Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: yGO40rqsl/sJA42bNpbXTiE8ZvtyRLxDAHWL0fCEjcs=
Subject key identifier: 12:C5:33:35:61:17:3D:FC:A6:6B:C2:30:BF:6E:0C:CB:4B:CE:25:42
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 019749683B52CE62FFD16C6B2B430268BA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 08:00:57 +0000
Manifest this update: Sat 07 Jun 2025 08:00:57 +0000
Manifest next update: Sun 08 Jun 2025 08:00:57 +0000
Files and hashes: 1: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: 4JZhqIu5MlyuuUBw0jZoZM7FZdiK2m+A13zGFvYQxcE=)
2: giwtVjICmBb7Wkk9XSwHCSUK3bc.roa (hash: SM3eUbTtftqB5mgjXwnJPjn0hv5BI9fsCx4auk3D0GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:3b:52:ce:62:ff:d1:6c:6b:2b:43:02:68:ba:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Jun 7 08:00:57 2025 GMT
Not After : Jun 8 08:00:57 2025 GMT
Subject: CN=12c5333561173dfca66bc230bf6e0ccb4bce2542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:91:0f:0f:37:45:b8:82:5f:8e:5d:07:28:
23:b1:74:0f:1e:41:0e:1c:21:7e:93:cc:dc:5f:cc:
f5:c5:da:d3:e5:46:5b:7d:f1:3a:43:84:48:b8:d2:
70:76:07:98:b9:9d:87:2d:a6:9c:57:2b:7a:b7:8d:
5e:ba:2e:69:3b:e5:e3:18:1a:15:17:86:b2:23:db:
e5:af:5b:cd:29:1b:0e:42:cf:c5:01:c6:7a:5d:ef:
52:63:3f:75:17:b2:e8:4d:c3:1c:b6:d6:56:90:ee:
b7:7e:d4:22:66:f7:6b:0b:eb:3a:bf:11:a4:fc:a1:
e2:e1:66:07:42:6e:46:03:b6:0f:81:4e:66:3a:05:
c9:e7:cf:6d:94:13:c6:9e:91:dc:da:73:d3:08:86:
64:6a:44:c5:1f:45:b4:0c:cd:a5:be:48:27:4d:ae:
00:5e:ae:d3:a3:0a:13:e0:5e:e9:6f:dc:82:51:2a:
fa:98:cc:ce:79:93:5e:0a:df:33:79:5e:f2:0c:89:
55:eb:8b:c3:3f:75:e3:66:c9:42:34:8e:a2:60:bf:
c6:d2:c7:de:fa:46:19:7a:78:8b:a3:56:43:57:ae:
65:83:cc:89:3e:a5:7a:85:e3:29:79:4e:4e:53:ce:
45:23:5d:0f:d0:ca:d8:57:77:09:99:28:49:0c:09:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C5:33:35:61:17:3D:FC:A6:6B:C2:30:BF:6E:0C:CB:4B:CE:25:42
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:56:ac:54:2a:d1:dd:c7:2a:53:ad:da:f8:68:42:29:df:2e:
fa:d3:6b:e3:f8:7f:6f:2f:d4:16:a5:b9:23:1f:de:b5:5f:3b:
60:0c:61:91:83:02:2b:98:c7:a8:fd:8e:18:eb:1c:fe:28:04:
66:81:e2:6a:07:df:0c:8b:16:17:9d:4e:cb:06:0d:47:4e:59:
ea:19:45:c8:08:38:8f:05:80:29:0c:ad:5f:6c:85:4d:ae:53:
10:a4:32:cc:e5:d3:64:87:66:46:db:04:87:5d:ef:cd:1b:c1:
3c:90:fc:32:c7:40:bc:57:65:0c:36:74:ce:5e:2a:0a:ef:7d:
80:b9:1c:73:7a:e0:7b:8f:e8:e9:53:03:cc:5b:52:0b:5a:af:
89:8e:7d:66:40:31:5f:97:10:e0:3b:8e:58:58:5f:24:a8:43:
a4:42:49:1b:c6:a9:94:c9:ca:24:ac:b9:71:b2:ab:60:4c:4c:
ab:6e:ad:18:61:dd:86:d7:fe:fe:a7:a4:12:20:73:b9:9a:a1:
a1:49:41:ec:73:c5:4f:df:0f:37:d7:e3:9f:26:ff:cf:35:db:
4e:c8:4c:e2:15:9b:2a:1b:80:db:06:01:7d:e5:ad:45:02:d5:
93:6b:3d:a7:2d:a2:b0:5b:43:ec:11:6f:5b:4c:a1:e8:db:0e:
7a:26:ff:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaDtSzmL/0WxrK0MCaLoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5OWYxMmYzZmE3MzExY2Q5OTNhYjZiYzViYjI5YTFiZjJh
ZDQ4YTEwHhcNMjUwNjA3MDgwMDU3WhcNMjUwNjA4MDgwMDU3WjAzMTEwLwYDVQQD
EygxMmM1MzMzNTYxMTczZGZjYTY2YmMyMzBiZjZlMGNjYjRiY2UyNTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXaRDw83RbiCX45dBygjsXQPHkEO
HCF+k8zcX8z1xdrT5UZbffE6Q4RIuNJwdgeYuZ2HLaacVyt6t41eui5pO+XjGBoV
F4ayI9vlr1vNKRsOQs/FAcZ6Xe9SYz91F7LoTcMcttZWkO63ftQiZvdrC+s6vxGk
/KHi4WYHQm5GA7YPgU5mOgXJ589tlBPGnpHc2nPTCIZkakTFH0W0DM2lvkgnTa4A
Xq7TowoT4F7pb9yCUSr6mMzOeZNeCt8zeV7yDIlV64vDP3XjZslCNI6iYL/G0sfe
+kYZeniLo1ZDV65lg8yJPqV6heMpeU5OU85FI10P0MrYV3cJmShJDAkuAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLFMzVhFz38pmvCML9uDMtLziVCMB8GA1UdIwQY
MBaAFAmfEvP6cxHNmTq2vFuymhvyrUihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUt
NDE5YjU3MjNlZWY5LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUtNDE5YjU3MjNlZWY5
LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1asVCrR
3ccqU63a+GhCKd8u+tNr4/h/by/UFqW5Ix/etV87YAxhkYMCK5jHqP2OGOsc/igE
ZoHiagffDIsWF51OywYNR05Z6hlFyAg4jwWAKQytX2yFTa5TEKQyzOXTZIdmRtsE
h13vzRvBPJD8MsdAvFdlDDZ0zl4qCu99gLkcc3rge4/o6VMDzFtSC1qviY59ZkAx
X5cQ4DuOWFhfJKhDpEJJG8aplMnKJKy5cbKrYExMq26tGGHdhtf+/qekEiBzuZqh
oUlB7HPFT98PN9fjnyb/zzXbTshM4hWbKhuA2wYBfeWtRQLVk2s9py2isFtD7BFv
W0yh6NsOeib/Kg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:56:42 2025 by rpki-client