Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: NZQG1KkVxP4CvnZBBh8kCPfdEi03rtTsPE3ItGDdOis=
Subject key identifier: 01:D9:08:1A:95:95:7E:7E:BB:3C:D4:2F:CB:4A:20:E7:5A:30:C1:19
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 01984664C9693452DFED492DC9EF1F225EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 11:01:06 +0000
Manifest this update: Sat 26 Jul 2025 11:01:06 +0000
Manifest next update: Sun 27 Jul 2025 11:01:06 +0000
Files and hashes: 1: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: A2lKKU8Uy0Vf9VgizzIl9GFvsBPxopJfZXaLGirfpUQ=)
2: giwtVjICmBb7Wkk9XSwHCSUK3bc.roa (hash: SM3eUbTtftqB5mgjXwnJPjn0hv5BI9fsCx4auk3D0GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:c9:69:34:52:df:ed:49:2d:c9:ef:1f:22:5e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Jul 26 11:01:06 2025 GMT
Not After : Jul 27 11:01:06 2025 GMT
Subject: CN=01d9081a95957e7ebb3cd42fcb4a20e75a30c119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d8:e3:5c:4e:a1:d4:7c:6e:c2:33:2a:66:66:
08:af:ec:b3:fe:16:f2:19:c6:92:26:9d:c6:7a:fb:
5a:fc:9c:5e:e2:55:d0:4c:54:b5:59:57:75:56:33:
c1:80:c5:b2:e3:f3:c3:61:d8:ce:b5:24:ed:eb:3b:
55:79:31:56:d1:55:a4:e7:89:74:55:84:f2:a4:18:
d9:32:23:49:3d:c4:ae:0c:36:ff:a3:f7:69:f2:fc:
95:aa:1a:9f:ed:63:ec:15:15:64:96:c6:5b:bd:dd:
92:de:4f:a1:c2:af:2e:3b:01:91:73:d7:71:6e:96:
f7:80:18:27:05:f4:ba:2c:48:a4:94:35:c2:76:32:
e4:06:a7:15:e2:31:23:38:c4:23:2f:e8:fb:40:90:
e2:07:bc:15:3b:2a:dc:00:95:82:37:7c:a8:78:eb:
bb:13:c3:47:2a:f4:51:93:e7:a7:ff:57:0b:6d:ae:
9c:86:56:f4:8e:02:f1:f0:71:6d:b4:b2:4b:6b:8d:
bb:b1:72:36:fb:11:05:3e:46:ed:95:84:c1:e5:23:
ad:0d:94:94:e0:81:68:f4:08:f9:d4:d5:e8:42:fa:
b8:d3:09:14:4a:e9:e0:9d:92:c9:5d:40:31:82:a0:
40:8e:4f:ff:11:32:20:d3:0b:f7:13:fc:05:02:91:
1b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D9:08:1A:95:95:7E:7E:BB:3C:D4:2F:CB:4A:20:E7:5A:30:C1:19
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f7:e5:8b:d3:a8:5a:b4:a7:2e:ba:64:8d:16:12:39:93:3b:
93:0c:18:ea:be:8e:7b:0c:ce:7f:1d:68:9e:ef:67:c3:c4:59:
8c:b1:2b:9d:2b:b7:e5:aa:32:75:43:30:b7:c6:f6:e7:e6:51:
eb:58:c8:45:3d:e3:1e:89:97:90:13:0d:54:eb:84:79:e5:30:
da:af:85:68:c1:94:36:5f:38:50:72:6a:0e:ae:ca:45:9a:4f:
d8:5f:a7:e3:b4:e8:57:76:b4:2d:38:51:6d:a5:c0:e3:c1:7a:
01:17:e1:4f:ee:ae:59:14:dc:0e:b2:7b:17:6b:88:d3:7f:fd:
1f:2b:45:b8:9f:95:f4:f9:3a:cd:1a:fc:27:6c:16:a2:3e:79:
91:b9:9f:78:00:93:d1:d5:2e:57:9d:3a:04:49:22:d5:69:be:
8a:ff:d4:74:51:3d:32:35:67:e1:43:5e:ec:51:49:9a:84:b0:
fa:71:ee:16:fb:dd:68:b9:41:1c:a3:b5:37:c3:c7:95:c9:d2:
e1:51:8a:9f:ee:74:4f:54:12:48:be:a9:b2:9d:c9:76:b7:52:
9a:02:de:2d:52:7d:28:a5:10:3b:14:f2:6b:cf:9e:2c:c5:0c:
83:fe:f6:bb:d7:a5:fe:bb:19:ea:b0:24:72:49:6b:bd:6a:31:
15:1b:f9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 18:59:05 2025 by rpki-client