Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: 1F4nSMncQGlnaLgL5f1Hynq4BU7gAEu0Kk1/Kt1nZ9w=
Subject key identifier: 58:72:1F:7A:53:3C:DA:19:FA:B5:4B:52:CF:2D:4F:9C:B0:F7:81:89
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 019A0B5E1AB06287E52276ADA570CCBF6D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 1329
Signing time: Wed 22 Oct 2025 10:01:47 +0000
Manifest this update: Wed 22 Oct 2025 10:01:47 +0000
Manifest next update: Thu 23 Oct 2025 10:01:47 +0000
Files and hashes: 1: 4c8--QgXbx8QC_JFp2ao9vSi3cQ.roa (hash: 9rzljFXZsljfliBgRYCkXTC5VYqcqhOIMYMb68KvfKw=)
2: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: notapBhiS3S2h1fo/ntBHAW5eza1egm3UXRUlCKpJRE=)
3: vxv8ENh4EI_tMsSJTaREb1s4HS4.roa (hash: s6edGTCnGf7BmNVSJxjNDIf8u6heNhTcAFkCRw0VThE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5e:1a:b0:62:87:e5:22:76:ad:a5:70:cc:bf:6d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Oct 22 10:01:47 2025 GMT
Not After : Oct 23 10:01:47 2025 GMT
Subject: CN=58721f7a533cda19fab54b52cf2d4f9cb0f78189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:71:0c:a1:2b:1c:b7:8d:2d:b2:1b:a2:6a:
eb:a7:5b:77:8b:fd:f2:d2:7f:8e:07:64:4c:11:3d:
07:48:75:da:d2:24:81:ea:f6:b0:f6:34:0d:31:c3:
f9:6a:95:78:f1:c1:ee:78:42:55:d7:44:93:f5:8f:
5f:75:d4:64:1b:7c:05:47:fd:46:b1:13:e0:d6:0a:
cb:32:54:3b:00:05:eb:37:47:6a:32:82:e6:d8:3a:
82:90:cc:cf:e2:f0:db:52:86:1b:e4:c5:6d:30:a8:
d3:b2:79:9a:ad:5c:09:7f:d9:ec:79:01:c6:31:54:
a5:1a:5c:c0:d9:25:3a:34:1e:f0:be:f6:be:26:74:
f7:77:68:0c:d7:4f:22:35:e7:d6:9f:84:c8:13:33:
e8:8c:a6:5b:78:3c:55:83:fd:b8:76:30:1c:a1:96:
81:8f:b4:76:3b:56:75:51:1c:88:a3:e9:6e:8f:0c:
1d:40:e9:01:d9:20:98:ee:0f:d0:66:7d:0b:23:5d:
4f:82:19:ab:6e:35:8c:cd:95:72:db:94:e4:e8:a3:
23:b0:c9:3d:c2:f9:9e:b4:1a:f1:c1:c8:e8:87:92:
6d:da:9b:f5:b3:72:5d:83:6f:62:73:6c:b0:06:59:
57:04:bc:46:ff:7b:3b:1a:cd:22:b6:0e:e9:a2:b3:
7c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:72:1F:7A:53:3C:DA:19:FA:B5:4B:52:CF:2D:4F:9C:B0:F7:81:89
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:71:a2:b5:0a:6a:56:34:f1:f8:89:14:b9:00:ee:66:eb:a3:
5b:4c:a0:67:a9:98:32:18:f1:8a:bc:6a:5f:a7:79:1b:e8:e0:
2d:2a:16:60:2b:3e:9b:50:b9:b7:24:fb:2e:ae:8d:2f:40:2e:
da:f9:5d:a7:7d:d6:04:10:f1:1e:93:b3:f7:c3:17:35:2c:b1:
ab:d5:20:2f:34:47:dd:0b:ba:86:c3:66:b7:83:15:5c:3a:06:
17:9c:8e:44:0c:bd:5b:4e:71:4c:cf:02:66:a9:6a:c0:2c:65:
cc:39:66:38:ae:6f:e9:33:6d:2b:3b:d0:04:da:94:59:65:a2:
de:c1:f0:5e:4d:fe:a0:3f:e2:47:1d:fa:e9:dd:89:d6:a0:3a:
88:ce:5b:5a:46:3d:78:ef:08:7f:4c:77:4f:f6:61:53:42:41:
94:62:4f:af:7a:7e:50:77:b2:81:0d:6c:fd:d2:2e:2b:9a:70:
1c:84:1c:d2:14:f6:fb:24:5b:da:60:9d:f7:9a:32:67:70:85:
45:57:ca:a0:91:99:84:40:46:25:34:07:c3:2b:23:80:79:e6:
49:78:a4:9d:36:80:7c:0a:8b:1e:79:d4:62:88:73:cf:5a:32:
ea:77:23:b1:93:1b:2c:2d:c1:db:56:b0:ab:e1:1b:1e:62:08:
bc:5e:98:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 13:43:31 2025 by rpki-client