Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
File: czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft (raw, json)
Hash identifier: cVjglMK7tCB3QND91onImVWhItC1TJVcoReGNwitGRY=
Subject key identifier: A9:05:9F:FC:35:F2:D1:11:93:6D:F4:2C:37:B4:2E:EE:DC:94:90:4B
Authority key identifier: 73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE
Certificate issuer: /CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
Certificate serial: 01992255D7E5BCB9F37D633E601BA5659669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
Manifest number: 15C7
Signing time: Sun 07 Sep 2025 04:01:14 +0000
Manifest this update: Sun 07 Sep 2025 04:01:14 +0000
Manifest next update: Mon 08 Sep 2025 04:01:14 +0000
Files and hashes: 1: czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl (hash: 9Q05rCPNKEK20d/2Z+F4GingS07ke/z+gSbSzj6NsKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:d7:e5:bc:b9:f3:7d:63:3e:60:1b:a5:65:96:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733c01fc6bdfeb090d5732c872eeda53cb421abe
Validity
Not Before: Sep 7 04:01:14 2025 GMT
Not After : Sep 8 04:01:14 2025 GMT
Subject: CN=a9059ffc35f2d111936df42c37b42eeedc94904b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:91:d4:60:29:07:03:2a:82:4e:ad:92:38:
53:74:3d:76:7a:4e:dc:82:fd:49:6c:96:28:aa:a0:
28:28:8d:a6:9f:67:f5:de:3a:6a:e5:67:9d:39:1d:
1b:cf:5d:93:d1:1e:ac:2a:75:40:f3:98:96:a8:9f:
58:82:c3:25:64:f4:ff:d8:06:e5:73:06:c1:39:0e:
e3:53:ad:60:6c:62:47:bd:0b:97:75:32:3d:40:b9:
c7:f1:c5:4c:7b:b2:f7:61:ca:9e:0e:e4:01:e2:cb:
d3:7d:8b:4a:ee:a6:73:56:d7:dd:fc:79:44:d2:26:
a8:fc:7b:34:a3:42:f1:1f:4b:d2:ce:3b:5e:c3:c5:
2d:a2:e9:4f:4a:c4:e9:2d:88:9a:d3:63:17:85:fc:
9c:f2:2c:24:8c:46:99:3a:43:57:45:ab:d5:73:7c:
41:20:b1:c6:1c:02:b3:dd:21:70:6b:6c:a9:2b:bc:
6b:1c:2c:83:2b:1f:82:9e:1c:6c:73:7d:79:d3:4b:
32:f2:0e:be:c5:12:4c:e7:24:e8:f8:7f:53:64:b1:
91:99:7c:0a:9e:23:fb:27:a6:9a:10:cc:f9:9e:10:
9b:9c:08:50:77:f1:31:f9:83:5a:8e:f0:97:a0:af:
2b:88:f1:71:2f:79:41:e9:8c:3c:0b:5e:47:41:d7:
2a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:05:9F:FC:35:F2:D1:11:93:6D:F4:2C:37:B4:2E:EE:DC:94:90:4B
X509v3 Authority Key Identifier:
keyid:73:3C:01:FC:6B:DF:EB:09:0D:57:32:C8:72:EE:DA:53:CB:42:1A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czwB_Gvf6wkNVzLIcu7aU8tCGr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/292111-c45a-4f5a-816d-5a3abff215ce/1/czwB_Gvf6wkNVzLIcu7aU8tCGr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:90:98:e5:a6:51:f1:59:b9:ba:5a:03:a5:77:8c:a3:80:95:
c3:a0:fe:ab:9c:50:e5:ff:80:dc:65:d0:1a:3f:00:0c:37:0b:
36:78:21:4c:79:27:e1:eb:2f:5b:04:f4:e2:72:d6:58:fd:4b:
e6:08:77:4e:25:9f:e6:f5:e4:07:8a:54:8c:e0:bd:48:9d:21:
ed:3e:88:6d:e8:c7:e8:64:e7:ea:0c:04:56:c5:94:48:04:5b:
a7:71:97:4a:8c:0b:a9:05:9f:d0:c2:48:dd:ac:39:ac:6e:70:
2d:17:ac:11:1e:17:b5:7b:07:d3:ac:a5:1d:42:74:7d:e5:f8:
b0:ea:ae:a8:89:38:f2:09:74:7f:89:9b:e4:96:5c:30:38:11:
9a:84:a8:c1:03:b2:30:7f:8d:34:50:e9:bf:4c:16:d8:70:3e:
45:db:03:00:b6:38:40:57:e6:78:38:38:75:26:af:c5:90:7a:
a2:7f:2d:f2:96:58:f9:b4:a1:5f:06:a4:23:93:c7:24:de:fd:
bb:22:64:ee:75:81:e2:38:84:69:d4:2f:ca:76:f0:48:b6:29:
cf:7e:89:ab:75:74:d6:a8:99:b6:f4:53:4a:19:d7:07:12:07:
8f:ec:69:4d:72:05:28:3e:b1:c3:45:72:70:7a:8c:8d:70:cc:
88:be:29:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:19 2025 by rpki-client