Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: 78dnb0p1wIyrRi4ApF0fkSynxYaVzh3l+bx4F7DOuM4=
Subject key identifier: FE:F8:B2:A2:E6:5D:F0:F1:DC:0C:B0:D0:E1:E6:0E:57:8D:41:72:06
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 01976A05CAA564D71F4B05C878DDC391CFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 07AF
Signing time: Fri 13 Jun 2025 16:00:53 +0000
Manifest this update: Fri 13 Jun 2025 16:00:53 +0000
Manifest next update: Sat 14 Jun 2025 16:00:53 +0000
Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: 742ac/Gt+0sQw4rD0FAwFiRNhZMAVJ3tV7e+Kv3zUWM=)
2: Pc2EUIWHtHolnHBST8NkkBublHg.roa (hash: kiUdXWLazxPlTfW1//CR94yYtQySkuU4W6TmLo2zE+c=)
3: euzuAPfeJuv2-cm-rKuGKDxPe8I.roa (hash: 96LpiX/MLfmTkOgA68PX4zJcqAm4CD3qIp5sMcLFqNU=)
4: uqI-e9Q5-oja9rvPU1QcSBBgp4Y.roa (hash: RtcbvrEpnnUY7EwUTMkcJmd+p3YJpS4SOiugiRag4tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:ca:a5:64:d7:1f:4b:05:c8:78:dd:c3:91:cf:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Jun 13 16:00:53 2025 GMT
Not After : Jun 14 16:00:53 2025 GMT
Subject: CN=fef8b2a2e65df0f1dc0cb0d0e1e60e578d417206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ba:48:ce:4d:84:1b:c6:e6:0e:55:37:96:b4:
31:bc:45:3c:c4:9f:eb:9c:a9:cc:c5:a5:1e:a0:a6:
62:94:3a:25:48:46:d4:29:13:da:9e:cb:b3:7b:b0:
a8:85:98:59:fe:5a:4f:ba:a3:14:f3:d8:ec:70:8d:
32:bd:44:9d:bd:60:93:87:bb:d7:d3:95:00:3b:b7:
da:67:2b:cb:ca:c2:40:1f:c3:f9:67:98:b7:c0:12:
88:e0:1a:df:fd:2c:d9:3a:8f:b2:18:d2:ee:7b:06:
26:9b:91:ac:8c:9f:78:4a:6b:e8:01:50:ae:1c:61:
11:25:83:1d:22:9b:ce:c3:93:65:18:0e:09:2f:00:
2b:af:70:27:80:12:f4:24:16:72:4d:60:09:b8:d5:
30:25:21:d1:4e:2d:ee:62:bb:b9:44:c3:7c:53:cb:
fe:e5:7b:82:1e:36:94:d8:f9:6a:3d:8e:13:6e:1c:
7e:95:1d:84:b2:95:69:35:0b:38:ef:5d:23:89:4b:
38:41:90:58:d0:38:e9:9d:f5:cc:6d:df:f4:08:c7:
2d:35:70:94:28:33:9d:cf:46:9e:38:25:c2:62:54:
c0:a5:64:77:9b:0b:5a:64:0b:af:ce:96:36:3c:a5:
42:76:10:46:f7:ee:a1:61:39:88:f2:60:86:83:a0:
f6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F8:B2:A2:E6:5D:F0:F1:DC:0C:B0:D0:E1:E6:0E:57:8D:41:72:06
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:db:5c:15:77:b9:81:2a:13:82:a8:2e:e1:34:0f:ec:f5:a0:
31:4b:bf:cb:3b:7d:8d:d2:a4:4f:ec:30:01:a5:e6:c7:23:ec:
9b:d1:38:32:a7:b7:88:ec:6a:9f:7d:c5:7c:90:75:e6:98:58:
37:79:13:70:d3:ba:8b:7a:4d:44:24:56:a4:8b:ef:92:e6:73:
da:71:bf:7e:b9:0f:7b:f5:b7:11:4a:1b:38:d1:8e:a0:5a:ba:
4f:66:34:80:c6:1b:00:9f:10:b1:2e:a9:4e:1e:63:6c:5f:3d:
97:7a:25:76:f9:f9:9d:19:15:a8:51:b8:34:9f:2f:f1:48:83:
2e:b4:48:bf:7d:c7:c5:90:b3:11:ff:6a:df:63:e4:aa:41:3b:
9d:fc:a5:47:b7:c1:ec:11:17:88:42:dd:ea:ec:ce:b5:71:12:
17:9d:0e:6b:10:67:60:ba:77:82:fd:e7:d0:49:9e:8c:5e:79:
1b:a0:c7:6f:dc:ea:04:dd:c0:a5:78:88:34:bc:b1:4c:79:61:
5d:45:5e:72:b8:44:34:de:5b:5d:8c:f7:bc:b1:d5:c3:f3:95:
f4:9c:5b:92:db:09:60:ad:af:4c:50:d3:87:9f:56:e4:b5:5d:
75:bd:83:63:68:3d:fd:9d:2c:4c:7b:08:9d:33:c9:0c:33:a9:
3d:7a:db:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:38:31 2025 by rpki-client