Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
File: czaDy4VtbZ_1jih-ipBdKS3KazQ.mft (raw, json)
Hash identifier: MBG9WjABqPd9NYKVf8JfzGg2MOOiO3SU9k9D7+gN/Kw=
Subject key identifier: E7:7A:C1:6F:1F:E0:D2:AF:92:33:AB:57:9C:A2:7D:97:47:94:91:AF
Authority key identifier: 73:36:83:CB:85:6D:6D:9F:F5:8E:28:7E:8A:90:5D:29:2D:CA:6B:34
Certificate issuer: /CN=733683cb856d6d9ff58e287e8a905d292dca6b34
Certificate serial: 01987B9B532F79803DB74C1776C14BC9A969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
Manifest number: 1260
Signing time: Tue 05 Aug 2025 19:00:33 +0000
Manifest this update: Tue 05 Aug 2025 19:00:33 +0000
Manifest next update: Wed 06 Aug 2025 19:00:33 +0000
Files and hashes: 1: 1VNg1Q5CgydMlZtkT2gUiwyQsB8.roa (hash: hFOtYhVCGxVTmNvasMZGAdD1D7TMmY398V7CPu+M+nU=)
2: czaDy4VtbZ_1jih-ipBdKS3KazQ.crl (hash: WGZ786GHUi5QzNO1OBOX2dyQnINXmQY1wYtl484A0kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:53:2f:79:80:3d:b7:4c:17:76:c1:4b:c9:a9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733683cb856d6d9ff58e287e8a905d292dca6b34
Validity
Not Before: Aug 5 19:00:33 2025 GMT
Not After : Aug 6 19:00:33 2025 GMT
Subject: CN=e77ac16f1fe0d2af9233ab579ca27d97479491af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5a:59:7d:fd:25:91:d7:1e:cf:d9:86:e4:77:
a1:96:dd:32:61:72:78:76:b4:32:0e:dd:6a:a1:3d:
36:0d:a4:35:97:64:6d:0d:5f:eb:50:d6:c6:e5:f4:
f6:95:e5:77:33:10:cb:42:57:63:91:a0:52:55:ec:
73:56:e1:69:74:c8:65:45:49:8f:eb:f2:3e:f1:9a:
3f:44:fd:32:db:f5:18:cd:99:d0:fd:10:5a:c4:dd:
0f:26:e7:2d:3d:2d:26:46:cd:bd:40:8b:dd:98:11:
33:00:bd:f8:28:f1:9a:31:de:fa:48:b0:f0:05:44:
f8:2e:99:35:f2:75:00:20:df:49:27:f6:c8:ee:7f:
ec:3a:51:d2:4a:36:6b:fc:ed:ae:d8:15:e7:79:ae:
3d:31:fc:30:8d:50:d7:ba:5a:2b:d7:e2:c2:b4:54:
9d:65:0e:6a:01:94:2a:a0:de:92:0d:8f:6f:5e:5e:
7a:01:bc:80:6b:da:bd:91:63:d2:3a:78:39:3f:5c:
39:50:14:3d:b8:a3:56:e6:5e:1b:d2:77:93:59:07:
29:39:dc:93:a4:c1:e9:d4:74:86:a9:32:9e:7a:58:
fe:45:5d:5b:a9:61:a6:ba:fa:16:be:84:84:ba:97:
fb:fa:7d:f9:2b:b0:25:19:7c:41:74:77:0c:d1:73:
91:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7A:C1:6F:1F:E0:D2:AF:92:33:AB:57:9C:A2:7D:97:47:94:91:AF
X509v3 Authority Key Identifier:
keyid:73:36:83:CB:85:6D:6D:9F:F5:8E:28:7E:8A:90:5D:29:2D:CA:6B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czaDy4VtbZ_1jih-ipBdKS3KazQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/844769-cb3e-45cd-9165-687ae6fba3ad/1/czaDy4VtbZ_1jih-ipBdKS3KazQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:94:22:d9:0c:21:50:8c:5d:cc:63:fa:3f:2e:f0:58:3d:3a:
26:c9:5c:7a:54:08:cc:ef:d0:ed:13:db:b6:71:4d:d7:9b:a1:
7d:cb:d3:cc:94:93:03:88:88:85:8c:c0:87:83:82:24:a1:46:
6e:1d:8f:4c:01:76:5c:10:9d:19:3b:c9:46:2e:a9:15:62:76:
f5:99:7b:e4:b4:91:10:b2:74:ba:31:1e:14:fc:a9:a6:45:e8:
3e:c0:57:b5:e4:9f:4d:5c:21:c1:4a:47:9c:fb:16:70:a3:ad:
b5:b6:17:05:4b:27:47:a9:77:68:7e:c6:29:b3:62:a6:fd:59:
78:81:15:dc:2e:a5:df:6f:0b:6c:69:b2:7c:8d:fd:00:36:ad:
03:ce:d0:a5:5d:52:01:b1:78:8d:df:b2:74:52:85:7a:6d:63:
dc:27:a4:72:dd:6e:80:90:7a:a6:d5:8f:02:22:41:6c:58:ad:
21:45:83:bc:ba:fb:13:20:f7:59:ea:e1:c0:78:08:1a:1b:09:
09:78:15:ed:5c:85:fc:2d:0e:93:f6:db:11:cb:ad:bf:8f:ad:
2a:aa:e7:f0:d8:00:27:a9:12:31:ab:13:ab:9e:ae:78:86:00:
df:94:eb:61:d7:1f:d2:e9:c0:4d:15:e0:e6:28:c4:ac:21:0c:
9d:5a:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:52:58 2025 by rpki-client