Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
File: CzVgh8IMejJUFv2oA8t289p5R6k.mft (raw, json)
Hash identifier: rOwVJMZwzCKO5zuAGQEl7GfbVXAjY5dp14ImGIgqhB4=
Subject key identifier: 34:D1:43:E3:20:AE:B5:38:BE:6E:77:29:22:1C:68:60:A0:FA:DB:38
Authority key identifier: 0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
Certificate issuer: /CN=0b356087c20c7a325416fda803cb76f3da7947a9
Certificate serial: 01995CE97CCF6BBF3765EE9CE51FF60CF9F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
Manifest number: 0419
Signing time: Thu 18 Sep 2025 13:00:29 +0000
Manifest this update: Thu 18 Sep 2025 13:00:29 +0000
Manifest next update: Fri 19 Sep 2025 13:00:29 +0000
Files and hashes: 1: CzVgh8IMejJUFv2oA8t289p5R6k.crl (hash: RfrsW33T/kIv4JCsI+9TdZkujCm/APDqG/vEN7kzkFg=)
2: VWgiKeUlZyr_tkfBtwpTnh3j5es.roa (hash: F+rSoMMmSh1ZRMmb8OY6V8ChtegfB1X8DkMugPNoNpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:e9:7c:cf:6b:bf:37:65:ee:9c:e5:1f:f6:0c:f9:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b356087c20c7a325416fda803cb76f3da7947a9
Validity
Not Before: Sep 18 13:00:29 2025 GMT
Not After : Sep 19 13:00:29 2025 GMT
Subject: CN=34d143e320aeb538be6e7729221c6860a0fadb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f5:f1:70:88:59:01:d9:72:4a:98:23:86:86:
60:e3:1d:d4:84:9d:55:5d:a2:bf:ee:b4:77:98:2b:
7e:ec:ee:8c:52:54:68:af:92:a6:52:68:13:11:02:
e5:c8:23:45:15:85:a9:4b:fb:c1:ec:dc:ef:90:e1:
ce:2f:7d:cb:69:7a:ae:04:d2:95:79:9b:fd:a0:b9:
1d:2e:0c:60:46:66:5c:cb:6c:db:80:95:2c:bc:81:
17:96:0a:be:cb:3c:56:12:ff:2c:df:51:e7:13:ea:
9d:c5:ca:e3:04:ac:d4:a0:3f:43:e7:50:49:a3:a8:
83:bc:6c:bc:80:a6:4b:e0:fd:74:ae:ac:c9:bc:39:
33:b5:b7:18:86:77:13:48:81:05:95:44:2c:d1:d4:
09:cb:17:c3:3a:b7:03:eb:33:37:45:0e:47:3d:b1:
3c:73:56:14:a7:1a:43:bf:5b:c1:bc:6c:23:0c:c0:
e3:61:c7:0a:6c:23:92:4a:70:8e:ea:63:59:b5:c3:
1a:f0:d4:9f:de:eb:ea:c7:9e:5c:39:c8:a0:1b:81:
56:8b:52:e4:b5:2f:ab:2f:96:9f:41:91:6c:1e:4a:
0d:bd:71:b9:17:b6:31:bf:23:d8:a8:bf:06:5b:37:
9c:df:1f:a0:6a:7a:95:ac:0b:8f:23:d3:e6:80:e7:
43:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D1:43:E3:20:AE:B5:38:BE:6E:77:29:22:1C:68:60:A0:FA:DB:38
X509v3 Authority Key Identifier:
keyid:0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:cb:74:19:8e:8f:11:c4:50:77:2c:58:49:e1:52:43:4b:ff:
80:fd:bc:8f:fe:b9:77:d3:e3:e3:51:e3:55:6a:46:d7:f4:0a:
ed:b2:cb:6b:3c:07:2a:44:9f:cf:9b:e9:e6:b4:ca:41:72:98:
c4:a1:0c:29:3d:3b:05:6f:1e:bf:dc:59:dd:af:54:22:f3:5e:
f0:c5:c6:f2:71:4e:4d:7b:18:6e:23:26:c1:2d:2f:27:d1:ef:
e7:5a:76:12:09:90:d0:a0:d0:9e:ad:0b:42:80:d8:d4:a7:30:
ff:4b:e6:bf:32:f9:1e:cd:b0:4e:15:7e:fa:07:e9:7a:d9:ee:
e0:5c:80:7d:6f:da:b6:8b:c9:e3:a4:11:fd:37:f5:5d:e3:25:
74:c6:5e:a9:3e:96:78:78:7e:e2:44:ca:88:79:6b:c3:32:9e:
d8:c8:d6:ea:85:4f:27:a0:5a:31:99:e6:e9:ea:a5:2c:24:d5:
f1:29:a8:13:0f:83:88:70:10:1c:30:8c:2d:a2:27:f1:9f:8b:
18:42:23:a9:fa:3e:55:ab:1e:fb:f2:28:2b:79:15:74:cb:ab:
fc:2b:61:1c:63:28:55:3f:68:b9:a4:50:c9:e8:e7:e1:5b:83:
64:14:76:fd:fc:e9:35:f1:75:b4:26:85:5d:f4:e1:92:3d:a1:
f3:a1:83:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 19:07:50 2025 by rpki-client