Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: RSdggRM3uqRv6PDNirEX8fP3V+N6RSvNlcL14TOVGl8=
Subject key identifier: A1:CF:31:6B:7A:28:79:2E:A1:B4:87:63:E6:55:A9:59:1B:3B:09:D3
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 019872CFA76D5FF9D5794B1F4FAA7BE8B1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 02:01:08 +0000
Manifest this update: Mon 04 Aug 2025 02:01:08 +0000
Manifest next update: Tue 05 Aug 2025 02:01:08 +0000
Files and hashes: 1: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: 6ZvbPdAbVHfX166WqZm/Ly8nMooJAVI7E2HD1wympMk=)
2: giwtVjICmBb7Wkk9XSwHCSUK3bc.roa (hash: SM3eUbTtftqB5mgjXwnJPjn0hv5BI9fsCx4auk3D0GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:a7:6d:5f:f9:d5:79:4b:1f:4f:aa:7b:e8:b1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Aug 4 02:01:08 2025 GMT
Not After : Aug 5 02:01:08 2025 GMT
Subject: CN=a1cf316b7a28792ea1b48763e655a9591b3b09d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:36:03:52:06:a3:99:29:f7:f2:83:af:b3:
74:a5:df:22:d9:de:dc:1f:e0:a8:78:86:6d:99:88:
95:06:d7:2d:a8:51:41:ff:12:6f:fc:91:58:a9:ca:
05:f4:c2:45:b5:56:f5:14:a3:19:56:dd:7a:f3:03:
38:4f:eb:5f:2b:63:a7:6a:2f:de:7e:30:22:70:fe:
cf:9c:b9:b5:92:b5:8d:89:fc:f0:05:cd:21:5a:bd:
c6:23:1a:72:88:68:d5:bd:07:72:2c:84:24:eb:03:
0d:39:33:08:10:5c:5b:c0:7c:f9:76:6b:c2:ab:4d:
54:84:6a:d7:df:66:f4:21:aa:8e:ea:b0:88:ae:ac:
ab:cb:a6:ba:d6:a2:15:8b:d8:45:f1:24:e4:b1:f0:
b5:d9:d5:72:5c:d7:c5:a0:9a:af:27:88:95:35:17:
e3:66:49:b2:90:a3:35:f8:99:bc:d2:bc:5b:0c:1f:
ff:d8:9c:a8:60:c5:ff:65:45:6f:01:4b:40:41:08:
d5:4a:a5:d2:43:c5:dc:3f:68:74:fe:e5:ed:0d:88:
02:e3:0b:0b:61:8a:57:da:94:d0:e8:d8:ad:79:a7:
e1:09:a8:ac:8d:34:3a:f5:dc:38:21:56:10:26:cc:
0a:90:f8:cd:3e:a4:cd:36:c5:83:0c:83:5a:e5:5c:
b0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CF:31:6B:7A:28:79:2E:A1:B4:87:63:E6:55:A9:59:1B:3B:09:D3
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e2:33:1b:88:6d:df:a6:30:f7:c1:e1:79:1d:b7:96:22:14:
47:d5:88:79:d2:49:28:51:f8:8f:4e:2b:df:77:5f:01:6f:7d:
0f:b0:d6:99:82:9f:ff:54:31:fc:c0:7d:b9:1f:09:49:50:03:
c5:5f:57:a7:f6:9a:27:22:d6:48:33:50:44:01:9b:c7:35:fe:
ed:11:b9:d8:41:6b:97:3f:2c:84:96:ca:68:3e:70:72:1e:50:
ad:ec:25:73:ff:52:d4:c9:3f:8a:b1:6b:65:9f:7c:56:67:15:
19:2a:22:d0:f2:70:4d:69:bb:6a:22:ae:62:da:f7:07:99:6c:
31:38:bc:6f:99:a8:14:6c:d8:6c:b1:83:2b:58:9e:26:ca:0f:
b2:77:5b:77:82:cc:60:13:ba:66:3b:db:9f:b5:2b:f5:dd:ca:
d4:cf:45:50:cc:39:c2:28:2b:9d:eb:2b:e0:45:4c:db:db:2f:
65:f3:14:de:71:e8:07:14:3d:e2:ff:09:97:06:fe:6d:40:8e:
a2:06:c3:54:76:27:b0:dc:e3:bc:8f:29:fc:0c:e2:24:0d:a1:
c0:c0:85:de:fe:73:54:4e:67:2d:8b:85:42:f8:18:77:f5:ec:
a9:00:91:00:f0:83:5f:07:ce:c7:a8:30:65:54:b0:9b:16:25:
71:c7:76:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:58 2025 by rpki-client