Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
File: CZofLb97eoSuV7jWdCa35OQg-rU.mft (raw, json)
Hash identifier: t4BYG9QtuvSgsjk4jbY3KuCOFscb12JIGD0l9qxmGvI=
Subject key identifier: DC:DE:BE:48:FF:19:C7:EB:BD:97:7C:8F:A2:DB:B3:C4:73:2A:68:F6
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 019A53ACA265329DA81CBDEE46138FE40666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
Manifest number: 0933
Signing time: Wed 05 Nov 2025 11:00:13 +0000
Manifest this update: Wed 05 Nov 2025 11:00:13 +0000
Manifest next update: Thu 06 Nov 2025 11:00:13 +0000
Files and hashes: 1: CZofLb97eoSuV7jWdCa35OQg-rU.crl (hash: L/hp/sdJSMxZCqUQDurhX7ic/DrJ14eV9xujFhg0f2w=)
2: HqTsKMzQ0ZT6EWdw3vIu6V7f0-0.roa (hash: XAADGyY0qZeBmfbDAFAKBEvQz5AA3E8cyxfxY5GJ7pQ=)
3: euzuAPfeJuv2-cm-rKuGKDxPe8I.roa (hash: 96LpiX/MLfmTkOgA68PX4zJcqAm4CD3qIp5sMcLFqNU=)
4: uqI-e9Q5-oja9rvPU1QcSBBgp4Y.roa (hash: RtcbvrEpnnUY7EwUTMkcJmd+p3YJpS4SOiugiRag4tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:a2:65:32:9d:a8:1c:bd:ee:46:13:8f:e4:06:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Nov 5 11:00:13 2025 GMT
Not After : Nov 6 11:00:13 2025 GMT
Subject: CN=dcdebe48ff19c7ebbd977c8fa2dbb3c4732a68f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3c:91:f0:9e:a7:e9:b8:e5:06:50:0c:c9:9f:
bc:55:35:c2:78:9c:1b:c2:e6:22:51:ab:8e:3c:a0:
7a:8e:f7:69:c1:69:15:f9:b7:3c:75:fb:c7:fb:4c:
70:4d:80:94:a6:03:e1:49:b5:29:9f:56:28:25:cd:
a3:e5:86:9f:68:d2:28:8e:dc:50:bf:16:0c:cd:d6:
85:f2:79:4f:5f:d4:27:a8:93:87:c9:be:82:2c:04:
e1:2a:d9:43:95:0f:43:4a:da:2c:ee:02:5f:9e:34:
d0:c9:ba:06:6c:1b:7f:56:a0:b1:13:4e:e9:5c:7a:
00:6d:f3:e7:d5:83:e9:c1:d1:d8:98:5e:de:ce:2d:
71:9a:2b:9d:cb:2d:12:6c:e0:f6:36:ca:cc:a4:01:
fb:1c:b7:b1:bc:3a:6a:08:d1:e1:6f:ce:05:24:1a:
e1:8f:aa:22:88:6b:05:ce:65:20:54:27:81:28:6b:
9f:fb:17:dd:51:dc:ac:2c:e8:e9:8a:b4:98:02:99:
51:b9:85:95:af:bf:fb:06:dc:63:6f:5a:0c:eb:04:
62:a3:9f:4a:c8:9a:28:8c:dc:05:ad:ed:60:7d:be:
68:ea:1c:11:e5:8b:c3:67:f7:d8:ad:d2:a1:ac:fa:
4a:4c:2d:c8:00:ff:a3:f2:f8:dc:8f:0d:13:29:98:
4a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DE:BE:48:FF:19:C7:EB:BD:97:7C:8F:A2:DB:B3:C4:73:2A:68:F6
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f8:95:2a:22:2f:ed:24:9a:df:1d:ca:e5:9c:ab:98:26:cb:
49:d1:a7:cc:0c:93:59:f9:c8:90:2d:d8:3d:03:a7:ab:f0:d1:
e9:32:32:97:7b:bf:ab:f5:b0:2c:dd:2a:a7:6a:b4:29:a4:b4:
da:db:4f:bf:d0:a5:fd:3d:c5:ac:b1:a6:90:e4:c0:4f:73:92:
6b:67:05:6a:ee:9f:c6:94:ff:86:bb:39:49:ae:1f:a1:bd:dd:
ea:a2:9a:f7:1d:55:ef:50:83:6f:11:f5:8e:11:86:87:1b:5e:
c9:c8:ea:d1:74:fd:73:6c:d8:3a:c3:42:04:0d:8e:5a:8f:a2:
04:54:c1:9f:89:2a:ae:59:4e:55:be:7d:0b:1e:42:97:b2:cb:
f3:85:15:69:a9:6f:8f:28:d9:06:11:94:6f:33:df:5b:25:63:
fb:4a:e1:9c:f8:dc:cc:8d:6b:61:e1:a3:b8:85:53:4b:7e:be:
10:a8:4f:ef:a9:f0:b7:c5:55:06:d9:5e:25:86:14:99:67:29:
10:34:1e:21:c6:97:79:15:9c:6e:31:ea:b0:36:c1:c8:a5:60:
29:85:e7:9b:1a:0b:d6:25:75:ca:80:e3:2f:e3:2c:e1:f4:4e:
88:f9:a5:3f:14:6a:10:05:fd:d7:cb:1e:05:d4:c9:f9:bf:6e:
b1:e7:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:31:48 2025 by rpki-client