Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: ILTM/q3WwznBJatnBd8F22QcHVecjReHQxBbdkXmQCU=
Subject key identifier: C3:02:06:76:E2:A0:A3:75:37:81:66:2A:4D:71:B8:14:15:A9:6A:29
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 0199657EC319237AF2AB1F27C1D13E7CC44B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 08B6
Signing time: Sat 20 Sep 2025 05:00:30 +0000
Manifest this update: Sat 20 Sep 2025 05:00:30 +0000
Manifest next update: Sun 21 Sep 2025 05:00:30 +0000
Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: pvC4p/lC9KnXtWArNxXONu2llvu041W80nZSEU/XeQ4=)
2: RQEsj5U6gDhjJcVy0TlXi-Wv0Jw.roa (hash: 5spwbq7vTMKhgpfXnPqWkbfUupwJGaz4yD3OLMK3ImM=)
3: euzuAPfeJuv2-cm-rKuGKDxPe8I.roa (hash: 96LpiX/MLfmTkOgA68PX4zJcqAm4CD3qIp5sMcLFqNU=)
4: uqI-e9Q5-oja9rvPU1QcSBBgp4Y.roa (hash: RtcbvrEpnnUY7EwUTMkcJmd+p3YJpS4SOiugiRag4tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Sep 2025 00:54:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:65:7e:c3:19:23:7a:f2:ab:1f:27:c1:d1:3e:7c:c4:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Sep 20 05:00:30 2025 GMT
Not After : Sep 21 05:00:30 2025 GMT
Subject: CN=c3020676e2a0a3753781662a4d71b81415a96a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:51:3d:bd:a9:c2:f2:6d:bf:5c:5a:b8:01:
9d:1c:76:28:60:5b:ba:32:e1:34:96:35:e6:94:c4:
06:90:25:79:00:87:62:79:0f:42:94:08:c3:27:0f:
e4:4f:d7:17:52:4a:47:b1:39:2c:cd:60:b5:53:a9:
81:9f:45:94:30:52:54:eb:4d:4d:24:e4:58:e5:40:
6c:3a:f7:d1:96:62:ee:8a:02:ed:79:3d:6f:e1:cf:
ea:95:d2:ec:13:0c:f0:70:1c:13:7f:18:61:9f:6d:
e4:94:2a:c9:3e:1a:48:0f:48:94:3f:7b:df:79:62:
d6:27:f5:b9:1d:4f:1b:7c:73:b0:bc:d9:d3:e9:f5:
3c:2c:55:72:24:e3:f2:2e:d6:1c:a8:6e:89:d7:0f:
2c:5e:89:c9:16:d2:25:65:a5:b6:af:bb:f0:2e:fe:
8c:18:0e:a3:d2:c5:dd:e2:79:b1:5a:c5:c3:b6:f6:
40:84:25:ea:7e:db:f3:02:dc:9a:f7:fd:07:4f:fa:
b1:ae:60:90:a9:60:35:45:7b:6a:94:49:b8:6b:56:
00:0d:f0:6e:38:d8:e9:87:aa:65:3a:d2:7d:8b:32:
2b:4a:44:7b:6c:53:76:d8:ef:c1:4b:7c:7b:dd:85:
74:e8:18:0f:0a:5b:17:4c:10:15:de:58:e6:e6:52:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:02:06:76:E2:A0:A3:75:37:81:66:2A:4D:71:B8:14:15:A9:6A:29
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e9:26:c2:10:1e:29:2a:af:f8:61:1e:0d:14:66:38:f4:92:
2a:59:28:be:9b:6e:f1:cc:44:14:7a:84:e3:73:16:cb:11:05:
8e:72:75:4a:3b:1b:86:9a:f6:f2:71:c3:e1:fc:16:d1:05:f7:
aa:8d:9f:0e:c3:a1:8d:0a:58:fa:98:0d:94:39:8f:67:ac:bf:
08:82:06:51:4f:ef:84:8b:c6:9d:1e:3b:59:50:57:49:a3:3b:
94:78:cd:70:5b:b7:eb:60:65:76:68:a0:7b:25:2a:cd:2d:6d:
20:45:99:9b:65:0a:f7:e6:01:16:4e:4a:6d:e9:d9:73:b0:f7:
96:71:16:c6:36:cc:14:77:82:54:c3:b8:b2:db:18:c5:b7:70:
fc:ef:c3:b1:82:29:b5:76:3c:74:9f:28:d1:48:ad:d0:b1:56:
d2:ca:6b:6b:b5:48:9b:81:f7:cb:b2:d8:49:0b:71:66:ba:0e:
59:23:af:3e:1a:32:48:8d:88:7f:93:77:2c:66:90:6a:25:0a:
b3:e2:2a:e1:07:a1:d0:01:26:da:f2:40:db:1b:dd:d3:25:9b:
9f:91:3f:ea:42:f4:8a:f5:36:6c:8d:25:46:60:97:e8:c9:56:
6a:14:c1:c9:b0:67:18:95:51:63:9b:97:9d:bd:0d:a2:1b:44:
0f:41:ac:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 07:21:11 2025 by rpki-client