Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
File: CzAFeBftL9lZWEYyD9uBTJ_EShM.mft (raw, json)
Hash identifier: dCDMT1kripuny02jdmy4soijnrWmTULlNSLojiJyrOw=
Subject key identifier: 26:09:0E:11:04:2D:64:E1:A9:B9:03:3E:84:E0:B1:17:29:E4:A5:92
Authority key identifier: 0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
Certificate issuer: /CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Certificate serial: 0199221F1E040E4BC0A7FF931731342E2ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
Manifest number: 0E
Signing time: Sun 07 Sep 2025 03:01:28 +0000
Manifest this update: Sun 07 Sep 2025 03:01:28 +0000
Manifest next update: Mon 08 Sep 2025 03:01:28 +0000
Files and hashes: 1: CzAFeBftL9lZWEYyD9uBTJ_EShM.crl (hash: cB0p6aqbf5Ct4i6wZOuqlxI/jsur/NtviQfPSWBdXlM=)
2: ciRoloBEp337Qlo90VFtPltKd2A.roa (hash: Lk9kN0nmqw0o7bbuGulOuenC/GERk7m25lHoaP1uzNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:1e:04:0e:4b:c0:a7:ff:93:17:31:34:2e:2a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Validity
Not Before: Sep 7 03:01:28 2025 GMT
Not After : Sep 8 03:01:28 2025 GMT
Subject: CN=26090e11042d64e1a9b9033e84e0b11729e4a592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:2c:ca:e4:5b:10:09:7e:8e:19:88:75:0f:
04:02:40:66:8d:bc:2d:0a:f0:13:35:27:3a:34:cc:
52:21:b2:bf:d0:8f:29:b7:a9:b8:3f:58:a7:ed:dd:
66:48:b1:e4:44:29:1b:a7:72:34:f4:f4:ab:9a:45:
20:fe:df:39:f2:ad:b1:75:b2:f1:36:36:b8:ee:38:
fe:95:f9:ac:8d:28:5d:9d:af:8b:e4:c6:a5:9d:c8:
14:fb:bc:02:a8:13:1a:89:65:02:92:4a:27:cf:15:
ea:37:42:78:77:5d:58:d1:11:12:99:70:33:e6:c5:
e5:f7:a4:0b:b6:79:99:c1:de:0a:39:dd:81:be:fc:
7b:57:f2:ce:07:89:d4:5d:53:89:ce:3d:a4:f4:5f:
f0:a8:cf:9e:61:30:0b:ce:ca:70:ae:b1:37:94:3d:
96:d9:bc:18:b4:f8:14:e7:43:bc:82:ac:14:18:8a:
10:c4:19:3e:4d:61:21:fc:69:47:9b:9b:6f:4c:93:
81:61:0b:36:16:f2:de:27:d1:d2:6f:c1:80:d2:a0:
10:a4:04:17:ba:af:4d:44:3a:51:94:83:19:be:54:
d5:9b:3f:8d:f8:98:2b:4b:fc:f7:fe:3b:d0:38:bf:
1f:68:0a:6e:c6:bb:61:86:31:8f:67:6c:20:91:b3:
49:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:09:0E:11:04:2D:64:E1:A9:B9:03:3E:84:E0:B1:17:29:E4:A5:92
X509v3 Authority Key Identifier:
keyid:0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1e:b7:80:e6:6a:a4:27:7a:6b:98:0e:84:d0:55:19:79:ac:
bc:b9:b2:53:89:02:30:82:91:7f:cb:ca:ff:53:7d:1d:d6:8b:
30:df:0e:56:12:5d:a6:de:82:e4:7b:9b:6a:38:7d:ee:33:2b:
b7:c2:f8:45:ab:79:b8:d7:69:8f:ce:f7:50:40:6f:39:91:9d:
2a:cf:ed:50:6d:ca:6c:62:76:ce:bf:49:76:ff:8c:03:aa:86:
de:40:4e:22:ba:29:c5:de:97:d0:ea:60:fb:bf:2e:5c:a0:0e:
84:32:37:c6:9b:a7:54:75:22:66:1d:76:4c:de:ab:43:06:c4:
4f:9e:95:ea:2f:d8:07:f8:2f:bf:9f:23:b8:63:2e:9b:3b:d9:
ce:e7:9d:45:24:b3:e5:0a:7b:43:d0:1d:c9:a2:f8:c5:b9:ae:
50:20:a4:58:16:c6:51:b6:0b:30:0b:ba:cc:fe:c2:58:00:00:
f6:bd:eb:42:50:43:c7:e7:bb:06:44:b5:8b:46:cd:f1:03:f6:
72:28:c1:67:98:83:58:36:b6:0a:73:7f:de:2b:93:ca:10:39:
c1:a9:eb:d0:ff:f0:88:18:a2:00:a9:99:62:17:43:56:ac:a9:
0c:3e:27:3f:1b:6e:e4:cb:de:30:24:7f:6d:de:b5:80:77:28:
7b:4d:1f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:40 2025 by rpki-client