Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
File: CzlpzcC1_wnRmbyl2t25qrUQQOc.mft (raw, json)
Hash identifier: rGD5ha8w5gS9dXxqoem9TdLamAN8jtweDqql2C1HDqY=
Subject key identifier: 52:7E:CF:EE:08:96:B0:B3:4C:20:ED:B7:18:E6:EA:6D:F0:10:52:C1
Authority key identifier: 0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
Certificate issuer: /CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Certificate serial: 01987ABFDB5D55EB700D0356193FAAA086C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
Manifest number: 1257
Signing time: Tue 05 Aug 2025 15:00:50 +0000
Manifest this update: Tue 05 Aug 2025 15:00:50 +0000
Manifest next update: Wed 06 Aug 2025 15:00:50 +0000
Files and hashes: 1: CzlpzcC1_wnRmbyl2t25qrUQQOc.crl (hash: 7FUzUdMQfZ3tjZE8tlX8nXbogKFZn0+mCl687lczYgQ=)
2: c_W11dB19ZdeKd0Hkukk0DBHzss.roa (hash: IfJHrCf86EMC8/UaqV8PdsGmuBe2nBvxRntFhIs50zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:db:5d:55:eb:70:0d:03:56:19:3f:aa:a0:86:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b3969cdc0b5ff09d199bca5daddb9aab51040e7
Validity
Not Before: Aug 5 15:00:50 2025 GMT
Not After : Aug 6 15:00:50 2025 GMT
Subject: CN=527ecfee0896b0b34c20edb718e6ea6df01052c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:18:1b:d8:58:17:7c:87:f2:f5:0e:99:bb:e5:
63:2a:29:4c:50:ce:8a:09:6d:79:fe:d4:1e:66:3b:
04:4b:12:e6:77:4a:12:44:51:41:7d:40:a3:c3:f0:
03:0d:29:65:1f:f5:7e:98:b3:4b:69:67:99:6c:72:
f7:54:04:79:0b:87:57:d9:8d:c1:bf:0e:4e:3b:6a:
9d:ef:33:27:e8:8c:e4:07:e1:22:b6:6a:07:00:2b:
ef:d7:fa:69:9d:22:6c:44:8f:ad:89:4e:7b:e4:e3:
a3:f7:62:cc:4f:98:a1:53:4f:be:a5:8a:72:42:73:
67:61:ad:27:b2:84:93:d8:77:04:9a:ff:66:30:5b:
58:34:f1:c8:6a:09:94:03:67:c1:12:cd:5b:82:ec:
5a:08:52:86:e7:be:2c:b7:c9:b8:d6:e5:95:91:d0:
b5:5b:69:c5:82:d4:57:72:05:25:f1:8e:31:6a:43:
ac:ec:48:59:d5:32:44:ac:06:72:37:ad:d0:12:9b:
65:22:08:b1:01:06:b2:62:0c:96:70:c2:0b:f0:41:
de:70:74:83:38:e0:8b:d8:52:5a:85:ba:25:21:96:
28:58:d9:97:fb:4a:c8:81:02:18:76:0f:0a:0b:c9:
1c:8d:f2:1d:bb:31:16:28:2b:06:ab:cc:d2:39:43:
7c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7E:CF:EE:08:96:B0:B3:4C:20:ED:B7:18:E6:EA:6D:F0:10:52:C1
X509v3 Authority Key Identifier:
keyid:0B:39:69:CD:C0:B5:FF:09:D1:99:BC:A5:DA:DD:B9:AA:B5:10:40:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzlpzcC1_wnRmbyl2t25qrUQQOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ed501a-6ed7-452d-8c76-6bb4fee85735/1/CzlpzcC1_wnRmbyl2t25qrUQQOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f8:a9:63:2e:67:da:33:0f:f0:f2:12:02:46:2c:cb:82:ab:
d5:50:92:1f:08:19:b0:29:3c:c3:2b:ab:ae:93:bb:72:05:61:
79:ce:52:27:5d:4c:93:c0:5a:c3:db:d0:a4:93:7c:3b:b7:ff:
d9:fc:a2:98:9f:27:88:4d:b4:ac:86:b2:84:5b:d0:b4:00:e3:
2b:e0:ed:e2:d8:37:23:c1:cf:ce:b5:99:e4:ff:fc:91:6c:72:
41:ec:4c:c8:83:c3:7f:08:f8:e6:32:71:8b:bd:ca:3f:f1:48:
76:85:c1:84:e5:66:34:b2:22:cc:26:2b:f7:a7:19:25:3f:51:
92:88:5b:11:19:54:a7:f9:ec:88:9d:ba:21:6d:43:ed:14:20:
48:e5:82:bf:42:93:6e:29:67:0c:40:01:a1:f2:ed:24:9b:29:
7e:3a:ed:87:82:95:bc:e3:a4:a3:69:cb:7b:3c:19:fd:94:20:
cc:9b:96:39:8d:f1:d6:4c:74:ed:d5:48:20:7c:dc:3c:fb:f3:
a8:5b:85:16:e3:e3:7a:68:30:c3:09:72:a7:40:ab:91:99:8b:
c1:b6:41:0a:f2:29:69:ed:05:4b:8e:43:79:67:f5:19:33:40:
05:a8:b3:c2:ce:44:e4:21:c0:b8:d5:ec:43:0c:0e:08:2a:56:
68:2e:45:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh6v9tdVetwDQNWGT+qoIbHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzk2OWNkYzBiNWZmMDlkMTk5YmNhNWRhZGRiOWFhYjUx
MDQwZTcwHhcNMjUwODA1MTUwMDUwWhcNMjUwODA2MTUwMDUwWjAzMTEwLwYDVQQD
Eyg1MjdlY2ZlZTA4OTZiMGIzNGMyMGVkYjcxOGU2ZWE2ZGYwMTA1MmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxgb2FgXfIfy9Q6Zu+VjKilMUM6K
CW15/tQeZjsESxLmd0oSRFFBfUCjw/ADDSllH/V+mLNLaWeZbHL3VAR5C4dX2Y3B
vw5OO2qd7zMn6IzkB+EitmoHACvv1/ppnSJsRI+tiU575OOj92LMT5ihU0++pYpy
QnNnYa0nsoST2HcEmv9mMFtYNPHIagmUA2fBEs1bguxaCFKG574st8m41uWVkdC1
W2nFgtRXcgUl8Y4xakOs7EhZ1TJErAZyN63QEptlIgixAQayYgyWcMIL8EHecHSD
OOCL2FJahbolIZYoWNmX+0rIgQIYdg8KC8kcjfIduzEWKCsGq8zSOUN8DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJ+z+4IlrCzTCDttxjm6m3wEFLBMB8GA1UdIwQY
MBaAFAs5ac3Atf8J0Zm8pdrduaq1EEDnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYt
NmJiNGZlZTg1NzM1LzEvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lZDUwMWEtNmVkNy00NTJkLThjNzYtNmJiNGZlZTg1NzM1
LzEvQ3pscHpjQzFfd25SbWJ5bDJ0MjVxclVRUU9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/ipYy5n
2jMP8PISAkYsy4Kr1VCSHwgZsCk8wyurrpO7cgVhec5SJ11Mk8Baw9vQpJN8O7f/
2fyimJ8niE20rIayhFvQtADjK+Dt4tg3I8HPzrWZ5P/8kWxyQexMyIPDfwj45jJx
i73KP/FIdoXBhOVmNLIizCYr96cZJT9RkohbERlUp/nsiJ26IW1D7RQgSOWCv0KT
bilnDEABofLtJJspfjrth4KVvOOko2nLezwZ/ZQgzJuWOY3x1kx07dVIIHzcPPvz
qFuFFuPjemgwwwlyp0CrkZmLwbZBCvIpae0FS45DeWf1GTNABaizws5E5CHAuNXs
QwwOCCpWaC5FLw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:18 2025 by rpki-client