Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: udv6uSdxXrBrX/twNplLFvM8Gt4G5sD6yVSbRhEfPNw=
Subject key identifier: 6E:F9:CF:C1:F8:5E:52:82:C9:04:91:A1:FD:D1:FA:86:F8:31:1F:CD
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 019A4EF4F7206A08C65E277B8C03AB7CE47D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 0844
Signing time: Tue 04 Nov 2025 13:01:08 +0000
Manifest this update: Tue 04 Nov 2025 13:01:08 +0000
Manifest next update: Wed 05 Nov 2025 13:01:08 +0000
Files and hashes: 1: 0o1YRHDHs6Y_Qq6pCAQcKlyWFz8.roa (hash: nsMIKNS3OeQBs34bWYRCT4THehdiZrvKLdywuELl5UY=)
2: U5txbLmFPtaoMKOU1TbkV_FaGV8.roa (hash: z+0QM51o7tqW6/RjLGXF1BwNrcfJdd2i6D7WxQKXfAc=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: WIryiFAxLlDvwSer05QKC7RAe0wJHXefTyIQPJdeIUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:f7:20:6a:08:c6:5e:27:7b:8c:03:ab:7c:e4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Nov 4 13:01:08 2025 GMT
Not After : Nov 5 13:01:08 2025 GMT
Subject: CN=6ef9cfc1f85e5282c90491a1fdd1fa86f8311fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:45:40:3a:03:c2:1d:31:d3:99:5d:86:33:f2:
67:63:65:1f:2f:0f:24:13:96:72:7b:24:19:e5:87:
83:d3:81:38:fb:f1:e2:aa:92:b1:45:ee:8b:13:23:
97:47:79:a6:dd:ed:f8:a0:8b:75:4c:bd:9f:e3:30:
3c:ce:72:08:e7:0d:66:b6:52:bf:3f:3f:f1:c0:5f:
34:47:9d:2a:86:ad:79:2c:5a:30:66:1f:b0:2c:7e:
3c:1f:12:c0:05:cd:a7:c1:14:ec:c8:e9:ca:dc:a8:
4c:4f:8c:f5:ef:38:06:c2:18:02:98:cb:04:11:95:
e8:89:00:be:10:ea:b0:2b:9f:1e:f3:82:88:a9:4e:
6a:1f:4f:12:ef:47:ac:68:85:4e:c9:6f:85:7b:72:
04:94:86:8f:06:4b:86:93:5a:ad:5d:0e:a2:4f:14:
c1:ec:a6:00:38:29:b0:67:21:03:3e:7d:6b:16:be:
06:ea:07:b4:de:ad:a7:e4:99:e2:39:aa:fb:d7:6f:
91:74:39:ca:bd:19:b4:a9:6e:e2:5e:ef:c0:7e:b5:
6f:7b:32:a8:ab:33:0d:ba:4f:60:20:d8:68:82:e2:
65:9f:44:d8:ef:b5:cd:54:14:1c:2e:55:a9:98:d3:
9b:13:a9:52:80:b9:05:fd:a5:9e:0b:5d:78:6e:ad:
7c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F9:CF:C1:F8:5E:52:82:C9:04:91:A1:FD:D1:FA:86:F8:31:1F:CD
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0b:5e:82:8e:68:46:13:8f:4c:8d:32:f7:04:f3:6c:38:96:
d6:3d:b2:6e:e7:04:33:e7:ec:04:d3:63:45:a6:b1:68:48:0f:
23:35:ba:27:77:34:30:8d:93:b7:50:a5:15:8e:30:44:7c:27:
d4:8a:a1:82:66:03:53:0b:26:dc:d4:0a:f4:d4:c9:12:92:09:
be:53:fa:cb:b9:f4:f6:fd:e6:39:2d:77:fb:c4:11:73:8e:84:
5d:b1:20:34:a3:33:95:6c:ec:9e:99:ec:1f:08:62:a8:46:6e:
9c:64:94:3a:eb:7a:ba:95:36:a9:cf:c0:80:38:79:08:2c:24:
22:44:85:5e:27:ba:94:3f:cf:9a:59:30:53:9d:ad:4a:00:c7:
86:03:c0:a7:71:7c:0d:1f:ef:06:3a:93:d8:37:18:ef:c9:79:
ae:d2:55:c8:d6:7b:76:ea:68:46:2b:14:c0:47:5c:66:4d:c4:
00:fd:46:3f:96:1a:b0:54:64:5e:99:99:15:e0:83:9b:2f:5b:
f6:ca:12:74:33:36:8f:b2:06:b9:08:c7:a6:02:08:50:8c:07:
e0:79:04:52:78:72:98:55:38:7f:57:13:cf:57:6c:23:82:16:
cd:95:83:a0:8a:75:17:a4:5c:19:f4:e1:ad:ab:cd:55:e5:3d:
2c:2c:96:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9PcgagjGXid7jAOrfOR9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczM2IwNzI4YjdhMDU0MzU4NGMyY2QwYjQ4Yjc0NzhjNDE5
NGVmMGEwHhcNMjUxMTA0MTMwMTA4WhcNMjUxMTA1MTMwMTA4WjAzMTEwLwYDVQQD
Eyg2ZWY5Y2ZjMWY4NWU1MjgyYzkwNDkxYTFmZGQxZmE4NmY4MzExZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UVAOgPCHTHTmV2GM/JnY2UfLw8k
E5ZyeyQZ5YeD04E4+/HiqpKxRe6LEyOXR3mm3e34oIt1TL2f4zA8znII5w1mtlK/
Pz/xwF80R50qhq15LFowZh+wLH48HxLABc2nwRTsyOnK3KhMT4z17zgGwhgCmMsE
EZXoiQC+EOqwK58e84KIqU5qH08S70esaIVOyW+Fe3IElIaPBkuGk1qtXQ6iTxTB
7KYAOCmwZyEDPn1rFr4G6ge03q2n5JniOar712+RdDnKvRm0qW7iXu/AfrVvezKo
qzMNuk9gINhoguJln0TY77XNVBQcLlWpmNObE6lSgLkF/aWeC114bq18zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG75z8H4XlKCyQSRof3R+ob4MR/NMB8GA1UdIwQY
MBaAFHM7Byi3oFQ1hMLNC0i3R4xBlO8KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hODM0ZGEtMWNjYS00MDE3LTkwYjgt
ZGFlZTBhZWFmYjJiLzEvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hODM0ZGEtMWNjYS00MDE3LTkwYjgtZGFlZTBhZWFmYjJi
LzEvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQtego5o
RhOPTI0y9wTzbDiW1j2ybucEM+fsBNNjRaaxaEgPIzW6J3c0MI2Tt1ClFY4wRHwn
1IqhgmYDUwsm3NQK9NTJEpIJvlP6y7n09v3mOS13+8QRc46EXbEgNKMzlWzsnpns
HwhiqEZunGSUOut6upU2qc/AgDh5CCwkIkSFXie6lD/PmlkwU52tSgDHhgPAp3F8
DR/vBjqT2DcY78l5rtJVyNZ7dupoRisUwEdcZk3EAP1GP5YasFRkXpmZFeCDmy9b
9soSdDM2j7IGuQjHpgIIUIwH4HkEUnhymFU4f1cTz1dsI4IWzZWDoIp1F6RcGfTh
ravNVeU9LCyWjA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:11 2025 by rpki-client