Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
File: CzHLUw_lL8wCnmSX53ggA5jCnzw.mft (raw, json)
Hash identifier: UBYk3xfaIq5Ihst8/dLmTWXLYM6UfSbLfItVfkAkIlI=
Subject key identifier: 26:3B:B6:1F:D7:90:E9:1E:9E:3B:51:97:39:F5:56:60:D8:BD:FD:4B
Authority key identifier: 0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
Certificate issuer: /CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Certificate serial: 01988A699CA1814D3537794F74CAF3166813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 16:00:33 +0000
Manifest this update: Fri 08 Aug 2025 16:00:33 +0000
Manifest next update: Sat 09 Aug 2025 16:00:33 +0000
Files and hashes: 1: CzHLUw_lL8wCnmSX53ggA5jCnzw.crl (hash: UOa53MzK36t0M6ezTJlxrssz3ft4NYfH1LKDG4ghcMw=)
2: lhGz6B59KeMcscLlwP8SPnbuK40.roa (hash: XdPOOZD1AAjAW5oJyg1981KU15FOvGUGVn6k+W8CmHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:9c:a1:81:4d:35:37:79:4f:74:ca:f3:16:68:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b31cb530fe52fcc029e6497e778200398c29f3c
Validity
Not Before: Aug 8 16:00:33 2025 GMT
Not After : Aug 9 16:00:33 2025 GMT
Subject: CN=263bb61fd790e91e9e3b519739f55660d8bdfd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:42:0a:5d:70:87:8e:87:2a:94:69:d2:f0:a2:
9f:1d:2e:3e:c1:f0:f6:b8:2b:e1:97:b4:6d:0d:57:
63:ae:14:59:cd:1b:2f:b6:d5:8a:66:51:69:ac:a9:
3a:be:46:1f:50:74:3f:fd:64:c9:bb:bf:3e:b7:27:
8e:b2:77:c4:23:54:a4:f8:54:bd:cc:f6:0b:8d:fb:
c7:10:4e:f4:03:2a:eb:01:a3:fa:88:1d:33:c0:d5:
46:88:8c:c1:d6:3f:f2:a3:57:7c:01:eb:a1:ed:b4:
50:a9:10:19:2f:9a:27:df:70:93:fd:1d:10:f3:1f:
82:e4:6d:70:2f:4c:a8:c0:0d:2e:d2:e1:95:b6:2a:
8b:e3:ba:a8:c0:90:4f:94:0c:cf:2a:ba:1a:49:ce:
22:5b:ec:bb:74:2e:c5:76:2d:ce:08:6f:e7:50:dc:
25:40:dd:5c:01:83:28:93:9d:8b:fb:4a:5a:49:b2:
28:b8:0f:41:11:d3:ef:6d:31:ba:af:e0:1c:6c:a6:
82:50:6a:a8:5c:0f:91:ae:97:75:f9:64:56:61:1b:
13:2e:d5:2f:fa:a2:c9:a1:62:ee:e0:24:a9:2e:f0:
d9:b2:8a:94:7d:1c:b1:32:6f:b5:c4:95:a6:36:ba:
28:8c:c0:e6:51:d4:63:fe:b9:42:83:25:64:eb:64:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3B:B6:1F:D7:90:E9:1E:9E:3B:51:97:39:F5:56:60:D8:BD:FD:4B
X509v3 Authority Key Identifier:
keyid:0B:31:CB:53:0F:E5:2F:CC:02:9E:64:97:E7:78:20:03:98:C2:9F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzHLUw_lL8wCnmSX53ggA5jCnzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a6899b-3bb2-4ddc-9c91-a1e3c394ee80/1/CzHLUw_lL8wCnmSX53ggA5jCnzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:05:c6:d7:e4:03:20:1d:55:5b:3c:bd:3b:cd:d9:71:94:9f:
68:80:2b:35:1b:ad:8e:2f:f0:f3:49:2d:29:6a:ef:c7:cf:75:
b1:81:89:ea:d4:f3:69:3c:94:e9:d3:83:c6:ca:d3:ce:ef:1c:
be:d8:57:02:40:1d:7a:ac:c8:09:e0:4b:c4:a2:e3:29:94:4c:
df:de:a6:46:4d:62:cf:1f:e6:98:4f:ed:5d:2d:69:ae:54:6d:
02:15:e5:94:4e:f2:cf:7e:39:01:12:1e:fa:3b:e9:b4:e1:41:
d8:0e:e3:9c:44:f4:21:2c:f6:48:15:30:a6:eb:51:42:e0:92:
b2:50:7f:93:da:cc:9d:ed:2d:c4:91:23:65:b1:aa:e9:b1:1e:
b1:f8:f3:43:45:97:32:b2:89:a5:f9:1d:8e:35:a8:98:3b:52:
07:36:eb:cf:19:a1:b7:aa:70:9c:93:60:94:48:51:0f:2a:23:
bf:5e:34:56:aa:b9:02:37:72:8e:55:8d:05:64:d1:6d:86:9f:
d9:9c:03:3b:07:cd:34:33:81:ff:d0:75:e5:ee:2a:b8:7f:8b:
3a:c9:0d:d5:9d:fc:c1:1a:ca:3e:38:3d:33:95:76:10:0b:fc:
1f:82:43:01:d0:e2:f5:67:20:19:b4:ac:68:11:d3:8f:6a:41:
6a:70:e4:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKaZyhgU01N3lPdMrzFmgTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzFjYjUzMGZlNTJmY2MwMjllNjQ5N2U3NzgyMDAzOThj
MjlmM2MwHhcNMjUwODA4MTYwMDMzWhcNMjUwODA5MTYwMDMzWjAzMTEwLwYDVQQD
EygyNjNiYjYxZmQ3OTBlOTFlOWUzYjUxOTczOWY1NTY2MGQ4YmRmZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUIKXXCHjocqlGnS8KKfHS4+wfD2
uCvhl7RtDVdjrhRZzRsvttWKZlFprKk6vkYfUHQ//WTJu78+tyeOsnfEI1Sk+FS9
zPYLjfvHEE70AyrrAaP6iB0zwNVGiIzB1j/yo1d8Aeuh7bRQqRAZL5on33CT/R0Q
8x+C5G1wL0yowA0u0uGVtiqL47qowJBPlAzPKroaSc4iW+y7dC7Fdi3OCG/nUNwl
QN1cAYMok52L+0paSbIouA9BEdPvbTG6r+AcbKaCUGqoXA+Rrpd1+WRWYRsTLtUv
+qLJoWLu4CSpLvDZsoqUfRyxMm+1xJWmNroojMDmUdRj/rlCgyVk62SFqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCY7th/XkOkenjtRlzn1VmDYvf1LMB8GA1UdIwQY
MBaAFAsxy1MP5S/MAp5kl+d4IAOYwp88MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEt
YTFlM2MzOTRlZTgwLzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9hNjg5OWItM2JiMi00ZGRjLTljOTEtYTFlM2MzOTRlZTgw
LzEvQ3pITFV3X2xMOHdDbm1TWDUzZ2dBNWpDbnp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgXG1+QD
IB1VWzy9O83ZcZSfaIArNRutji/w80ktKWrvx891sYGJ6tTzaTyU6dODxsrTzu8c
vthXAkAdeqzICeBLxKLjKZRM396mRk1izx/mmE/tXS1prlRtAhXllE7yz345ARIe
+jvptOFB2A7jnET0ISz2SBUwputRQuCSslB/k9rMne0txJEjZbGq6bEesfjzQ0WX
MrKJpfkdjjWomDtSBzbrzxmht6pwnJNglEhRDyojv140Vqq5AjdyjlWNBWTRbYaf
2ZwDOwfNNDOB/9B15e4quH+LOskN1Z38wRrKPjg9M5V2EAv8H4JDAdDi9WcgGbSs
aBHTj2pBanDkUQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:15:42 2025 by rpki-client