Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: KGohrzl/2ZSEq0kwvfBKQ3J/meIit11NNHSo6oGj3js=
Subject key identifier: 3C:5F:F4:53:6E:D3:9D:23:80:81:5D:78:37:AB:41:F9:DB:78:C9:22
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 0199FFC8176B6E9CD6D3736488EEC5801771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 081B
Signing time: Mon 20 Oct 2025 04:02:07 +0000
Manifest this update: Mon 20 Oct 2025 04:02:07 +0000
Manifest next update: Tue 21 Oct 2025 04:02:07 +0000
Files and hashes: 1: 0o1YRHDHs6Y_Qq6pCAQcKlyWFz8.roa (hash: nsMIKNS3OeQBs34bWYRCT4THehdiZrvKLdywuELl5UY=)
2: U5txbLmFPtaoMKOU1TbkV_FaGV8.roa (hash: z+0QM51o7tqW6/RjLGXF1BwNrcfJdd2i6D7WxQKXfAc=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: unZ91NhffBsmY3xNcSQzW0dmjFBrdUGsVDluDVlyu/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:17:6b:6e:9c:d6:d3:73:64:88:ee:c5:80:17:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Oct 20 04:02:07 2025 GMT
Not After : Oct 21 04:02:07 2025 GMT
Subject: CN=3c5ff4536ed39d2380815d7837ab41f9db78c922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:1a:e5:f8:ae:fc:48:a0:ed:0a:c8:b4:3a:
48:b6:62:cb:35:d7:39:3d:33:15:6b:32:45:73:d4:
f8:fd:a6:20:f2:c4:7d:09:c3:a7:1f:fa:1e:e5:24:
f7:47:0e:9d:1e:16:b5:a2:ef:70:91:df:8d:ca:1b:
71:b5:0d:d0:b8:84:94:64:a5:2a:bc:e0:b5:9a:ee:
5a:f3:cb:74:7d:73:c9:49:14:3f:3d:c3:13:e4:be:
6b:17:5a:da:4c:5d:f0:d6:98:a8:df:b3:ec:97:90:
14:cd:d9:dc:14:09:af:32:7e:83:bc:30:e4:06:84:
04:22:ef:4d:18:17:c9:0b:0d:4e:fd:c4:83:de:e5:
60:7c:2b:f2:72:20:9f:ca:c7:61:f6:2a:4c:f7:8a:
16:79:11:dd:4f:db:4c:f8:3e:d6:69:53:2f:0a:35:
c0:c8:94:39:02:5f:13:f8:2e:40:f8:cd:2e:e2:b4:
ed:66:31:92:3d:5e:70:4b:3e:1b:d9:7a:c4:72:00:
2f:ed:1b:d1:58:f3:24:43:2c:00:31:23:48:80:36:
30:43:2f:36:68:39:85:e1:00:e3:ca:ed:f0:c1:40:
a1:67:55:c0:e6:38:24:f7:ea:38:da:49:88:6c:f8:
9b:65:1e:6b:db:01:e0:f8:f3:5e:5a:f1:76:15:2d:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5F:F4:53:6E:D3:9D:23:80:81:5D:78:37:AB:41:F9:DB:78:C9:22
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:39:ee:7b:c1:41:63:35:91:93:b4:e1:1d:fa:c6:9d:4d:f5:
1c:ce:29:e8:cc:69:87:0c:57:48:d4:85:4d:4e:48:18:38:e0:
f2:29:fa:bd:63:bf:3b:c3:4f:81:84:44:3a:d3:68:f1:c3:49:
52:db:a6:3a:b5:d7:cb:43:5d:48:38:1c:67:37:f5:08:b2:2f:
bd:40:3a:37:e4:57:88:06:99:be:f9:3b:fc:7c:2b:86:bf:fc:
b4:9b:97:d1:0c:44:d9:a1:9c:41:4e:b7:db:6f:0f:a8:37:c5:
f2:77:20:f7:43:54:d3:2c:5e:53:13:6d:66:bd:1f:f0:79:71:
8f:7e:60:11:fd:cd:29:67:4f:eb:e2:c4:7f:6d:7c:c2:40:03:
3f:c8:ae:28:47:f5:c0:b5:5f:22:ec:ee:de:6c:0c:ac:bf:54:
66:fd:7d:90:6c:f8:cc:ed:02:e6:51:e0:44:2a:f9:15:eb:92:
65:80:3a:b0:de:e2:43:82:70:0f:a7:4e:bd:b6:f2:2a:4c:a9:
66:f4:00:88:39:8c:d5:ff:48:4b:d3:b0:f1:3f:23:88:7f:c0:
d6:6c:ca:a3:cf:71:31:f5:03:55:fb:fa:c4:fd:40:d5:93:91:
7d:28:2e:9b:78:05:86:d9:52:50:52:b6:0e:9d:18:eb:24:5b:
88:0f:19:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:14 2025 by rpki-client