Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: ogEnT8qUNhSCagpGmk9fCmfLiP/wa9vIX4L0Fhc4cl0=
Subject key identifier: CC:62:3B:F0:78:A1:B6:A7:FD:95:88:3E:5E:9E:2C:4F:BF:70:FC:A1
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 0199511C78F441CDCC213D47E5CE4A3F8CFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 04A4
Signing time: Tue 16 Sep 2025 06:00:44 +0000
Manifest this update: Tue 16 Sep 2025 06:00:44 +0000
Manifest next update: Wed 17 Sep 2025 06:00:44 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: 2rxDJ6nuxBLiEpBLKa9J9hA0TPlV24+RthOEDQArONs=)
2: ayUSDw8mdGoHelr_2bHuT_Ht97M.roa (hash: gvA+DDKSQOPFRf0cxBqKQel7xs/RAWw3rOxPxkz9/ZY=)
3: i3ThCtdNGW1cjUxQLhhdn5p0rJI.roa (hash: GXqzqfOOBrl4UZP/OkbdiBzFUWkoVhn5KODt99i+lAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:51:1c:78:f4:41:cd:cc:21:3d:47:e5:ce:4a:3f:8c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Sep 16 06:00:44 2025 GMT
Not After : Sep 17 06:00:44 2025 GMT
Subject: CN=cc623bf078a1b6a7fd95883e5e9e2c4fbf70fca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9c:37:d2:fe:d6:fe:4a:07:74:46:64:62:03:
6f:4b:3a:9e:81:5c:85:e9:9d:c1:96:76:63:19:d2:
a3:8d:4a:97:3a:c5:5a:ad:13:78:e3:6d:19:e6:7e:
97:a1:f4:55:2a:a2:11:e5:74:13:88:35:c1:b8:4e:
fb:0c:77:a4:4d:c0:54:b8:a0:8c:b2:d1:52:1c:43:
10:4f:10:2b:c8:6f:81:a6:e1:6a:cd:46:cd:c9:47:
cf:ce:b0:3f:a6:19:d9:4e:4d:1f:c3:6b:b1:0c:9a:
51:fe:3d:ad:e9:24:9d:c0:cc:53:c0:12:52:4e:26:
67:46:86:1e:b6:f3:4d:63:d2:75:d5:2b:34:e0:77:
d1:6e:58:8d:30:84:d6:e5:f0:fb:4f:41:0f:ed:65:
a7:f2:e2:89:d5:95:74:e1:aa:ad:cf:81:36:15:57:
89:d2:f1:ce:90:cd:54:41:1f:94:ad:43:50:0e:be:
af:c2:90:a9:81:59:e5:1f:1e:1d:5f:f8:86:03:8f:
a8:71:7d:76:7f:b5:f0:6f:14:90:5c:86:0e:c3:75:
2a:08:83:4c:72:79:61:2c:2b:db:f9:5a:be:4f:d2:
b5:f1:03:25:c2:71:1f:b3:f6:a5:2a:f4:4a:d3:bb:
c2:77:21:80:00:a1:3d:df:6d:6f:c4:2b:67:c4:d7:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:62:3B:F0:78:A1:B6:A7:FD:95:88:3E:5E:9E:2C:4F:BF:70:FC:A1
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:d0:e8:58:19:93:01:b6:93:5c:8b:08:69:52:9e:79:23:8a:
8b:ad:e0:3f:1d:c5:cf:bf:40:aa:49:81:94:4c:e8:ce:44:91:
67:23:3b:65:6b:17:d8:7e:ce:65:84:bb:37:3b:85:a4:32:ba:
24:0d:bd:af:8e:3e:bf:98:d1:83:b1:0c:2f:93:6a:fb:11:30:
a2:81:c7:6e:72:ac:69:4e:81:55:29:df:df:50:5d:68:55:3b:
71:5b:b4:ba:4d:57:63:1f:8e:b0:34:d3:d4:12:c3:cb:d5:47:
db:d1:16:f1:68:bc:94:6a:b6:00:5d:d4:ea:c4:e2:48:7a:3d:
af:6e:9c:bb:2f:59:2f:ad:8b:6b:23:1d:bb:7f:23:cd:fe:7f:
34:85:79:92:67:73:e3:2c:d6:61:03:ca:5d:fd:c0:41:79:a5:
25:df:c4:1d:65:a7:65:5a:7a:f5:c0:42:6a:3b:da:7d:de:c5:
f5:df:56:36:5e:2f:a2:8b:c7:b3:26:71:0b:59:b5:c7:15:fd:
b0:53:d7:a8:be:52:0c:c4:ad:de:2b:6c:bc:9a:16:4b:55:44:
ab:07:49:c3:4d:e1:e2:0c:14:5a:ae:b2:62:27:39:9c:29:21:
64:a4:fe:21:5f:76:4a:a2:7b:96:26:30:c3:db:3c:d2:6b:c1:
1b:c0:9c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 09:33:23 2025 by rpki-client