Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
File: K21-UZH4H_ChnxArFxirT54Oo6A.mft (raw, json)
Hash identifier: qgjC39JmK6H219LC1UQ9+p2v9FAzIFxHg2JlxdxnNPE=
Subject key identifier: 35:C8:E7:79:83:0E:CA:B1:F3:FA:E9:B3:FA:31:F1:24:D4:98:34:A4
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial: 019A1EE39F5E1043A833CC30A9FAD1A7C085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
Manifest number: 0FDC
Signing time: Sun 26 Oct 2025 05:00:25 +0000
Manifest this update: Sun 26 Oct 2025 05:00:25 +0000
Manifest next update: Mon 27 Oct 2025 05:00:25 +0000
Files and hashes: 1: JMuA_SE4InzW1qKeTVpx_3oL0q8.roa (hash: R6FzokXTO51RahiuJEIKsH+gffyhCqg/DyumMrYKwlc=)
2: K21-UZH4H_ChnxArFxirT54Oo6A.crl (hash: L6b7vbJoUQC5P1Ra7lHB/3Q+waNfYTb3PmIQlDlchTU=)
3: mIULbw_VsYjjAm8nAGiad1FVRCA.roa (hash: RZC9YnUkAnJgl+1L4ykyICx092CEcPZwqJ0fdIhJKfk=)
4: tOKffNLeqoCRQyLhX0pk9w0e9gE.roa (hash: ZtE1N4hx0o7ezg+y2AZrHnoAdijePQwyuxVbH8gDLhU=)
5: xsMX4xnBtAkWlhocItT5wdfVH3k.roa (hash: z7ATRuzsizy0J/zWBm/YAirUNrjy9iWYQrOG/F0bSwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:e3:9f:5e:10:43:a8:33:cc:30:a9:fa:d1:a7:c0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Validity
Not Before: Oct 26 05:00:25 2025 GMT
Not After : Oct 27 05:00:25 2025 GMT
Subject: CN=35c8e779830ecab1f3fae9b3fa31f124d49834a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6c:88:3d:32:0d:87:ea:24:fe:4e:2e:d2:2e:
e7:d0:ea:18:57:bf:db:8f:36:f0:0c:2b:2b:b2:55:
cb:68:81:68:5b:f2:4c:d3:dc:68:b3:31:12:1b:ef:
dd:b5:c0:44:da:cc:2e:68:31:c9:7b:d7:88:3c:68:
5c:79:a5:e8:45:38:44:51:cc:ae:1b:bc:e8:7e:a5:
02:e4:b5:36:00:f9:7a:4f:51:81:df:c1:76:f5:38:
ef:dd:3e:94:7d:b1:39:1b:c1:ae:ae:38:fd:ff:10:
65:e1:e1:21:ab:2b:e1:1a:5d:ee:60:b8:d7:c9:34:
75:7f:ef:1b:24:8b:f0:b2:04:a8:00:a3:a0:72:b3:
15:39:1e:0a:61:9c:f7:a3:ff:60:57:0d:ea:4b:7b:
69:ea:8d:66:8f:a5:ed:c0:26:c4:8e:0a:ba:11:26:
ee:ea:cc:ae:de:a7:a8:7a:2c:b0:20:49:7a:6e:f4:
a9:48:22:a2:c5:57:8f:dc:aa:4c:05:41:18:18:1a:
e8:dc:64:3c:2e:53:3e:ee:f5:fb:8e:da:62:ec:6d:
1a:9b:b4:3c:ef:f9:c5:12:8b:c8:0f:a4:70:f1:c7:
01:3d:08:78:30:f3:78:c1:10:9c:e2:3d:dc:2d:9b:
f0:3d:1b:57:cf:f4:28:a5:ac:01:a0:16:c3:a8:85:
9a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C8:E7:79:83:0E:CA:B1:F3:FA:E9:B3:FA:31:F1:24:D4:98:34:A4
X509v3 Authority Key Identifier:
keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:92:a8:77:ec:7b:a3:a1:b3:3d:01:01:02:10:d3:d4:c9:a6:
fc:3f:f8:4d:2f:76:0c:70:84:4e:56:e5:fb:a1:e9:02:9e:97:
db:10:81:99:4c:af:37:48:6d:93:68:e7:0c:ec:bb:c7:0d:2c:
cd:7f:0c:1a:2a:62:34:e4:f8:ab:12:d0:17:7a:76:f2:83:bf:
43:19:e2:44:4b:af:34:29:05:eb:29:77:61:96:5c:9d:4b:86:
5e:b4:d3:5f:e8:e5:af:2e:d8:9b:72:b4:3c:6d:9f:28:38:02:
a8:e8:f1:ff:5b:b4:a1:42:62:81:9f:5a:d1:f5:2b:6a:34:43:
e5:04:1b:d3:d8:63:67:f2:bf:a1:1f:66:29:d5:49:97:b9:63:
03:a5:b3:2a:ea:5d:50:52:7d:fd:2b:5b:ed:8a:54:9a:9a:c1:
0a:2b:87:74:ec:60:22:5c:44:10:fb:23:4b:8a:c5:c6:1f:45:
5f:4f:2d:59:f4:e8:ef:ed:be:c4:39:05:0d:2e:bd:22:3c:e8:
87:0c:48:5c:05:3e:e3:f9:fa:6a:bc:dc:09:f0:0a:cc:f9:9f:
3e:6b:3f:02:b8:3d:30:6a:fc:35:78:cf:8d:07:26:ed:7d:bf:
48:b6:f5:4a:f0:6e:e0:bf:62:06:35:50:7b:54:75:00:13:3b:
82:a2:ae:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:50:33 2025 by rpki-client