Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: ehcB6cVBLFF7HynByDYBswcHjNAuPMnDYHYIh7JRutY=
Subject key identifier: 24:BD:55:6C:64:20:1B:D0:FB:A0:B8:0E:E8:50:51:7C:88:99:CB:4A
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 019A1A2B0879D5530892B15EB3BC1083F8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 16F1
Signing time: Sat 25 Oct 2025 07:00:19 +0000
Manifest this update: Sat 25 Oct 2025 07:00:19 +0000
Manifest next update: Sun 26 Oct 2025 07:00:19 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: JlWxfCZQFVWbqE+PEtTzoWLnHXP/ChGdaANWbgtpD4o=)
2: lhGz6B59KeMcscLlwP8SPnbuK40.roa (hash: XdPOOZD1AAjAW5oJyg1981KU15FOvGUGVn6k+W8CmHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:2b:08:79:d5:53:08:92:b1:5e:b3:bc:10:83:f8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Oct 25 07:00:19 2025 GMT
Not After : Oct 26 07:00:19 2025 GMT
Subject: CN=24bd556c64201bd0fba0b80ee850517c8899cb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7c:7f:52:4e:77:d8:d4:1a:64:59:1e:ac:45:
68:5e:79:00:dc:42:5c:36:58:78:52:18:17:7b:f4:
4a:f2:dc:3b:2d:1b:ef:e1:e5:d5:ac:2c:04:fc:ff:
ab:8d:89:22:c9:9c:6a:e8:d4:a1:c7:60:6b:b8:da:
88:a9:07:fb:f2:0a:fd:3c:93:ae:43:36:d8:0a:83:
70:8b:31:ad:d5:da:95:d2:14:2b:c2:ba:ac:e3:20:
fe:bc:f8:6f:0b:78:ca:09:35:7b:7a:87:9f:43:0d:
fb:1f:23:dc:30:a7:80:c0:9b:91:20:fb:9d:aa:7e:
ea:5b:0d:0d:77:52:39:23:2a:d8:fe:06:14:75:51:
d0:99:22:1c:a9:c6:81:9c:4d:c0:df:29:c5:60:f4:
9b:c5:af:96:b2:39:9b:d8:59:96:2d:bd:c0:65:a0:
81:a5:64:d5:7d:be:e5:b4:21:39:82:34:db:f6:37:
80:33:9c:e7:6a:52:0a:36:57:91:d7:18:36:7f:67:
d7:0b:93:65:5c:3e:27:33:5e:ea:95:ab:6c:08:b7:
ff:5e:09:19:6d:3c:09:9c:a3:dc:f8:ff:8e:4e:3b:
13:7a:4e:89:f7:28:3c:e6:ff:a6:aa:08:b2:db:41:
d6:85:45:4e:ce:5c:90:26:2a:a2:90:3e:de:4f:94:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BD:55:6C:64:20:1B:D0:FB:A0:B8:0E:E8:50:51:7C:88:99:CB:4A
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f5:8d:fc:cb:0c:c7:0f:cb:c0:7d:ee:98:6b:93:7d:0c:45:
3f:96:8f:40:33:d5:dd:0c:9e:bc:84:a1:98:dd:df:a2:e4:03:
62:8d:30:ca:62:27:26:7c:b0:dd:e1:35:73:78:22:ea:ca:bf:
4a:72:68:29:6a:e1:5f:19:33:ae:e0:d2:fc:58:42:75:71:7a:
c4:90:4d:92:17:2a:95:78:10:a5:ff:53:84:bb:40:51:b9:6f:
50:6e:fe:ad:5a:1d:1e:0c:8f:49:aa:2b:ae:85:1c:29:03:7a:
ce:df:8e:0e:5f:32:0d:44:da:56:d7:04:ca:0e:63:ce:51:ee:
78:e9:81:09:3d:cc:61:ba:75:4b:97:e5:7b:4d:db:9b:bd:17:
5f:56:f3:14:8c:f3:13:13:91:e4:77:9b:9c:f3:6c:82:84:c1:
88:82:c4:75:3f:8b:2e:a2:ae:80:73:2f:60:90:54:b1:e9:75:
36:34:4e:11:23:84:9b:d2:e2:6c:06:c0:97:0e:58:51:17:15:
ae:4a:2a:6c:e5:f4:10:93:f5:99:52:e9:db:fe:76:84:9b:11:
a9:66:e1:81:54:aa:71:be:97:f0:7c:86:4a:1d:8c:5b:26:38:
67:f7:57:91:e9:16:3b:a4:49:bd:84:80:8f:e5:f3:82:e7:f3:
53:a6:08:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoaKwh51VMIkrFes7wQg/jcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzFjYjUzMGZlNTJmY2MwMjllNjQ5N2U3NzgyMDAzOThj
MjlmM2MwHhcNMjUxMDI1MDcwMDE5WhcNMjUxMDI2MDcwMDE5WjAzMTEwLwYDVQQD
EygyNGJkNTU2YzY0MjAxYmQwZmJhMGI4MGVlODUwNTE3Yzg4OTljYjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnx/Uk532NQaZFkerEVoXnkA3EJc
Nlh4UhgXe/RK8tw7LRvv4eXVrCwE/P+rjYkiyZxq6NShx2BruNqIqQf78gr9PJOu
QzbYCoNwizGt1dqV0hQrwrqs4yD+vPhvC3jKCTV7eoefQw37HyPcMKeAwJuRIPud
qn7qWw0Nd1I5IyrY/gYUdVHQmSIcqcaBnE3A3ynFYPSbxa+Wsjmb2FmWLb3AZaCB
pWTVfb7ltCE5gjTb9jeAM5znalIKNleR1xg2f2fXC5NlXD4nM17qlatsCLf/XgkZ
bTwJnKPc+P+OTjsTek6J9yg85v+mqgiy20HWhUVOzlyQJiqikD7eT5RPzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCS9VWxkIBvQ+6C4DuhQUXyImctKMB8GA1UdIwQY
MBaAFAsxy1MP5S/MAp5kl+d4IAOYwp88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEt
YTFlM2MzOTRlZTgwLzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEtYTFlM2MzOTRlZTgw
LzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/WN/MsM
xw/LwH3umGuTfQxFP5aPQDPV3QyevIShmN3fouQDYo0wymInJnyw3eE1c3gi6sq/
SnJoKWrhXxkzruDS/FhCdXF6xJBNkhcqlXgQpf9ThLtAUblvUG7+rVodHgyPSaor
roUcKQN6zt+ODl8yDUTaVtcEyg5jzlHueOmBCT3MYbp1S5fle03bm70XX1bzFIzz
ExOR5HebnPNsgoTBiILEdT+LLqKugHMvYJBUsel1NjROESOEm9LibAbAlw5YURcV
rkoqbOX0EJP1mVLp2/52hJsRqWbhgVSqcb6X8HyGSh2MWyY4Z/dXkekWO6RJvYSA
j+XzgufzU6YIMQ==
-----END CERTIFICATE-----
Generated at Sat Oct 25 11:24:20 2025 by rpki-client