzglrvTYhols1LfoC0BV002JpvfZuS
RNS0AXPkLDKgmjf8SMNQkxSR0IosXpbXVuR95aybyuxw7+wON1+UWEGKLRbHvh06
sqic3W5NjiYPro05nCU0NWLdleDSDGeNN+FYDOsHd+mmPiUHT8YW0kd7bPbztBop
zsfNyJxZJtP8ExM/UAFktNy5IFzfGpcDkYeS1K1kQxSHkyyIOBuLXeGN3M16A0zX
5O6YOv6tTt7YDEP1wsRqe18VvGadGXQMKrq4iXZcMhZ/pSvf9LZ9/3bDPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIB2vzIl3YIbsD9frxa1pPkbUP0TMB8GA1UdIwQY
MBaAFAsxL+l0ZLwOah7/ovHIlveooCZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODIt
ZmExYjU1NWRhYTkxLzEvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODItZmExYjU1NWRhYTkx
LzEvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTCM+c9M
kvAnx4Rm3g6qE+zPzzP1VslYrjU/nxHIaxC9v1e0f+tGeJZI4KnezTuiTf7mxo8c
m8f+e/Yib3nrVL8YcJvYJO1vS7oXtubosmsoZUU/FA4fpfv6GiGYv2UBnZYeX8Jo
qD06A7CQaYcGQ1rKAdFj7eMT4YfgqVnWZjvso2iUD+k2yi/xmgPDrotUpDcbh8Hn
YguItctfDTMI4jroquRZS/BRGcetKZGVB552GUP1rwQ6gxo4SAICAF/lgaPRd/I+
RlBSdBOUSTMvow1sr/oIIXvSO1Dsd/iqv3H3cCaiJhuOGz9sA4CrFJEBb1heyAkQ
AQJvFlNKkCMxtQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:12:16 2025 by rpki-client