Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
File: CZ-qshYRGNsbd8GnTszLc-doHDY.mft (raw, json)
Hash identifier: 5oC9dR4AEql3xJdUtnLT5lxg0yLPt73VONz4vPv7m5k=
Subject key identifier: 5A:76:A4:C7:D7:50:43:70:55:11:FE:A2:A8:B4:ED:50:17:F2:EC:8F
Authority key identifier: 09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
Certificate issuer: /CN=099faab2161118db1b77c1a74ecccb73e7681c36
Certificate serial: 019A4FD065448BD3AF69BCCB77C19372DF02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
Manifest number: 0130
Signing time: Tue 04 Nov 2025 17:00:48 +0000
Manifest this update: Tue 04 Nov 2025 17:00:48 +0000
Manifest next update: Wed 05 Nov 2025 17:00:48 +0000
Files and hashes: 1: CZ-qshYRGNsbd8GnTszLc-doHDY.crl (hash: 5zt1cvd6rl7xDIwX2EJI5MKsC29/kPsxh5D1x+8B8G0=)
2: cOJF3c93EdtdcnQUgbiiqTgw_1M.roa (hash: zobvfeY7LZCgjAH4tIKeBPeHEqZ12dFg210JqNHCaCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:65:44:8b:d3:af:69:bc:cb:77:c1:93:72:df:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099faab2161118db1b77c1a74ecccb73e7681c36
Validity
Not Before: Nov 4 17:00:48 2025 GMT
Not After : Nov 5 17:00:48 2025 GMT
Subject: CN=5a76a4c7d75043705511fea2a8b4ed5017f2ec8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:13:69:34:a3:dc:81:10:4b:d1:fe:e1:b3:eb:
d1:1e:d5:a2:f5:5c:62:57:3d:38:b2:9d:d6:a7:35:
88:32:64:2f:82:7a:fe:0f:93:20:4d:af:f1:93:bf:
ec:bf:0c:8e:ae:1b:94:61:89:08:88:12:61:aa:4b:
f9:88:c6:01:94:76:d3:fb:30:cf:d5:77:32:64:7c:
91:15:53:fb:21:0d:89:53:0e:7f:19:a5:e8:8e:cd:
f0:10:f3:e4:e5:f5:53:38:de:62:9c:07:83:8b:8c:
85:74:49:10:ad:34:ec:41:2a:85:cd:ac:ab:58:52:
ba:85:ba:25:e6:35:d9:32:06:b8:27:32:7e:42:d2:
83:d0:6c:14:10:56:00:8a:e5:14:c2:72:ad:d3:a5:
8e:ba:d9:63:70:45:cd:81:23:6d:d6:0c:36:ed:17:
24:1a:6b:33:68:f5:59:b0:2b:55:68:52:4c:c6:00:
f3:c8:62:c5:08:76:23:95:a3:cb:6e:58:92:18:cc:
7a:fc:0d:f3:24:a6:63:9e:d1:17:39:f4:cc:72:b6:
31:e0:33:e4:f6:2e:79:d2:19:ed:61:7b:94:71:4b:
f4:1a:06:ed:2c:b1:9b:ae:80:c7:43:18:9f:67:ad:
31:de:7c:42:69:de:d9:94:f3:eb:ed:72:2a:6d:e2:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:76:A4:C7:D7:50:43:70:55:11:FE:A2:A8:B4:ED:50:17:F2:EC:8F
X509v3 Authority Key Identifier:
keyid:09:9F:AA:B2:16:11:18:DB:1B:77:C1:A7:4E:CC:CB:73:E7:68:1C:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ-qshYRGNsbd8GnTszLc-doHDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/88b6cc-2b42-41e2-99a9-4e24b119c147/1/CZ-qshYRGNsbd8GnTszLc-doHDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0b:d5:45:72:e1:f9:75:51:3b:19:3c:57:bd:02:5c:52:65:
36:60:3a:71:2a:9c:05:2f:90:40:5c:0d:80:1b:ff:5d:ac:0f:
22:24:25:6a:4b:32:8f:d4:32:0a:4b:65:c7:3c:d7:6b:c4:9a:
a6:7b:b2:5f:d0:e7:97:78:42:d5:a5:ed:86:d7:89:c8:ac:49:
65:b1:7a:03:50:70:9e:af:fe:ba:6c:aa:32:a6:a6:e7:83:d0:
e6:2b:f5:67:87:a3:a1:87:3d:53:d3:75:93:53:a3:bf:1d:e1:
49:2b:dd:44:94:ed:6d:3d:6e:3d:33:50:ec:d6:20:6c:ca:0d:
db:ce:35:9e:51:48:68:b3:94:d0:29:39:cf:1e:3d:05:7a:bb:
15:69:f4:f0:0f:e2:0f:56:d4:2b:24:84:98:2c:bc:e0:fc:ab:
fe:aa:70:a9:0c:4e:72:e7:7c:d0:85:86:2b:bf:c8:04:c5:07:
b8:a0:5f:17:dc:c1:0b:f5:a9:52:fe:5b:2f:6f:75:db:5e:4c:
d0:52:c4:af:d8:88:f4:a6:25:e1:fe:69:17:99:22:d3:05:e1:
72:16:09:9a:a5:bb:12:e5:d2:21:50:3e:c2:f5:a4:74:4d:a8:
6b:bf:63:d9:13:17:fc:16:98:94:85:99:e5:7c:0c:81:b8:c0:
4b:5c:a3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:33:28 2025 by rpki-client