Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: zrFdcxmkO+GvmwrkqcO2cYNt2HZqEdSbrjN3PreiIYU=
Subject key identifier: 35:DC:2B:B8:BF:7C:15:71:47:24:64:29:6F:B1:89:8E:8E:F8:78:80
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 0198499C3B772A1B51036EA9CF7A5167FD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0823
Signing time: Sun 27 Jul 2025 02:00:32 +0000
Manifest this update: Sun 27 Jul 2025 02:00:32 +0000
Manifest next update: Mon 28 Jul 2025 02:00:32 +0000
Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: NlIeajCQ+jzWnI2s+1LzCwGVtVXzLs6gSwodBEcckb4=)
2: RQEsj5U6gDhjJcVy0TlXi-Wv0Jw.roa (hash: 5spwbq7vTMKhgpfXnPqWkbfUupwJGaz4yD3OLMK3ImM=)
3: euzuAPfeJuv2-cm-rKuGKDxPe8I.roa (hash: 96LpiX/MLfmTkOgA68PX4zJcqAm4CD3qIp5sMcLFqNU=)
4: uqI-e9Q5-oja9rvPU1QcSBBgp4Y.roa (hash: RtcbvrEpnnUY7EwUTMkcJmd+p3YJpS4SOiugiRag4tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:3b:77:2a:1b:51:03:6e:a9:cf:7a:51:67:fd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Jul 27 02:00:32 2025 GMT
Not After : Jul 28 02:00:32 2025 GMT
Subject: CN=35dc2bb8bf7c1571472464296fb1898e8ef87880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:c3:18:5e:d6:85:15:b8:54:7a:c1:ef:99:
e6:b3:ee:59:e2:07:e9:d8:ae:c4:2e:74:3f:61:62:
cf:99:4f:fd:df:f1:cc:cd:cf:a2:b8:0b:f9:e9:f9:
f3:27:29:bb:ab:8d:a7:c5:86:df:e2:1b:9e:c1:f2:
b2:4a:84:51:db:08:5f:1a:e6:41:d2:13:9a:cd:0d:
1c:1e:b6:2e:5a:98:43:b7:76:b3:4b:a6:2b:54:79:
55:7c:7c:87:49:a0:df:35:34:98:71:09:4f:f0:02:
59:3c:5f:11:8a:a3:33:70:c7:e9:0e:c4:0c:1c:e5:
7c:58:18:22:4e:7f:8d:e9:d4:64:65:06:42:84:6e:
66:f9:37:d7:31:fa:6e:71:18:23:f7:5f:4d:19:0a:
de:6a:c9:ef:a3:a8:a0:be:8a:f4:86:98:d7:aa:3f:
44:ee:03:0f:af:69:95:05:98:2c:d2:da:b9:d5:dc:
93:f3:97:2d:85:3f:d9:e5:04:ba:9a:65:f3:01:f0:
a3:af:6b:0f:f6:32:31:e2:f9:11:e0:ca:d6:2a:e5:
b5:11:35:86:20:20:19:66:ee:0c:9b:0f:db:c4:90:
b0:f6:67:a6:6a:90:3d:60:ab:f9:14:e3:59:52:d7:
25:d4:03:e5:be:30:31:7e:0a:e4:8a:17:60:4d:7f:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DC:2B:B8:BF:7C:15:71:47:24:64:29:6F:B1:89:8E:8E:F8:78:80
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:be:64:d1:c4:6a:cf:b0:cd:e4:62:ca:51:27:0b:ab:ac:19:
b5:e4:03:33:e6:69:8d:34:0e:bf:c0:d8:12:9b:d9:af:c3:b2:
d5:c4:37:8f:0a:c5:a3:60:27:75:15:6c:0d:5b:e1:36:7a:f4:
a7:35:e7:24:6b:95:9a:2e:cc:52:6a:7e:dd:a5:39:53:7d:f2:
50:f8:f4:4f:e7:7e:35:d2:db:03:50:a1:d8:86:9b:a1:f1:57:
2d:b5:e7:df:56:8f:73:c3:87:5b:13:7f:a1:ed:05:f6:6f:8f:
ec:e7:b4:a3:d6:29:1f:62:89:3d:3a:76:9d:c8:18:57:91:2b:
87:25:4e:13:85:93:67:9a:80:18:71:42:52:22:eb:af:0a:46:
22:e3:d7:85:69:6c:1f:75:45:bd:1e:bf:ff:88:77:1b:e5:f2:
06:36:65:25:38:9f:20:6e:e5:9b:8e:79:98:06:f8:73:4e:6d:
9d:34:83:4d:b7:0d:b0:a0:a9:38:15:27:dd:d3:41:4c:20:08:
5d:e0:0e:e0:e6:37:cc:04:b6:0b:47:3b:a1:ef:d3:8d:17:90:
ff:d4:a6:f2:db:0c:df:6d:04:41:9a:cf:ef:36:74:16:20:c9:
e4:33:e0:f2:44:b5:6d:3b:93:a7:5c:85:00:85:97:2d:ca:23:
93:1d:11:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:37:31 2025 by rpki-client