Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json)
Hash identifier: 8VGwf1kihH2Y0vyVf0BhpPFbpT2D6uRZwgWC06jqsGQ=
Subject key identifier: DF:A5:F5:CB:CC:F2:80:70:A0:3C:07:26:4D:26:D7:AA:4B:A9:40:74
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 019A1B3E22C2EBB001838E157FF5487147D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
Manifest number: 157F
Signing time: Sat 25 Oct 2025 12:00:48 +0000
Manifest this update: Sat 25 Oct 2025 12:00:48 +0000
Manifest next update: Sun 26 Oct 2025 12:00:48 +0000
Files and hashes: 1: 5MNHm2fG2K7ej_6HfywzVnWXnf8.roa (hash: a7dXOZ9Zvi0UjZGpNNuJ2dVdNWGu8ufMXG6I2NU70ow=)
2: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: tY0LvAIhF5x06RJcaX7TN2UpbSeBv78IZrg4OXB3EKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3e:22:c2:eb:b0:01:83:8e:15:7f:f5:48:71:47:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: Oct 25 12:00:48 2025 GMT
Not After : Oct 26 12:00:48 2025 GMT
Subject: CN=dfa5f5cbccf28070a03c07264d26d7aa4ba94074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:3a:77:c1:5f:45:bb:b6:4b:6c:78:27:56:
7e:62:a0:66:e9:76:aa:0f:57:69:a3:21:ea:88:9a:
56:65:22:61:a8:91:83:1b:09:6e:67:cf:12:4f:c9:
28:f2:7b:51:36:1b:44:33:84:07:47:89:d4:90:a0:
12:6b:92:8d:8c:ee:3c:27:93:51:e1:fe:b1:59:05:
4a:b3:22:3b:1e:8f:7e:1f:f7:b1:f6:b7:29:1b:4a:
cf:c1:c9:61:41:6a:9d:8b:50:c8:ac:30:79:5e:ba:
a1:f1:e9:1f:4f:fa:55:87:27:96:9e:6a:cf:ac:43:
f5:cd:5f:32:42:cb:f7:3b:ca:78:c7:ec:b0:e4:f3:
03:69:06:ac:23:da:13:c6:61:01:a2:c0:b0:aa:5e:
a0:68:23:e6:06:8d:f3:b1:6e:cd:70:68:f8:fc:72:
ab:43:5c:58:7f:6b:e9:f1:a3:9c:6e:d6:a0:59:1b:
d2:e9:11:b5:b0:46:48:68:95:77:24:33:3b:ec:65:
33:a4:17:f6:49:f8:ef:0d:54:e4:de:8d:0e:b5:8e:
47:98:55:24:5a:5b:c9:01:80:e9:e0:8e:1a:5b:32:
95:14:ec:63:0f:1c:b2:1c:9a:94:11:cd:d3:f4:46:
bc:bc:21:3f:c3:a8:20:01:fb:f2:ac:2a:83:5a:98:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A5:F5:CB:CC:F2:80:70:A0:3C:07:26:4D:26:D7:AA:4B:A9:40:74
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ab:44:7b:82:76:7d:e6:8c:71:bc:e6:cb:58:89:a6:ff:7f:
cc:ff:60:b0:07:c1:63:0f:64:5d:b4:a3:eb:85:cc:95:52:f9:
c6:8b:89:4d:ef:47:7b:98:76:da:f3:c2:d5:00:29:9d:74:bd:
e0:fc:ca:86:27:b3:a5:14:a8:c0:6f:1b:c2:51:79:5e:7c:d7:
55:f7:af:1d:1e:57:bb:60:d8:3f:eb:2f:63:b2:ab:39:2e:63:
43:1f:60:3c:f0:93:2f:ca:52:74:ee:35:8c:9a:4d:c9:52:5e:
a8:f0:11:56:08:ee:c4:90:01:da:11:ea:bf:2a:01:28:3c:ef:
40:de:d5:43:da:9b:16:63:89:98:58:33:36:d3:ac:d3:e1:4f:
60:85:f0:19:7e:bf:9e:fb:5c:e2:c2:c9:fa:3d:b3:e2:22:20:
16:1e:e0:48:ba:ba:0e:67:96:aa:29:c2:8a:ba:7d:9f:99:8e:
02:bc:fd:66:5b:94:0c:8b:17:87:63:e5:61:f9:4c:79:b6:cc:
2e:39:ed:e5:12:28:90:36:37:1e:c2:93:5b:c5:a9:22:8d:cf:
98:2b:73:22:39:c8:c9:6d:d0:56:4d:5a:d3:f1:cf:12:d1:56:
2a:77:1a:17:87:5b:15:00:4e:db:21:05:6d:8e:ce:54:7a:31:
0e:a7:a0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 15:20:26 2025 by rpki-client