Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: zyvLHoFGgVduigkDrqlkc17ujOT98Ecgu1Lt+ATYvco=
Subject key identifier: 09:D1:86:FB:34:19:3D:8B:F7:60:CF:9D:D2:EC:9F:C4:23:0E:04:88
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 0198D73BB0C6D66D0423FE91D14A8E64390B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 14:01:09 +0000
Manifest this update: Sat 23 Aug 2025 14:01:09 +0000
Manifest next update: Sun 24 Aug 2025 14:01:09 +0000
Files and hashes: 1: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: UmZlAwLcHFpt6khAko/PCIbURq0lVx4DEYZzXMRuGC8=)
2: giwtVjICmBb7Wkk9XSwHCSUK3bc.roa (hash: SM3eUbTtftqB5mgjXwnJPjn0hv5BI9fsCx4auk3D0GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:b0:c6:d6:6d:04:23:fe:91:d1:4a:8e:64:39:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Aug 23 14:01:09 2025 GMT
Not After : Aug 24 14:01:09 2025 GMT
Subject: CN=09d186fb34193d8bf760cf9dd2ec9fc4230e0488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:c6:fb:2f:87:ce:7a:8c:30:91:03:46:0a:
f9:a2:80:6a:32:ee:d0:73:e2:bf:60:55:19:bf:24:
9e:95:3f:64:36:08:26:8b:28:41:36:67:28:07:7b:
79:1e:6f:5d:a4:15:d3:30:4d:bb:4d:73:c9:5c:4c:
d8:57:ff:5c:57:6a:87:de:ed:4b:54:94:e3:3c:d2:
45:24:5f:be:e0:6d:12:e8:3c:a5:ce:b5:01:f9:ed:
30:28:23:bf:ba:90:ba:68:d9:f3:d0:63:98:aa:7f:
f1:83:d1:58:1d:6c:40:8e:fd:45:3c:b7:8c:b2:46:
bd:ab:a5:75:46:08:03:6c:1b:24:3f:28:df:13:91:
26:e3:4c:34:9b:ad:10:5a:be:ff:cc:7f:c4:f8:1c:
b3:e8:0a:7c:41:14:b1:e3:d9:4f:a2:dd:50:b3:d2:
c4:00:da:76:4b:2c:59:26:a3:b3:0a:2b:41:ec:45:
6d:36:17:6c:9d:c2:e1:99:31:90:68:af:3e:0a:bf:
b1:ae:e2:02:04:3d:1d:4d:39:7d:3b:9d:c8:ce:78:
61:e8:6a:fb:d5:7d:77:3c:b6:12:27:de:6c:d9:2b:
f0:5c:e4:a1:30:7b:1b:9e:04:ce:86:8a:38:78:77:
98:16:60:d1:73:3b:5e:65:d9:50:09:85:11:0f:8c:
51:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D1:86:FB:34:19:3D:8B:F7:60:CF:9D:D2:EC:9F:C4:23:0E:04:88
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:44:98:33:87:07:e9:f9:ec:93:4e:d2:78:79:f1:fb:68:91:
58:1d:d5:56:c8:6e:a8:48:be:95:86:91:b3:12:43:6a:dd:c9:
49:b8:fb:d2:77:00:45:2b:03:1d:d0:3b:d2:5e:91:a1:be:c6:
79:c2:87:8e:ec:71:98:91:04:3a:bf:d1:8a:c9:70:f4:2b:a0:
c2:e1:15:e6:81:a0:a8:39:34:3e:3f:15:9d:20:a3:8c:b3:cf:
0a:24:d9:b2:76:af:b5:2d:9d:e4:ec:80:db:19:6b:50:ee:ca:
5d:87:cc:3f:2d:ab:51:68:ed:d5:84:97:72:4b:ee:ee:1e:e0:
ed:ac:f4:5f:22:d3:4c:44:04:cd:4f:4c:f1:d3:6b:6a:d2:63:
ce:e6:6c:7b:ee:a7:02:ba:ed:e6:51:72:43:89:a3:c0:21:06:
ad:08:3a:80:13:46:b2:8f:41:64:96:23:43:66:3e:cc:20:76:
14:bc:2a:3c:60:01:12:90:1c:52:3c:0a:b0:3f:cf:16:e0:6d:
cf:72:5c:df:3b:f6:0a:1e:c7:e3:60:e0:f8:5e:45:a4:5d:3c:
40:8b:68:31:00:57:50:53:63:df:f8:f5:08:7e:08:b5:65:8c:
db:8c:a0:79:8d:e2:f4:f4:bb:38:46:e8:7d:3a:ed:6f:63:c3:
81:8e:6e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:44:20 2025 by rpki-client