Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: uPD4tHAmiiqxNQjqFPjyWO/qOT+rfo0HzhFiSu9o39I=
Subject key identifier: DB:58:8F:25:C0:17:5F:36:2C:32:52:3D:21:C2:B0:DA:63:1F:17:95
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 019A4DE1E8D536183EB2C6DE2CDFDC1ECF3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:42 +0000
Manifest this update: Tue 04 Nov 2025 08:00:42 +0000
Manifest next update: Wed 05 Nov 2025 08:00:42 +0000
Files and hashes: 1: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: xNFATPtkeD6XwSrI/SnBwtlJaLrPxekzBfNi674yHYo=)
2: giwtVjICmBb7Wkk9XSwHCSUK3bc.roa (hash: SM3eUbTtftqB5mgjXwnJPjn0hv5BI9fsCx4auk3D0GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e8:d5:36:18:3e:b2:c6:de:2c:df:dc:1e:cf:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Nov 4 08:00:42 2025 GMT
Not After : Nov 5 08:00:42 2025 GMT
Subject: CN=db588f25c0175f362c32523d21c2b0da631f1795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:5a:7f:38:7d:2a:4e:55:ed:eb:17:2a:54:
50:27:06:95:7a:11:b7:01:f2:76:50:8a:61:aa:b6:
30:bd:28:60:ea:59:79:64:0a:1e:87:f9:0e:f3:23:
51:8f:86:cd:39:0b:23:c8:60:55:70:f1:dc:01:41:
60:68:cf:57:f1:d3:2b:2e:c8:83:d9:2d:4d:25:e2:
71:1b:00:c0:80:cb:47:15:1a:52:df:c7:80:3e:04:
55:6d:44:6d:9a:62:2e:3c:3c:f3:e1:99:a1:86:a3:
b7:98:46:a5:f3:aa:9d:3e:d4:68:8b:4c:55:78:de:
12:b0:07:72:ba:06:9a:1b:5e:44:de:7c:64:5a:62:
ec:92:97:3b:01:10:0a:4e:80:16:7a:29:f2:81:f4:
37:a9:01:d1:0e:ca:18:41:27:dc:ca:5b:3c:f9:5d:
bd:1a:db:85:b6:5f:da:16:cf:92:d3:f2:32:82:9a:
64:e9:9c:b9:f8:a8:e1:5c:32:fd:0f:c0:45:d4:e0:
df:a5:85:dd:cc:37:85:31:76:de:ca:75:51:a1:71:
b9:07:2e:fe:b7:79:ff:0a:63:5c:0a:9f:9e:a2:f8:
ed:25:34:b0:00:75:cb:4f:88:a1:d5:23:9b:49:ab:
5d:ae:9e:18:12:c9:54:eb:6f:4d:71:49:2e:f5:3d:
04:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:58:8F:25:C0:17:5F:36:2C:32:52:3D:21:C2:B0:DA:63:1F:17:95
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:55:b9:a9:b4:43:55:59:05:9c:f2:7a:aa:87:a3:e3:19:cc:
2f:2a:40:11:3b:9d:70:bc:99:0e:b5:29:56:f4:18:f5:77:73:
3a:af:2c:5b:37:ff:94:4a:bd:c8:45:41:d7:6d:09:d5:69:ac:
31:7f:54:4c:fa:90:a1:ee:e9:41:18:69:4d:61:e1:e0:78:ea:
c0:96:00:22:8b:55:d3:4e:9a:d1:85:ed:6a:73:e3:01:8b:98:
9d:f7:51:a1:18:16:0f:44:e3:1b:76:23:12:4c:1a:56:bc:f6:
55:6c:c6:89:21:33:f3:78:7b:91:fc:cf:77:ed:3d:05:52:a7:
68:66:af:a5:6e:a0:a0:3d:7b:df:87:57:58:96:32:75:11:ef:
1c:ec:14:7e:37:66:c1:55:77:c5:76:52:46:6b:8e:6b:dc:22:
7c:34:64:25:fd:4a:30:e2:87:33:86:bd:7c:cf:a6:a3:66:ec:
de:df:26:1a:9a:3f:e4:62:5a:ff:0d:7f:e7:6d:91:7a:c5:a2:
7e:94:db:2f:3e:58:76:98:40:3e:b3:d8:ed:f0:af:3f:ca:1e:
ac:6e:ed:14:7a:1d:db:f5:e2:b9:30:24:02:1d:6f:c7:f6:2c:
4c:75:d9:a7:ae:33:46:af:52:87:78:06:d4:ba:76:61:42:3f:
65:4c:ee:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:16 2025 by rpki-client