Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
File: CzAFeBftL9lZWEYyD9uBTJ_EShM.mft (raw, json)
Hash identifier: Q1obxIjnLJT5/fF+yygKre5aKkJ7tFf1hyvYogsGG9Y=
Subject key identifier: F0:B2:F1:4A:5C:74:EB:3F:E0:3D:2E:C6:99:3C:6E:5A:27:5C:55:25
Authority key identifier: 0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
Certificate issuer: /CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Certificate serial: 019A337CF0AA71AEE12CB4E80F1F92A5D3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
Manifest number: 9D
Signing time: Thu 30 Oct 2025 05:00:17 +0000
Manifest this update: Thu 30 Oct 2025 05:00:17 +0000
Manifest next update: Fri 31 Oct 2025 05:00:17 +0000
Files and hashes: 1: 5rGgrqdPoueZL9n49lewJLQalrU.roa (hash: TQRxGNLMYQGT2NG1xMafNXAuCm7U0yoBgbBdMTpn79I=)
2: CzAFeBftL9lZWEYyD9uBTJ_EShM.crl (hash: mMhrtEnYjSQ+AbZm4Jf0soa4iegl6XAH42RcYqTOCks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:7c:f0:aa:71:ae:e1:2c:b4:e8:0f:1f:92:a5:d3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Validity
Not Before: Oct 30 05:00:17 2025 GMT
Not After : Oct 31 05:00:17 2025 GMT
Subject: CN=f0b2f14a5c74eb3fe03d2ec6993c6e5a275c5525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:01:98:07:a2:66:e3:f5:3b:a3:e3:0d:07:
9f:1d:90:98:59:45:02:9b:cb:d4:02:c0:fa:44:af:
b2:1d:69:88:17:ce:6a:7a:51:20:a3:d1:28:b7:5e:
ae:44:9f:63:8a:34:ce:83:a5:b9:e6:1b:67:30:7b:
fe:ed:c8:2d:20:56:9a:64:09:c0:81:e7:39:0b:92:
7a:d3:cc:59:5c:3d:df:11:87:c5:26:c0:14:3b:63:
a5:b4:63:f4:7e:19:f2:93:c0:75:9b:03:aa:f9:cf:
1e:6e:47:2a:40:45:fd:4d:fb:d0:c1:f2:0a:8b:04:
a6:2e:6c:8c:90:2d:97:53:9a:58:86:d9:db:76:b7:
9f:73:c2:c5:cf:90:ad:f9:9a:57:6f:e4:d6:85:ae:
41:6b:5e:92:69:87:b0:22:81:ab:28:38:9c:1c:4b:
03:c1:2c:80:25:c5:b5:3a:6b:ff:84:80:35:6d:a3:
2e:1e:09:3a:2f:39:4a:0e:18:2d:31:67:6c:c0:23:
d6:6b:cd:d4:80:4a:54:f2:93:cb:37:f3:a8:7d:2f:
25:38:6b:38:d8:db:73:86:3f:40:c7:54:09:8b:31:
fd:6f:fa:48:bc:97:5e:69:dc:b0:cf:7d:43:c3:c1:
10:56:78:95:3b:47:6b:63:bc:bb:4e:86:51:55:a8:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B2:F1:4A:5C:74:EB:3F:E0:3D:2E:C6:99:3C:6E:5A:27:5C:55:25
X509v3 Authority Key Identifier:
keyid:0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a8:22:26:68:6b:c2:a5:c9:9f:ee:03:e9:c0:95:9e:58:c6:
7e:89:f5:82:ff:e8:eb:76:72:53:f8:a0:03:e4:84:38:90:a6:
b5:f0:9f:8b:7c:56:a9:36:7d:32:6d:69:80:1b:90:93:66:9c:
a8:e4:3f:76:7e:75:9a:f7:03:ba:1b:e7:c3:61:5f:9c:6d:fe:
36:eb:4e:30:21:5a:e4:02:56:4a:8f:dc:b3:12:10:7c:89:9a:
95:29:80:b4:8e:66:cb:a6:73:80:46:45:c3:50:c6:2f:4e:0a:
da:07:d2:12:ea:16:a4:6d:1e:ea:6e:61:22:39:f4:66:19:d0:
f4:70:bf:34:ec:c5:df:74:d1:39:b2:74:9f:0c:fd:f6:10:a7:
70:a0:e3:cf:04:44:5f:60:ba:e7:ff:08:5c:4e:75:cd:a2:8e:
d4:ea:fb:9c:84:23:72:b7:3f:5d:79:22:54:a3:be:4f:00:7d:
fe:be:92:0b:98:db:c2:17:b0:a1:76:b4:ce:76:f7:17:d9:89:
14:a4:0a:62:c4:e8:e3:21:40:94:50:31:91:ca:49:7f:60:aa:
36:ae:e4:dd:af:d2:ab:a5:ad:db:2c:08:94:53:95:a4:29:21:
ed:6a:c5:36:d1:ba:9e:53:15:fc:95:68:62:f8:81:51:be:05:
b8:93:c9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 15:03:45 2025 by rpki-client