Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: BsaQ0FlzH8BCOHCyTQGxsk+dgtC7OlyiwW+u5jxc4Qo=
Subject key identifier: B6:F1:34:B9:43:D1:7A:6F:5D:97:C8:46:DB:65:C2:67:AD:43:5D:9C
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 0198541FCE1CF5CC7A891D0C461188F001CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 0421
Signing time: Tue 29 Jul 2025 03:00:27 +0000
Manifest this update: Tue 29 Jul 2025 03:00:27 +0000
Manifest next update: Wed 30 Jul 2025 03:00:27 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: i896qST06neh48ORNdTYkjbaXeGg9C8c/cXBznYYkYs=)
2: ayUSDw8mdGoHelr_2bHuT_Ht97M.roa (hash: gvA+DDKSQOPFRf0cxBqKQel7xs/RAWw3rOxPxkz9/ZY=)
3: i3ThCtdNGW1cjUxQLhhdn5p0rJI.roa (hash: GXqzqfOOBrl4UZP/OkbdiBzFUWkoVhn5KODt99i+lAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:ce:1c:f5:cc:7a:89:1d:0c:46:11:88:f0:01:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Jul 29 03:00:27 2025 GMT
Not After : Jul 30 03:00:27 2025 GMT
Subject: CN=b6f134b943d17a6f5d97c846db65c267ad435d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:54:f2:9a:da:fc:29:35:6a:57:97:20:4f:
43:15:45:cc:84:d3:b4:d4:47:64:d9:bc:7a:56:4e:
85:29:74:e4:35:8b:09:7e:92:5e:22:f6:ab:17:d7:
4d:f8:aa:28:41:80:6b:04:2b:6c:86:3e:dd:01:dd:
35:cd:72:f5:4e:28:e4:25:a9:0e:cc:a0:ea:54:f9:
fa:90:97:bc:e7:c1:ee:8a:79:45:e2:f4:90:07:c7:
f7:c5:2f:2b:f1:c7:3d:eb:7c:6c:b9:5b:f3:6a:dc:
3d:6b:9c:e7:8d:4e:0c:87:ac:cc:fb:0e:88:0c:4c:
db:e0:93:26:6d:59:50:46:8e:df:e9:c9:dc:15:36:
ed:47:95:43:70:e6:18:26:93:32:ae:df:22:80:07:
0a:ae:b5:6f:c9:02:a4:92:e4:1c:94:81:0a:4f:d4:
69:87:27:e9:ea:a6:ca:e2:57:e9:a4:70:d1:ab:b5:
8d:df:a9:68:68:04:49:ca:06:57:e2:e7:5d:56:f1:
70:2c:5c:96:1e:93:50:45:95:5e:f5:48:36:6a:c7:
47:d0:12:3a:e1:e5:14:32:37:14:2d:36:59:7f:b8:
60:8a:80:18:37:21:11:3e:a8:17:10:69:c8:e2:7d:
da:51:39:b7:d9:f5:b0:e3:74:87:fe:d2:14:c8:53:
0d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F1:34:B9:43:D1:7A:6F:5D:97:C8:46:DB:65:C2:67:AD:43:5D:9C
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c8:0a:ea:67:b1:eb:6d:85:5e:9e:34:fb:61:b5:22:50:f2:
f9:cb:35:7a:b9:fb:cc:6c:cd:c9:37:95:5a:66:42:bc:51:49:
53:54:63:6a:73:2a:b3:94:6f:7e:26:f9:50:de:6c:45:a0:fd:
6c:cf:32:c9:75:f5:eb:94:b1:43:18:37:99:7a:d2:59:df:58:
fd:94:57:3f:73:45:d5:a7:9f:d7:a9:42:3e:56:e9:ca:09:38:
14:83:08:1a:33:42:41:c3:0a:4f:18:68:8f:68:51:9f:19:a5:
6d:a9:85:cb:45:84:9c:e2:cf:7f:fa:cd:7c:71:42:49:ea:6a:
f0:28:d6:f2:12:f9:27:98:d1:36:87:02:d6:d5:5f:11:11:3c:
02:88:f6:bf:26:5a:47:2b:6f:ef:aa:ce:cf:d9:fb:c8:eb:2e:
2b:2d:47:b6:27:1a:66:97:69:d9:da:c1:07:9a:f0:af:a9:ee:
04:b1:27:e7:b8:87:74:17:de:dd:74:e5:1e:85:13:17:f5:b8:
40:e4:ff:0e:de:9c:32:55:6c:e6:e6:61:63:58:ab:f4:d0:bf:
da:03:90:53:0f:ef:4c:e4:36:b0:d2:49:0e:6f:a0:2b:c1:c5:
af:b3:50:23:a6:9a:bf:eb:d9:93:c5:e5:2f:1f:be:5c:23:88:
10:87:26:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 10:50:52 2025 by rpki-client