Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
File: czsHKLegVDWEws0LSLdHjEGU7wo.mft (raw, json)
Hash identifier: eayNBztyR7U1XXOnzbTJWK0/abo07ZrEx3RCWQ7r0HQ=
Subject key identifier: 61:DC:D2:F8:86:4B:9D:31:D8:93:84:40:78:F7:BF:AF:60:8C:E2:67
Authority key identifier: 73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
Certificate issuer: /CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Certificate serial: 01976929AE4D44EDF0D26BA972B2A686B8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
Manifest number: 06C4
Signing time: Fri 13 Jun 2025 12:00:28 +0000
Manifest this update: Fri 13 Jun 2025 12:00:28 +0000
Manifest next update: Sat 14 Jun 2025 12:00:28 +0000
Files and hashes: 1: 0o1YRHDHs6Y_Qq6pCAQcKlyWFz8.roa (hash: nsMIKNS3OeQBs34bWYRCT4THehdiZrvKLdywuELl5UY=)
2: U5txbLmFPtaoMKOU1TbkV_FaGV8.roa (hash: z+0QM51o7tqW6/RjLGXF1BwNrcfJdd2i6D7WxQKXfAc=)
3: czsHKLegVDWEws0LSLdHjEGU7wo.crl (hash: I6HI/tXzoUxnTUB+UFGYuzeYciscMvZTLyZLLqik03c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:ae:4d:44:ed:f0:d2:6b:a9:72:b2:a6:86:b8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=733b0728b7a0543584c2cd0b48b7478c4194ef0a
Validity
Not Before: Jun 13 12:00:28 2025 GMT
Not After : Jun 14 12:00:28 2025 GMT
Subject: CN=61dcd2f8864b9d31d893844078f7bfaf608ce267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e6:1e:b0:c0:28:8a:e9:8f:c1:5c:36:3c:3d:
1c:ae:a6:72:b1:21:fa:f4:22:4c:2d:ae:60:ce:1a:
0c:b8:be:a6:8b:cc:95:c3:c1:f4:92:b8:a2:35:f1:
0a:21:79:95:e3:19:3a:e3:8b:74:8b:81:62:8c:c3:
6b:29:33:b4:fa:d4:97:78:66:a8:1b:e2:ad:13:5c:
cd:50:c7:e2:2e:a0:f3:22:34:b8:aa:44:e4:a3:bf:
db:82:b3:a1:50:f8:91:fd:5e:09:83:1b:53:84:cc:
2b:81:6d:15:1b:a0:af:a6:fc:06:1b:9a:7c:14:20:
0c:03:73:83:0d:89:4a:6f:36:8d:6e:8d:fd:82:44:
dc:c1:5e:3f:3a:a6:9f:c0:b3:a4:4c:01:66:15:b2:
ac:9b:1b:3a:e3:88:5b:63:18:4b:40:da:73:3d:da:
16:43:dc:c2:13:4a:04:56:1b:97:3f:7d:af:f9:8e:
79:6b:51:32:cd:3e:7f:e6:cd:24:9c:d0:39:cf:7d:
30:e0:72:16:47:fc:de:6c:e8:86:df:24:91:4c:a5:
4e:fd:3f:ae:dc:a6:25:5c:b9:81:c4:d6:18:dc:38:
bf:48:ef:4e:7a:79:fb:fd:25:2e:4d:b1:8c:d0:e8:
ce:2d:45:df:b9:92:b2:d4:21:a6:5a:f1:35:1d:6f:
4b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DC:D2:F8:86:4B:9D:31:D8:93:84:40:78:F7:BF:AF:60:8C:E2:67
X509v3 Authority Key Identifier:
keyid:73:3B:07:28:B7:A0:54:35:84:C2:CD:0B:48:B7:47:8C:41:94:EF:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czsHKLegVDWEws0LSLdHjEGU7wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a834da-1cca-4017-90b8-daee0aeafb2b/1/czsHKLegVDWEws0LSLdHjEGU7wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:98:a3:34:c7:87:32:07:ac:97:1d:e1:41:d4:6b:36:7f:42:
98:f2:2d:ff:10:f7:cd:0f:fe:ff:66:5f:51:b3:62:79:30:94:
5b:7e:5f:69:da:84:9e:57:24:2c:36:59:fa:6f:ae:c5:30:b4:
ef:67:9c:ed:74:7b:fc:df:fd:c6:99:ec:8d:af:31:1d:6a:39:
8a:73:a6:f0:72:45:24:50:19:fc:7f:3f:09:89:14:f2:f0:15:
e6:49:ea:ed:e9:b5:ef:22:e1:b4:7d:ea:2c:25:7e:86:33:a2:
62:d1:9b:e3:6c:9f:f9:bd:e5:40:2e:fd:22:a4:b9:ac:4f:22:
70:d0:5d:3d:ba:0a:07:e9:8d:76:88:ec:35:5e:4d:97:b8:a9:
8c:ec:7d:f8:2d:a1:28:0e:e9:84:e0:1a:32:cf:59:2b:a3:39:
12:1b:1c:90:ed:fe:85:37:76:cb:ca:1a:de:3a:1b:7d:38:b4:
fc:fc:2e:cd:7d:9e:9f:5e:56:61:4b:f0:b3:f9:7f:bc:ca:a6:
0b:72:b4:0f:84:3e:36:d4:11:6d:1d:e9:44:8e:70:86:80:72:
ce:81:72:73:92:19:77:c5:8f:01:c6:08:1e:2a:4f:5f:62:41:
53:95:38:2b:73:ec:23:5d:e6:22:06:2a:d8:d6:55:3b:b1:b5:
3d:45:01:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKa5NRO3w0mupcrKmhri9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczM2IwNzI4YjdhMDU0MzU4NGMyY2QwYjQ4Yjc0NzhjNDE5
NGVmMGEwHhcNMjUwNjEzMTIwMDI4WhcNMjUwNjE0MTIwMDI4WjAzMTEwLwYDVQQD
Eyg2MWRjZDJmODg2NGI5ZDMxZDg5Mzg0NDA3OGY3YmZhZjYwOGNlMjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+YesMAoiumPwVw2PD0crqZysSH6
9CJMLa5gzhoMuL6mi8yVw8H0kriiNfEKIXmV4xk644t0i4FijMNrKTO0+tSXeGao
G+KtE1zNUMfiLqDzIjS4qkTko7/bgrOhUPiR/V4JgxtThMwrgW0VG6CvpvwGG5p8
FCAMA3ODDYlKbzaNbo39gkTcwV4/OqafwLOkTAFmFbKsmxs644hbYxhLQNpzPdoW
Q9zCE0oEVhuXP32v+Y55a1EyzT5/5s0knNA5z30w4HIWR/zebOiG3ySRTKVO/T+u
3KYlXLmBxNYY3Di/SO9Oenn7/SUuTbGM0OjOLUXfuZKy1CGmWvE1HW9LjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHc0viGS50x2JOEQHj3v69gjOJnMB8GA1UdIwQY
MBaAFHM7Byi3oFQ1hMLNC0i3R4xBlO8KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hODM0ZGEtMWNjYS00MDE3LTkwYjgt
ZGFlZTBhZWFmYjJiLzEvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hODM0ZGEtMWNjYS00MDE3LTkwYjgtZGFlZTBhZWFmYjJi
LzEvY3pzSEtMZWdWRFdFd3MwTFNMZEhqRUdVN3dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeJijNMeH
Mgeslx3hQdRrNn9CmPIt/xD3zQ/+/2ZfUbNieTCUW35fadqEnlckLDZZ+m+uxTC0
72ec7XR7/N/9xpnsja8xHWo5inOm8HJFJFAZ/H8/CYkU8vAV5knq7em17yLhtH3q
LCV+hjOiYtGb42yf+b3lQC79IqS5rE8icNBdPboKB+mNdojsNV5Nl7ipjOx9+C2h
KA7phOAaMs9ZK6M5EhsckO3+hTd2y8oa3jobfTi0/PwuzX2en15WYUvws/l/vMqm
C3K0D4Q+NtQRbR3pRI5whoByzoFyc5IZd8WPAcYIHipPX2JBU5U4K3PsI13mIgYq
2NZVO7G1PUUBbA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:26:31 2025 by rpki-client