Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
File: K21-UZH4H_ChnxArFxirT54Oo6A.mft (raw, json)
Hash identifier: 9p+DK2tx6eHd6fKqnP2jLZDDj+DKxUZ3rxm7NGcve4Y=
Subject key identifier: 8F:25:3E:62:20:56:BC:5D:EB:FF:EC:15:1F:95:5A:1E:83:E7:01:2E
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial: 0199FC2140E2B158C2D70B4BA6B38DC9FC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
Manifest number: 0FCA
Signing time: Sun 19 Oct 2025 11:01:01 +0000
Manifest this update: Sun 19 Oct 2025 11:01:01 +0000
Manifest next update: Mon 20 Oct 2025 11:01:01 +0000
Files and hashes: 1: JMuA_SE4InzW1qKeTVpx_3oL0q8.roa (hash: R6FzokXTO51RahiuJEIKsH+gffyhCqg/DyumMrYKwlc=)
2: K21-UZH4H_ChnxArFxirT54Oo6A.crl (hash: PN5V9qd5nw9mUFrDXL6zp3jq6BpKu3IftbPhvILIm/Q=)
3: mIULbw_VsYjjAm8nAGiad1FVRCA.roa (hash: RZC9YnUkAnJgl+1L4ykyICx092CEcPZwqJ0fdIhJKfk=)
4: tOKffNLeqoCRQyLhX0pk9w0e9gE.roa (hash: ZtE1N4hx0o7ezg+y2AZrHnoAdijePQwyuxVbH8gDLhU=)
5: xsMX4xnBtAkWlhocItT5wdfVH3k.roa (hash: z7ATRuzsizy0J/zWBm/YAirUNrjy9iWYQrOG/F0bSwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:40:e2:b1:58:c2:d7:0b:4b:a6:b3:8d:c9:fc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Validity
Not Before: Oct 19 11:01:01 2025 GMT
Not After : Oct 20 11:01:01 2025 GMT
Subject: CN=8f253e622056bc5debffec151f955a1e83e7012e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6f:1b:7e:b1:d3:22:6d:93:c1:a6:d5:c7:ee:
38:c4:ec:ee:6d:b6:91:7d:83:43:d2:40:8e:2f:1b:
ca:0b:ac:d9:ef:be:09:78:1f:52:28:27:01:be:46:
c3:76:eb:c2:72:f1:16:4a:df:ed:84:10:79:c6:4c:
3b:ef:7a:ff:a8:5b:f2:b1:8d:dd:6f:8a:31:87:29:
68:57:b7:fc:3e:d6:6b:b2:04:ea:70:f3:26:ea:1f:
40:93:c7:6b:e6:85:ad:2b:36:47:a1:b0:a8:a3:72:
d7:cc:09:23:4a:f7:b3:a3:2c:e8:63:22:f6:df:a5:
ea:85:14:63:94:0b:ff:a1:d0:96:1b:d9:8a:2e:f9:
01:87:28:30:35:3f:2c:83:0a:d3:a9:4f:d0:71:6c:
7c:5f:01:aa:ca:ef:31:ec:6d:c7:70:cc:41:36:44:
c4:9f:11:46:a5:92:a7:25:e6:3e:ac:96:51:7a:86:
88:2a:1f:34:f2:eb:d4:a4:17:b8:78:70:01:33:5c:
4d:95:c0:d1:c8:50:28:9b:b6:aa:e1:1c:b2:b5:02:
37:22:40:93:00:25:02:c3:92:30:e3:8f:5c:c9:49:
b2:e3:16:99:a0:f3:7b:31:14:c0:79:9f:d8:15:d9:
90:65:d0:e7:75:9b:ba:22:e3:24:5e:e9:d8:c1:3d:
fa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:25:3E:62:20:56:BC:5D:EB:FF:EC:15:1F:95:5A:1E:83:E7:01:2E
X509v3 Authority Key Identifier:
keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9a:bc:73:93:58:65:fb:50:6c:94:d3:af:f2:8a:b1:f3:7c:
13:ac:ed:61:17:4d:ac:15:98:ae:fb:16:ed:61:d3:14:cb:c1:
4d:47:22:0c:9a:4d:c4:5d:7a:dc:61:24:e5:d9:07:03:e6:94:
f7:9e:5f:87:06:07:a0:55:24:93:9e:2c:11:6b:4b:e0:94:60:
d6:25:73:0a:15:a2:bd:b2:85:8c:db:a1:2d:9a:c0:4e:9a:e0:
4a:fc:4e:85:16:d4:ab:ee:c3:fd:1b:03:09:c7:b5:a1:1c:3d:
f3:cf:53:96:1b:02:0b:51:6b:50:dc:2c:bb:ca:41:0b:84:9a:
7e:cd:b7:91:32:7a:30:07:b5:2e:ae:05:56:80:75:54:db:3a:
63:ff:f4:23:20:6f:5d:31:33:90:00:e1:93:14:06:a2:90:8b:
65:6e:cb:96:e5:68:6f:69:48:62:df:74:ae:3a:6b:31:bd:9c:
09:0e:45:3b:c5:ae:29:43:38:f5:4f:0c:1d:80:86:66:c7:1e:
86:53:a1:d2:9d:a2:5e:b8:9b:e1:a5:33:96:eb:2f:91:10:57:
a9:bb:32:d5:d8:fc:1b:5a:fe:35:e5:81:c1:ac:05:73:bc:22:
14:18:fb:74:b9:7a:f5:57:32:ad:e9:d9:a3:30:b9:d4:2b:ff:
f6:db:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:02 2025 by rpki-client