Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: uhL2UBZCYzM9X2WEA+/FIJz9YzRMnVtCPrSCsS+uN2k=
Subject key identifier: CA:88:71:7F:23:A4:E9:74:AF:C1:C1:7D:C2:B6:02:36:D9:7E:4F:56
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 019A503E1D3D83FB80A690146FF43443F06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 19:00:39 +0000
Manifest this update: Tue 04 Nov 2025 19:00:39 +0000
Manifest next update: Wed 05 Nov 2025 19:00:39 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: 2jmy9tFUP6RDck1UotaGwccRxL6lUItyzJg9/xfpcL0=)
2: lhGz6B59KeMcscLlwP8SPnbuK40.roa (hash: XdPOOZD1AAjAW5oJyg1981KU15FOvGUGVn6k+W8CmHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:1d:3d:83:fb:80:a6:90:14:6f:f4:34:43:f0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Nov 4 19:00:39 2025 GMT
Not After : Nov 5 19:00:39 2025 GMT
Subject: CN=ca88717f23a4e974afc1c17dc2b60236d97e4f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1b:6e:1f:97:3b:d2:f9:34:ec:fc:92:41:fa:
60:d3:4a:c6:5f:ad:e6:48:34:86:9d:56:b8:5c:b2:
77:e4:21:41:0e:d8:ba:9e:7d:65:00:73:a7:00:3d:
8b:5d:d7:23:25:66:52:85:7d:95:78:ca:b1:79:23:
2e:b0:6b:45:10:05:1b:3b:dc:d6:42:a6:19:c2:5a:
c3:46:4d:0f:a9:dd:30:be:ab:6e:3f:bd:6e:eb:f9:
3d:72:ce:a9:f8:c9:c5:a0:3a:31:78:71:52:49:df:
f1:2c:e9:bc:d5:9e:c5:f8:92:f0:98:11:a8:a6:20:
35:fd:ec:b8:01:14:82:5e:bb:7e:7c:38:11:09:97:
a6:d7:65:97:37:44:f1:4f:c6:5a:b2:6e:08:d0:ac:
96:e8:81:a0:40:0e:52:08:04:72:55:16:46:b1:e7:
e2:17:44:76:b5:b8:5b:49:9a:06:8c:e9:a8:b1:50:
87:6d:09:c7:89:39:5f:57:23:33:6a:0a:56:5b:c9:
37:af:7d:fc:a2:ea:04:ae:32:f4:d4:c5:98:82:04:
b5:b0:a2:c0:51:61:aa:d1:e3:5d:52:2d:0c:e2:59:
04:0f:52:da:3a:85:43:3a:83:3c:90:8e:3d:be:29:
15:31:81:f0:e5:84:20:c0:5c:5c:be:ea:ab:59:f8:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:88:71:7F:23:A4:E9:74:AF:C1:C1:7D:C2:B6:02:36:D9:7E:4F:56
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:a3:23:6a:2d:8d:a8:de:b3:cf:28:fe:04:fb:19:13:57:c3:
b9:b9:c1:24:bc:ec:6a:cc:10:6a:d4:e6:36:5d:0c:aa:10:8a:
a0:23:d9:05:e3:d8:92:db:1f:56:2a:d6:53:a2:6c:35:dc:bd:
4d:9d:a2:7e:5b:af:86:75:cc:b7:dc:45:d2:21:e4:c6:e6:d2:
dc:03:9a:6a:90:38:06:6d:fb:87:4c:e9:53:e0:6c:0c:a6:09:
ff:87:d7:15:b8:d5:ee:88:ae:ef:56:7e:04:76:e8:66:7b:f6:
50:4e:10:d6:d2:3b:5c:00:d3:5f:ea:6a:c4:01:24:5e:ee:d7:
a2:53:fa:68:95:42:89:9f:16:5a:65:ac:4a:cb:00:de:8c:e4:
80:2e:48:57:0f:15:06:50:77:a6:7d:a1:85:56:a4:e7:f6:c0:
3b:03:8e:52:ef:3b:d6:8a:ef:13:68:1a:29:87:b6:08:95:ae:
6d:d5:32:b0:bf:aa:96:9f:6f:0b:d1:61:63:58:cf:2f:43:42:
dd:36:b0:36:72:95:9b:c7:f5:d9:a7:a3:a0:99:90:8b:e4:b2:
e8:44:f7:39:85:67:90:a0:5c:81:09:7e:6f:8e:c3:f7:15:3c:
1a:bc:30:a8:f9:90:15:6c:db:09:c9:12:fd:76:39:97:90:39:
e4:0d:dd:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPh09g/uAppAUb/Q0Q/BvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzFjYjUzMGZlNTJmY2MwMjllNjQ5N2U3NzgyMDAzOThj
MjlmM2MwHhcNMjUxMTA0MTkwMDM5WhcNMjUxMTA1MTkwMDM5WjAzMTEwLwYDVQQD
EyhjYTg4NzE3ZjIzYTRlOTc0YWZjMWMxN2RjMmI2MDIzNmQ5N2U0ZjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BtuH5c70vk07PySQfpg00rGX63m
SDSGnVa4XLJ35CFBDti6nn1lAHOnAD2LXdcjJWZShX2VeMqxeSMusGtFEAUbO9zW
QqYZwlrDRk0Pqd0wvqtuP71u6/k9cs6p+MnFoDoxeHFSSd/xLOm81Z7F+JLwmBGo
piA1/ey4ARSCXrt+fDgRCZem12WXN0TxT8Zasm4I0KyW6IGgQA5SCARyVRZGsefi
F0R2tbhbSZoGjOmosVCHbQnHiTlfVyMzagpWW8k3r338ouoErjL01MWYggS1sKLA
UWGq0eNdUi0M4lkED1LaOoVDOoM8kI49vikVMYHw5YQgwFxcvuqrWfiD7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqIcX8jpOl0r8HBfcK2AjbZfk9WMB8GA1UdIwQY
MBaAFAsxy1MP5S/MAp5kl+d4IAOYwp88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEt
YTFlM2MzOTRlZTgwLzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEtYTFlM2MzOTRlZTgw
LzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6Mjai2N
qN6zzyj+BPsZE1fDubnBJLzsaswQatTmNl0MqhCKoCPZBePYktsfVirWU6JsNdy9
TZ2ifluvhnXMt9xF0iHkxubS3AOaapA4Bm37h0zpU+BsDKYJ/4fXFbjV7oiu71Z+
BHboZnv2UE4Q1tI7XADTX+pqxAEkXu7XolP6aJVCiZ8WWmWsSssA3ozkgC5IVw8V
BlB3pn2hhVak5/bAOwOOUu871orvE2gaKYe2CJWubdUysL+qlp9vC9FhY1jPL0NC
3TawNnKVm8f12aejoJmQi+Sy6ET3OYVnkKBcgQl+b47D9xU8GrwwqPmQFWzbCckS
/XY5l5A55A3dJA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:06 2025 by rpki-client