Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json)
Hash identifier: rzQK8KemzRj9U2IFdv9cGxw6ZEUQFjFQ9fJDFawS2TA=
Subject key identifier: 87:9D:86:E1:36:BE:0B:B4:1E:51:32:B1:17:E9:D1:A6:FF:0A:1A:36
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 019A4F6280C7096AD5AAE744B980E3219A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
Manifest number: 159A
Signing time: Tue 04 Nov 2025 15:00:46 +0000
Manifest this update: Tue 04 Nov 2025 15:00:46 +0000
Manifest next update: Wed 05 Nov 2025 15:00:46 +0000
Files and hashes: 1: 5MNHm2fG2K7ej_6HfywzVnWXnf8.roa (hash: a7dXOZ9Zvi0UjZGpNNuJ2dVdNWGu8ufMXG6I2NU70ow=)
2: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: 8bKmulJvxeODqWbrO2XbIdS7+j5BKDmCFkxhqydDUf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:80:c7:09:6a:d5:aa:e7:44:b9:80:e3:21:9a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: Nov 4 15:00:46 2025 GMT
Not After : Nov 5 15:00:46 2025 GMT
Subject: CN=879d86e136be0bb41e5132b117e9d1a6ff0a1a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:3f:0c:bf:a3:74:74:72:98:8b:43:33:48:
b6:2b:45:8c:ee:a5:13:1e:b5:81:95:1e:50:7e:c0:
de:b9:ed:59:ba:1b:c3:ae:a8:76:a4:72:61:8c:01:
f2:d1:ef:e5:ed:f1:74:a0:b1:d9:b7:76:ed:3c:ab:
a7:d6:17:b3:07:ce:db:1f:50:33:36:e9:d3:98:6e:
3b:c0:9e:f5:11:e4:2a:df:98:fb:ca:6e:44:f5:bd:
00:af:17:d6:e7:cb:a0:5e:79:27:8a:ec:ce:c0:a3:
b5:6a:c0:e9:a6:d5:6a:77:73:0e:40:aa:cf:cd:6c:
79:fd:8a:a0:4e:9b:1f:56:25:10:a8:8d:e7:be:d5:
9c:52:d4:f1:7a:57:4a:54:e5:a5:08:cd:ce:62:36:
ef:94:53:4e:80:51:4d:a5:6c:15:27:45:52:16:ee:
e9:7b:10:16:63:92:53:a6:60:b5:b7:15:03:5e:0a:
20:aa:bc:a4:c6:78:45:09:78:15:40:1b:b9:ad:b0:
c1:6c:7a:85:d4:bb:af:a5:f1:c9:0e:ac:c0:df:78:
fe:7e:51:9b:ab:66:9c:30:ad:8f:d8:02:42:b2:e0:
8c:9c:08:4e:ec:95:af:80:63:11:a1:0c:80:98:e6:
7d:7e:77:42:fd:b3:5f:cc:31:15:dd:01:a7:79:70:
0a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9D:86:E1:36:BE:0B:B4:1E:51:32:B1:17:E9:D1:A6:FF:0A:1A:36
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:dd:d8:4d:c3:9a:b1:71:15:2f:56:74:7a:fb:d9:f2:1a:ee:
c6:b5:86:f7:9a:f1:e0:51:60:df:22:cd:07:da:f0:de:20:9c:
ba:98:f8:4d:8f:07:bd:3d:fa:97:1a:bd:0d:1c:cc:45:9f:26:
ba:84:7a:23:e5:bd:f7:1f:69:7f:cb:ad:2d:f2:52:9f:a4:64:
dc:e3:a5:1b:84:23:5f:cd:ae:01:a8:f0:ec:77:12:c3:91:77:
76:de:30:a0:bd:b2:fc:c9:6a:b5:20:80:1f:2d:b0:c8:1a:2a:
0d:5d:1b:33:5f:c3:aa:15:d0:01:43:12:c8:30:51:e0:55:be:
0c:78:51:46:ec:41:29:45:a9:ac:fc:c6:0b:ff:5c:af:7f:94:
8e:bf:23:71:a2:b8:0e:0e:de:bd:61:d2:8e:01:fd:5a:18:c0:
0c:41:0e:25:2b:c4:2b:7f:b0:cf:2d:08:b5:f3:7a:52:36:ea:
81:c3:c6:3b:a5:af:26:cd:c3:c2:9f:a3:08:4f:95:eb:d8:95:
0e:b1:bd:09:e1:2f:f2:ba:11:82:c6:0c:00:3b:05:28:33:8e:
b5:e7:8f:84:b9:f0:71:d0:2a:6b:02:b9:da:f4:cf:eb:f7:a7:
98:fc:02:49:f9:bb:f7:52:0d:63:09:05:c9:16:e2:cb:08:d4:
13:cd:3b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:05 2025 by rpki-client