Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: scquebgy4HzjwsSFilRknK1LHJGX7/MtC5NPsVQn/us=
Subject key identifier: DF:2D:F3:40:FE:E3:E3:8B:DC:2F:EE:ED:89:AD:42:EF:A4:87:D3:07
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 0197B77CCA1C4D07B814BA197C6462DD4B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:38 +0000
Manifest this update: Sat 28 Jun 2025 17:01:38 +0000
Manifest next update: Sun 29 Jun 2025 17:01:38 +0000
Files and hashes: 1: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: EutQ3SeGXpCC2YQyrDWcjfFjfjO0Fscv4QL8yqBDg18=)
2: giwtVjICmBb7Wkk9XSwHCSUK3bc.roa (hash: SM3eUbTtftqB5mgjXwnJPjn0hv5BI9fsCx4auk3D0GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ca:1c:4d:07:b8:14:ba:19:7c:64:62:dd:4b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Jun 28 17:01:38 2025 GMT
Not After : Jun 29 17:01:38 2025 GMT
Subject: CN=df2df340fee3e38bdc2feeed89ad42efa487d307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:59:5a:b6:b2:5a:c8:29:58:4c:b1:74:af:
8b:4c:f7:5e:c7:b1:99:59:10:f6:c8:d8:ba:dd:77:
08:7c:14:96:d0:2a:08:2e:62:26:89:50:ff:08:da:
2e:fa:43:45:81:40:ea:e6:52:30:36:46:08:e2:8e:
ba:ec:b8:34:e1:6b:23:5c:7e:6f:63:ae:a3:f0:18:
f4:a8:2d:75:af:80:ff:8f:98:85:a6:c2:6e:b3:f6:
99:05:a1:22:bd:60:8a:b4:df:ae:33:5d:ee:4d:f6:
43:b9:3c:14:94:03:d7:b8:07:83:b6:79:6d:93:78:
3f:3f:98:9f:86:37:f2:7f:e3:a2:b5:c7:b1:af:47:
6d:62:a2:ca:0d:48:58:a7:8d:3a:40:fa:f1:f5:a3:
d4:b2:81:48:9d:7d:6d:6f:a1:1c:93:30:83:50:1e:
97:90:31:4b:07:d8:96:40:9a:6a:6a:13:31:cc:a9:
6e:23:ac:73:3c:6e:36:ab:2e:bd:3b:4f:f9:5c:25:
6d:cc:5a:d1:73:a6:91:35:8d:06:d9:1a:f1:70:58:
d8:6f:80:aa:59:cd:cf:aa:28:27:a1:ce:1e:3c:d8:
c0:be:ae:e8:eb:dc:d9:ec:9e:c1:cc:e2:e0:25:81:
37:c2:5f:7d:f4:2a:65:8b:17:3d:58:5b:cf:2a:0c:
29:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2D:F3:40:FE:E3:E3:8B:DC:2F:EE:ED:89:AD:42:EF:A4:87:D3:07
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ec:d8:0d:90:e3:b6:21:f3:b9:b8:c2:dc:20:c3:04:ca:43:
fe:db:fb:f4:13:55:28:60:99:c2:f1:68:b2:65:d9:eb:84:6e:
52:d1:1d:6b:f7:e0:74:8f:b3:ba:4d:f7:23:0e:36:fb:43:7a:
85:9b:08:b0:ff:8f:0f:bb:7e:ef:81:a2:1e:02:48:c3:7b:3d:
0e:43:d6:4b:ab:40:24:b8:ad:71:60:e9:e6:8a:33:68:74:c3:
1c:b7:67:21:31:44:4c:d5:5c:8d:e2:1a:7e:2b:2d:e9:a3:1c:
d1:85:41:ab:08:31:6d:09:4d:c2:0c:51:92:42:bf:57:bb:40:
c4:a6:43:fb:e1:60:fc:95:40:ae:de:67:95:10:6a:de:33:3e:
05:54:4a:8a:66:1c:f5:00:1c:44:7d:7c:6c:4e:4b:8a:df:60:
c0:5d:a1:bc:d3:a8:0b:6c:59:fd:71:c8:99:11:29:8f:f5:f9:
cb:7c:86:6e:78:19:b4:9c:fb:51:9b:60:61:4a:cb:e1:62:db:
00:8f:65:1c:02:fc:9c:79:ca:20:ab:de:6a:e4:72:ae:d2:6e:
00:73:ea:6d:78:22:24:99:83:08:73:49:4a:dd:bc:8c:a0:ba:
9b:e4:c8:7b:a3:c0:a7:e1:aa:05:06:df:79:23:3f:d4:60:c7:
db:32:08:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:11 2025 by rpki-client