Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
File: CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft (raw, json)
Hash identifier: kC6Q+j5vWuwqroyFVGcV867m3axT10ScnA/PoHntUSk=
Subject key identifier: F4:56:89:70:31:12:5D:2C:7F:8E:94:FE:EF:24:B8:58:B6:27:4F:43
Authority key identifier: 0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93
Certificate issuer: /CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
Certificate serial: 01994C2E280C8EE8B1331DDDD11576F61375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
Manifest number: 1687
Signing time: Mon 15 Sep 2025 07:01:57 +0000
Manifest this update: Mon 15 Sep 2025 07:01:57 +0000
Manifest next update: Tue 16 Sep 2025 07:01:57 +0000
Files and hashes: 1: CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl (hash: HJIJL61EsFs9gpK2rcq9p/cTgwS73nXYm6nuvu4GUug=)
2: ZM-gSRhoMrGYnOYCigGO3KlUdxE.roa (hash: HD/5KvR+lV05wvXD394776vmYH6dBYVti0mPyMnQTNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 07:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4c:2e:28:0c:8e:e8:b1:33:1d:dd:d1:15:76:f6:13:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
Validity
Not Before: Sep 15 07:01:57 2025 GMT
Not After : Sep 16 07:01:57 2025 GMT
Subject: CN=f456897031125d2c7f8e94feef24b858b6274f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dd:84:91:53:66:2f:7a:00:4a:92:7f:61:7d:
fe:80:18:80:fc:70:7d:61:7f:41:e0:2e:98:1c:ed:
30:14:43:aa:ad:12:e2:eb:de:e9:b3:69:40:c3:d0:
5c:8a:53:74:d0:58:dc:dd:e0:ec:08:b1:cf:2a:cd:
34:47:db:bc:68:8c:06:ef:38:04:81:cf:18:96:29:
f6:9d:08:ab:1f:e9:34:fe:fe:c6:fb:3b:a3:60:10:
32:24:ce:9a:25:e2:c2:fa:75:ae:ff:d3:30:dc:90:
71:af:53:7d:e6:1e:f9:9a:f4:63:eb:17:20:39:5c:
d5:23:2a:21:5a:e5:b0:4f:9e:fb:8e:a3:b1:5c:4b:
bf:43:d8:28:b5:ad:39:7d:0f:31:96:6d:25:2b:de:
45:8d:dc:5e:31:f7:a1:16:57:7e:94:69:8e:73:43:
2d:ef:2e:a3:5c:47:58:7f:96:04:6c:98:1f:1f:10:
c6:2d:e2:41:ec:93:04:03:eb:df:1c:cd:f1:ae:10:
76:ce:f3:5e:00:45:57:ee:87:dc:aa:04:09:89:1e:
5b:cd:e6:19:b4:2c:1e:f0:5d:8c:85:f1:1b:4a:ab:
ff:fb:5a:6e:75:44:07:e8:55:7a:46:fa:00:97:48:
06:04:fe:2a:ab:2c:ee:25:32:02:20:25:64:0e:20:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:56:89:70:31:12:5D:2C:7F:8E:94:FE:EF:24:B8:58:B6:27:4F:43
X509v3 Authority Key Identifier:
keyid:0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:48:7e:f2:ef:01:60:63:5e:1a:d8:27:15:f4:17:9d:fb:65:
e6:1e:16:76:98:a3:21:c1:a8:9e:28:61:02:6c:5e:68:ab:7f:
d2:77:e5:04:d2:11:73:a5:fe:e8:e3:ab:6a:9e:71:56:f9:50:
13:07:45:d7:d9:46:42:3f:45:e2:54:aa:9c:81:72:c2:07:fc:
21:e5:10:15:27:c3:21:15:53:cb:82:f3:6a:f8:3e:ba:2c:7e:
a9:79:d9:96:b4:e8:73:de:98:28:20:22:b9:6a:b6:4a:c2:b3:
71:a2:87:7e:bf:4c:2c:c9:97:33:6f:e7:87:c3:35:fb:03:c3:
46:94:41:fc:72:15:c3:ca:f3:5b:63:46:3c:a3:31:58:ef:2a:
a4:ab:8d:64:67:69:63:68:f2:db:a5:8a:f7:40:9c:96:4c:09:
97:5e:d3:08:74:9e:23:bd:8d:a9:c3:59:ea:03:95:dc:e2:25:
c5:f4:0b:e9:cf:f5:ca:bc:ba:c3:c4:c3:a3:5d:72:7a:96:80:
fa:30:49:99:6e:fc:fe:02:c4:7f:d4:3c:35:cb:64:d8:93:5a:
fd:71:e1:a7:b2:a1:a9:61:7b:d7:3d:5b:70:6c:5c:53:91:b0:
83:ff:a8:15:b8:59:43:85:aa:1d:08:3a:b9:2f:30:43:54:4c:
26:e7:c6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:19:01 2025 by rpki-client