Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: IQQBh8/UAszubdbPrIVwuUgmr8cgDFpMkRkS3kx/S2A=
Subject key identifier: 46:BF:64:3F:9A:FE:87:B9:FE:DD:62:D7:B7:D0:1A:1C:77:4F:E7:59
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 0197684DDD5E558056C623EC46BDD7F6E92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 08:00:22 +0000
Manifest this update: Fri 13 Jun 2025 08:00:22 +0000
Manifest next update: Sat 14 Jun 2025 08:00:22 +0000
Files and hashes: 1: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: 0W+3r1H4F/l+3cXMOfmFOxOyXl3EAJfvM4VznvKXkYA=)
2: giwtVjICmBb7Wkk9XSwHCSUK3bc.roa (hash: SM3eUbTtftqB5mgjXwnJPjn0hv5BI9fsCx4auk3D0GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:dd:5e:55:80:56:c6:23:ec:46:bd:d7:f6:e9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Jun 13 08:00:22 2025 GMT
Not After : Jun 14 08:00:22 2025 GMT
Subject: CN=46bf643f9afe87b9fedd62d7b7d01a1c774fe759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:31:1d:a1:75:8d:e0:b5:c4:bc:0e:c2:91:46:
a5:6e:4a:2c:48:e9:83:c6:9b:f2:2e:76:43:cb:e4:
3c:bc:04:3b:19:54:e6:3d:15:8b:0d:7f:f1:38:34:
54:83:5d:00:51:6c:4f:fa:8c:a3:1e:59:b6:83:6b:
4c:f8:fe:9f:49:39:76:1a:65:5f:cc:12:4b:4e:cb:
20:d7:2b:ba:9f:cf:0f:82:64:29:43:da:91:cc:48:
2f:33:37:2f:00:15:4f:71:15:d3:2f:56:17:ca:49:
9b:77:34:b4:f5:dd:8d:c8:ce:5f:0b:3b:48:3e:b6:
c3:5a:e1:ef:e2:1d:82:a3:88:84:c1:ed:b5:76:46:
f0:05:1a:62:35:eb:8a:e7:f9:d4:81:46:6e:fd:da:
3b:19:ff:e2:60:91:3c:56:4b:d8:d0:0f:39:30:3e:
a4:bf:95:b8:7f:a6:4a:d3:12:0e:23:5b:6f:8c:26:
61:57:97:7a:ed:70:da:55:b4:4c:f5:36:56:04:38:
c5:1f:c9:6b:3b:26:e9:a2:7d:51:08:3b:2b:3c:b4:
9d:9f:66:cd:a0:af:d0:ec:59:c0:0d:d2:fb:d6:4b:
4b:51:c2:55:95:33:f0:d9:54:5a:a3:bc:34:a3:c0:
d2:a6:27:9c:c3:8c:44:39:2e:66:94:0e:9e:28:1f:
9e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:BF:64:3F:9A:FE:87:B9:FE:DD:62:D7:B7:D0:1A:1C:77:4F:E7:59
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:bd:1f:33:03:f2:07:0b:57:c5:38:c6:69:07:2c:aa:0c:80:
65:90:8e:55:3e:8d:cd:34:60:14:ff:ee:a6:c0:1f:47:49:ef:
a2:6c:c4:a6:55:9d:88:a3:63:86:a8:6a:32:de:33:9f:10:e9:
93:1f:d8:4c:85:aa:29:c0:47:c5:18:61:e5:3b:a7:91:20:bf:
45:e7:0d:fd:7f:80:f5:d8:5f:75:8e:5e:34:dd:e6:31:18:ac:
c0:a5:b7:2e:8f:ad:da:5d:4b:30:fd:6f:03:9e:c6:c1:33:69:
4d:2a:de:bd:80:8e:26:4f:06:c3:44:47:66:c3:e2:be:51:7d:
bf:0d:92:0d:ba:ce:12:e3:e2:91:5e:1e:32:5c:d6:a0:48:ab:
52:4d:85:c8:9b:de:67:81:ae:e5:75:ce:7a:4a:f3:c4:cf:c5:
86:6a:21:be:c0:b8:97:71:a8:c1:df:3c:08:4c:56:25:70:71:
66:33:a5:7b:a5:50:34:93:f3:8d:8b:de:d6:91:52:76:af:42:
0d:19:6d:0c:f5:d4:e5:09:f9:07:47:c1:59:23:12:65:8c:e7:
4c:ec:89:19:66:36:29:72:64:04:92:45:12:05:5f:99:05:d5:
7c:9d:9f:8f:f5:94:6a:23:eb:a2:b5:82:34:99:ff:13:cd:f2:
54:81:67:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:52 2025 by rpki-client