Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: fkzo1Xycb866wsEIkZ2rKawKf4wwHwKoyXiAiLsZOI4=
Subject key identifier: 78:1E:C6:07:4C:FD:E0:88:B1:A9:88:9E:C5:92:E5:08:44:D8:99:43
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 019A70A55D9F08A45AE7B01CFA9328AB5C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 02:01:16 +0000
Manifest this update: Tue 11 Nov 2025 02:01:16 +0000
Manifest next update: Wed 12 Nov 2025 02:01:16 +0000
Files and hashes: 1: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: +G3955ZaDnj/z1LT8tzZ82wIguW+pxr6wzRqCymt3e4=)
2: giwtVjICmBb7Wkk9XSwHCSUK3bc.roa (hash: SM3eUbTtftqB5mgjXwnJPjn0hv5BI9fsCx4auk3D0GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:5d:9f:08:a4:5a:e7:b0:1c:fa:93:28:ab:5c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Nov 11 02:01:16 2025 GMT
Not After : Nov 12 02:01:16 2025 GMT
Subject: CN=781ec6074cfde088b1a9889ec592e50844d89943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:74:ed:67:9c:eb:ed:52:8e:d7:95:2f:84:ba:
fb:b2:44:23:25:6c:aa:2f:c0:ea:98:e4:e5:34:41:
ee:b2:bd:6f:73:01:c6:30:b5:f6:c8:cc:dd:e5:24:
d7:a9:64:27:35:89:a7:32:6b:e2:f6:fe:44:1c:52:
7f:ef:e9:2f:de:16:96:5a:e3:fc:0e:c8:ba:02:72:
f3:e1:dc:96:94:86:47:eb:73:08:b6:bd:3d:17:cb:
f0:d0:ce:be:c6:d5:3f:b3:36:16:c0:b2:2d:f3:2d:
78:9a:09:53:02:3b:f8:46:ad:87:7f:60:aa:c8:37:
65:fd:f8:34:2a:f8:69:ca:c5:ec:31:da:fb:ff:cd:
20:58:db:d0:72:fa:55:6d:ad:5a:da:c6:8f:3c:40:
d7:0b:6a:32:3b:35:df:43:a7:36:21:d3:93:99:91:
51:c6:7b:99:d1:32:1a:92:5b:8c:58:30:9d:f2:ce:
96:cf:48:98:47:38:5d:41:f5:30:6a:d3:27:fc:1f:
9d:30:67:f7:eb:31:a2:15:7e:79:ed:e7:00:cb:12:
a1:fc:28:4f:e5:2f:a7:3c:fd:ed:2b:97:e1:84:1c:
c8:8b:af:5c:88:76:b7:69:ea:7a:8c:a4:cb:f9:62:
54:a2:cc:07:25:9a:ea:55:5d:3b:2c:61:02:4c:02:
6d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1E:C6:07:4C:FD:E0:88:B1:A9:88:9E:C5:92:E5:08:44:D8:99:43
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:80:f1:e5:c8:bd:92:82:e3:a3:4f:63:b2:c4:b5:25:b8:cb:
7d:ba:ff:cb:a6:8f:8d:68:e7:5d:7c:1f:0f:10:10:5d:1a:36:
d0:ce:a4:62:c8:5a:d9:ca:b3:f3:09:75:c0:1b:b3:dd:f8:0e:
60:ad:ec:45:63:e3:3b:3e:da:16:2e:b3:66:e9:1d:e2:b7:87:
93:7b:d2:d2:75:c3:6d:3f:35:9d:be:e9:f2:1b:e3:4a:d1:9c:
fa:7e:e7:29:39:5c:2d:29:8f:a2:c0:4e:fa:8f:bb:dc:65:97:
43:31:7c:77:a3:9c:ff:51:c2:63:6e:7d:71:73:0b:07:f7:8c:
2a:9e:e3:b9:0b:08:38:da:09:52:1e:b8:4d:89:4d:45:c9:02:
84:7c:bf:78:4b:2a:6f:f0:44:d2:1f:09:38:af:ea:d7:c8:73:
f5:af:a6:6e:64:b2:5e:aa:fc:00:ea:f7:59:c5:da:fe:ca:59:
e9:1b:2b:ef:b5:0a:05:b0:d1:50:d1:5f:5d:b9:26:11:0a:c5:
b5:08:db:0c:f8:f7:96:c2:df:7e:08:33:0c:99:e6:6c:20:97:
40:10:17:eb:ea:0b:28:61:4f:16:7f:88:28:b1:d2:87:81:72:
b7:0c:32:26:31:4b:7a:09:5c:57:b4:6f:a8:b3:f9:40:e2:7a:
d0:a8:6b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:01 2025 by rpki-client