Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
File: CzAFeBftL9lZWEYyD9uBTJ_EShM.mft (raw, json)
Hash identifier: 6cx7FkHlhkAgj04wpxv3nR0FJyCJ3guxFWY6N2nGDvY=
Subject key identifier: C8:A9:51:7A:7D:86:B2:24:ED:9B:44:67:08:A0:0F:5E:F6:2B:67:82
Authority key identifier: 0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
Certificate issuer: /CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Certificate serial: 019A545184E9555ADADB00C696E4B9343444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
Manifest number: AE
Signing time: Wed 05 Nov 2025 14:00:19 +0000
Manifest this update: Wed 05 Nov 2025 14:00:19 +0000
Manifest next update: Thu 06 Nov 2025 14:00:19 +0000
Files and hashes: 1: 5rGgrqdPoueZL9n49lewJLQalrU.roa (hash: TQRxGNLMYQGT2NG1xMafNXAuCm7U0yoBgbBdMTpn79I=)
2: CzAFeBftL9lZWEYyD9uBTJ_EShM.crl (hash: olSGYMd5IaA6zddx4LfurJIucKAo9Q94DBkESbOWIxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:84:e9:55:5a:da:db:00:c6:96:e4:b9:34:34:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b30057817ed2fd9595846320fdb814c9fc44a13
Validity
Not Before: Nov 5 14:00:19 2025 GMT
Not After : Nov 6 14:00:19 2025 GMT
Subject: CN=c8a9517a7d86b224ed9b446708a00f5ef62b6782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d3:6d:e4:5d:92:d2:04:98:22:6c:8d:08:ab:
7e:6e:bf:da:37:f0:d5:c5:33:af:25:e4:1c:ff:c1:
6a:e9:41:0c:b6:92:cf:f3:de:73:3a:ee:56:ef:b6:
0f:e4:f9:29:7a:c8:36:69:c7:9d:0c:73:6e:a0:01:
1c:fe:c4:5b:b0:f3:f1:7e:86:5f:5d:54:0f:a5:d5:
c2:ac:7a:ed:9a:b8:1d:57:14:13:0b:f5:ac:70:94:
29:0d:b3:92:70:0e:93:a0:42:2b:b0:6f:d8:70:96:
79:4a:b9:d6:66:b6:2c:41:73:91:d9:54:cb:69:26:
0f:9c:ab:55:27:6d:d3:6b:d0:27:2b:47:42:42:a1:
69:1b:fe:8b:fc:a1:cc:96:c4:62:b6:17:9c:2d:a3:
37:92:51:12:88:ea:25:1f:02:a5:6c:14:9e:0b:10:
2a:9d:46:5c:4d:26:f6:41:2f:d0:3c:9c:40:82:54:
da:17:81:8e:1f:a5:a8:81:b9:99:50:c8:be:24:b8:
b7:74:f0:a7:12:ec:ca:f1:c3:61:c3:cb:1a:f5:b2:
0b:d1:03:45:9e:17:d8:34:47:da:c8:7c:9c:a3:cc:
d4:43:ba:18:d6:63:ba:b9:9a:c5:2b:89:6f:a3:48:
6c:87:e1:e5:e8:33:85:b6:ac:1d:5d:33:6e:9f:ce:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A9:51:7A:7D:86:B2:24:ED:9B:44:67:08:A0:0F:5E:F6:2B:67:82
X509v3 Authority Key Identifier:
keyid:0B:30:05:78:17:ED:2F:D9:59:58:46:32:0F:DB:81:4C:9F:C4:4A:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzAFeBftL9lZWEYyD9uBTJ_EShM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0f087b-7253-461e-9021-9a91219f06e1/1/CzAFeBftL9lZWEYyD9uBTJ_EShM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fd:c2:1f:87:75:77:0b:57:c0:9e:89:87:8c:b1:8a:17:16:
f1:c8:89:38:19:d3:9f:5d:9b:78:34:3b:77:32:e3:11:e0:8b:
69:f8:60:30:8b:87:a9:91:af:50:e5:c0:2d:ec:27:0b:a5:02:
74:59:e0:5d:9c:5d:01:7a:ce:e8:b7:92:ee:55:ac:2d:b5:c1:
0e:75:d1:81:48:d1:53:b0:cc:41:ab:5c:33:5e:11:f1:b6:79:
90:4f:f8:d7:45:cd:79:d2:bd:a3:45:f4:ea:0a:09:bc:c7:69:
ae:99:87:3a:9f:45:7a:a8:a3:93:61:2a:4d:af:a7:20:89:71:
5a:a3:76:10:c0:25:46:ac:34:3d:c2:41:7b:33:66:be:d1:88:
48:09:bc:d9:07:8b:29:47:b4:e0:99:da:cf:9e:ec:d0:ac:02:
ff:0d:7b:e6:06:5f:91:ec:ad:39:62:bb:2d:3f:67:af:cc:62:
ba:f9:c9:99:61:d4:0c:7c:d8:13:2f:34:36:c9:d6:15:59:7c:
15:0f:25:9a:2e:79:1f:90:93:d1:43:3f:e3:c2:b6:a7:2a:5a:
a7:fe:38:a2:ad:b8:7b:b8:af:f0:1c:35:6a:0f:50:cf:c3:38:
f5:a3:36:c0:8f:b5:52:9c:e4:e9:67:30:12:4e:b4:a5:3c:14:
11:ed:ef:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:21:08 2025 by rpki-client