Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: t/HxIZSsbrnRzIq+1HKJFMt6DAPezY/XVBFhDQHqyqc=
Subject key identifier: C9:91:9B:A8:3F:5E:5C:9B:E8:67:10:4D:CC:E8:F4:7A:27:7F:BD:8F
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 01988EEBB039402C7394B00D938AE42CD6F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 075C
Signing time: Sat 09 Aug 2025 13:01:07 +0000
Manifest this update: Sat 09 Aug 2025 13:01:07 +0000
Manifest next update: Sun 10 Aug 2025 13:01:07 +0000
Files and hashes: 1: 0o1YRHDHs6Y_Qq6pCAQcKlyWFz8.roa (hash: nsMIKNS3OeQBs34bWYRCT4THehdiZrvKLdywuELl5UY=)
2: U5txbLmFPtaoMKOU1TbkV_FaGV8.roa (hash: z+0QM51o7tqW6/RjLGXF1BwNrcfJdd2i6D7WxQKXfAc=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: sSBz4em9zpIRg0T7kvIqRnTpLSEy8kwqqicKiAubbME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:b0:39:40:2c:73:94:b0:0d:93:8a:e4:2c:d6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Aug 9 13:01:07 2025 GMT
Not After : Aug 10 13:01:07 2025 GMT
Subject: CN=c9919ba83f5e5c9be867104dcce8f47a277fbd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b1:62:0b:5d:57:06:e7:46:36:5f:c6:03:09:
32:e0:73:8e:5e:d7:ae:c3:0c:de:e5:dc:88:82:3c:
3c:d2:00:d2:86:c8:64:9f:23:2b:a6:f8:2c:66:d2:
f4:b2:4d:e0:90:16:72:39:5c:c7:79:9a:f5:e2:9b:
f0:58:a1:74:4f:dc:67:99:cd:c9:56:cf:ac:73:bd:
ed:e9:69:19:1a:c0:f1:ca:03:7e:aa:6f:a4:c1:0f:
15:54:89:a3:62:38:d9:db:45:57:89:44:18:28:b1:
44:32:0a:48:b3:f3:cc:82:1d:61:5a:d4:30:de:62:
28:bf:a3:5c:4a:79:b8:4c:07:5f:41:f7:26:00:14:
b4:ed:a8:77:f5:bf:29:fc:16:5d:4e:a9:5b:e2:f3:
46:ae:af:11:3d:78:9a:36:a3:70:fc:13:5e:5d:e4:
bf:25:6b:dd:e9:f0:bf:01:da:5e:57:56:59:88:31:
12:2e:03:83:aa:f0:57:e0:16:c0:34:97:ae:03:3f:
1a:fc:be:a7:46:3f:13:84:8e:c2:6f:d9:3a:ae:b3:
41:7b:54:41:45:f5:33:c8:da:57:5a:4a:ff:cd:ca:
82:21:1a:4f:aa:1c:b2:12:c6:a6:f4:e2:60:87:f6:
d4:20:c5:21:70:82:6a:40:e9:f8:d4:a9:59:d2:8d:
82:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:91:9B:A8:3F:5E:5C:9B:E8:67:10:4D:CC:E8:F4:7A:27:7F:BD:8F
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:bb:ff:46:c7:15:bf:bb:6d:48:1c:29:3a:9d:07:75:6e:09:
43:92:71:a5:75:e5:fa:e1:40:d4:39:55:2e:08:3a:ff:94:88:
10:e8:28:52:3d:32:23:1f:57:3e:f8:12:d3:10:f4:7d:98:e9:
81:be:16:10:1a:71:88:2c:52:48:75:d1:83:25:76:ef:0a:c9:
c9:76:85:9d:90:f8:47:78:e3:ce:3c:b1:90:55:a0:9e:6f:ea:
7a:44:f4:b8:e5:1f:c8:28:b4:26:c6:1e:73:0b:7f:94:92:63:
c7:52:e7:4b:c9:1e:4b:16:78:0d:5a:0e:7b:3f:1a:dc:b4:1b:
1b:00:df:37:a0:53:7c:ed:67:99:0d:9d:4a:4c:79:fe:87:97:
2a:89:88:b8:dc:a6:e8:1d:a2:59:ec:69:10:72:b1:f7:63:34:
5b:9f:32:64:88:18:46:60:0a:b0:21:f5:b8:3c:c5:cb:c7:1b:
64:c3:1f:33:52:ee:70:62:bd:96:77:2d:dc:cc:63:13:55:9d:
45:ec:f7:76:fc:8f:e6:9c:83:67:f9:05:98:36:62:e2:b8:7b:
aa:dd:1f:00:ca:24:1d:26:69:52:b8:b8:a8:83:80:1e:65:c7:
b1:03:d0:33:4f:30:20:3d:14:6a:3a:56:a1:48:1e:b2:dd:fe:
10:3c:4f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:32 2025 by rpki-client