Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
File: CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft (raw, json)
Hash identifier: 9hiW6NSOypEGefLdexpwLFxzR6/ChyQwED8NSOad4jw=
Subject key identifier: 74:3B:8D:B2:A4:07:9A:6E:45:A3:A0:00:2F:AA:5B:03:82:30:2B:19
Authority key identifier: 09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
Certificate issuer: /CN=099da06b80fa749068028b597be3e50e8b118786
Certificate serial: 01987ABFAD4FDAC954F9B51FAB7E71FF89CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
Manifest number: 0435
Signing time: Tue 05 Aug 2025 15:00:38 +0000
Manifest this update: Tue 05 Aug 2025 15:00:38 +0000
Manifest next update: Wed 06 Aug 2025 15:00:38 +0000
Files and hashes: 1: CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl (hash: JPLpA/q6xgkyFYzrI5agcx3VbVOcjmnqkGoX5n89G+I=)
2: ayUSDw8mdGoHelr_2bHuT_Ht97M.roa (hash: gvA+DDKSQOPFRf0cxBqKQel7xs/RAWw3rOxPxkz9/ZY=)
3: i3ThCtdNGW1cjUxQLhhdn5p0rJI.roa (hash: GXqzqfOOBrl4UZP/OkbdiBzFUWkoVhn5KODt99i+lAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:ad:4f:da:c9:54:f9:b5:1f:ab:7e:71:ff:89:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099da06b80fa749068028b597be3e50e8b118786
Validity
Not Before: Aug 5 15:00:38 2025 GMT
Not After : Aug 6 15:00:38 2025 GMT
Subject: CN=743b8db2a4079a6e45a3a0002faa5b0382302b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:48:f5:1e:cf:59:00:12:15:e5:6f:31:8c:60:
90:6f:3f:37:40:8b:7d:a9:2f:4e:23:5e:cd:0b:01:
6a:c4:f5:25:60:66:eb:4c:dc:81:08:96:82:f1:ee:
94:8b:8f:5c:fe:2b:99:22:f9:37:2e:b3:1d:c3:3d:
6a:c2:91:b6:54:3f:df:3e:67:3e:b8:82:76:22:2d:
8d:2b:57:6f:93:56:de:09:b0:78:6c:5b:38:07:92:
1a:a0:32:87:04:39:9f:04:d3:6c:ab:23:80:9f:b5:
c3:79:3d:c7:5e:94:f0:6f:38:99:90:91:b6:b3:3f:
1b:bd:07:ea:99:67:57:d6:47:a2:47:07:aa:67:c5:
04:bd:2b:ef:8a:66:be:b9:59:c8:7b:8e:8a:a4:02:
8a:5e:0a:10:e7:d8:c3:5e:41:5c:4c:eb:e2:ef:2a:
4c:c0:57:b5:65:df:cd:13:2a:a4:3b:70:6c:a5:f0:
60:12:d4:4e:d0:ed:b0:b4:90:98:7b:a7:f4:a9:c0:
eb:6f:bc:65:c3:a4:52:63:7e:55:2e:d0:e0:d7:78:
55:f2:50:b1:e6:96:48:ba:ec:eb:30:83:55:a2:18:
2e:b1:fa:95:dd:08:db:74:d9:4c:87:d2:04:6e:43:
45:d5:2e:d2:a4:c3:09:c9:f4:6f:09:22:f4:92:cd:
e8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3B:8D:B2:A4:07:9A:6E:45:A3:A0:00:2F:AA:5B:03:82:30:2B:19
X509v3 Authority Key Identifier:
keyid:09:9D:A0:6B:80:FA:74:90:68:02:8B:59:7B:E3:E5:0E:8B:11:87:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ2ga4D6dJBoAotZe-PlDosRh4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b404c7-bd3d-4752-8ade-31fcc455575e/1/CZ2ga4D6dJBoAotZe-PlDosRh4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:de:9f:5d:aa:88:b7:18:aa:ce:54:f9:a7:e3:db:23:88:05:
c6:7d:b4:b7:a1:95:63:e6:b4:9b:5a:99:d3:06:06:18:37:93:
c8:74:76:09:aa:92:dd:f5:b1:f8:f0:ac:92:f8:89:7a:75:d5:
57:94:6b:14:ae:f8:23:cd:74:b2:76:40:3b:df:1a:51:b9:e0:
35:02:ce:6a:f3:ff:0b:58:39:26:6c:25:28:33:1b:4a:3a:9e:
bb:c1:37:1a:9e:77:cd:e8:c1:f9:43:bb:b6:b1:bb:8b:ab:37:
52:0f:3c:93:5b:40:92:c0:dc:25:ee:82:2e:c7:80:98:15:74:
b8:9a:0d:bb:1e:98:41:3d:0d:ca:24:cd:c8:bb:ff:5d:7e:16:
3d:f1:de:f9:40:69:15:e2:4c:19:08:d1:8a:65:d8:70:ce:25:
6f:b3:0f:53:6f:91:bb:cd:bb:47:98:b4:3e:74:75:b0:6b:9f:
0d:89:b0:16:f3:5d:b8:cc:b8:21:d8:8f:b3:15:80:a1:95:3c:
e7:3c:74:f1:3c:06:85:cb:a5:f5:1b:6f:20:13:6b:fe:2a:24:
37:3b:b5:2e:fe:0c:9c:96:0c:e9:1a:54:59:01:07:fc:16:01:
ff:cb:31:19:59:f2:2a:e4:85:f4:ee:9c:a5:49:9c:2d:bd:8f:
be:37:4b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:20:28 2025 by rpki-client