Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json)
Hash identifier: jCbcOb06/k0BPTlIWJLoqMENeQ5j3voSG8GHJ8L+OWs=
Subject key identifier: 7F:12:11:09:26:69:13:AE:71:3A:CB:2C:56:FD:34:9B:DA:8C:86:26
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 0199FAD839661B42D2E1599D7F33061430D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 05:01:38 +0000
Manifest this update: Sun 19 Oct 2025 05:01:38 +0000
Manifest next update: Mon 20 Oct 2025 05:01:38 +0000
Files and hashes: 1: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: aCVW4H5vz9cRYJZYR7XqorAmraoQC0sgMBAwvqfW/3Q=)
2: giwtVjICmBb7Wkk9XSwHCSUK3bc.roa (hash: SM3eUbTtftqB5mgjXwnJPjn0hv5BI9fsCx4auk3D0GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:39:66:1b:42:d2:e1:59:9d:7f:33:06:14:30:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Oct 19 05:01:38 2025 GMT
Not After : Oct 20 05:01:38 2025 GMT
Subject: CN=7f121109266913ae713acb2c56fd349bda8c8626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:39:35:b1:b7:86:db:64:f1:bd:39:d9:f9:f5:
ba:2a:ab:55:bd:0a:25:d9:8f:f2:f0:8b:d9:b3:6f:
82:bd:1d:73:fc:5f:c3:05:96:a5:d4:5b:ff:5a:ab:
79:32:54:d1:83:7c:98:b8:1c:c6:d3:69:19:99:4c:
6e:6f:34:91:47:8c:57:86:6d:69:fb:81:98:de:fc:
00:ac:3e:f4:85:03:05:f3:90:86:97:52:39:85:9f:
75:44:0b:02:d2:a3:0c:fc:45:22:b1:7d:d6:c5:33:
44:d7:e1:d3:4d:cf:b4:07:13:8e:85:45:10:ee:2e:
40:d3:93:05:aa:83:98:54:3c:ec:82:a0:71:22:8f:
67:c5:f5:f1:eb:36:f2:f8:0f:a5:39:e4:53:3c:ae:
bc:9b:b3:34:f3:25:2d:65:09:7c:17:76:e6:b7:de:
ae:dd:34:ce:03:98:53:4c:ce:93:91:d9:d6:b2:2d:
4a:57:d3:6a:cf:8f:8e:c8:bd:8d:87:18:3a:71:5a:
82:ee:db:9b:35:3a:4c:cf:c9:cf:a0:f4:9e:ba:3b:
c8:1c:a3:9d:e1:98:ea:ce:26:dc:84:a0:f9:e5:63:
cb:3d:4b:2d:80:24:1a:57:aa:88:8d:19:24:3c:02:
4e:e4:32:97:3f:1f:58:2a:98:e0:9a:b7:11:1f:0b:
0d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:12:11:09:26:69:13:AE:71:3A:CB:2C:56:FD:34:9B:DA:8C:86:26
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a7:cf:b3:fb:42:5f:36:92:6e:24:56:64:f0:4e:23:52:2a:
db:f8:0d:93:34:28:80:0f:8b:fd:88:36:81:ad:9d:44:d3:ac:
60:ff:73:2f:8f:02:18:7d:5d:7e:6e:64:67:a9:51:b8:45:46:
cc:25:00:25:89:db:e5:a6:eb:5e:82:99:61:97:9e:c8:fe:f6:
83:b6:02:44:fc:36:24:f8:90:62:44:d3:20:b4:99:37:7e:47:
27:2b:37:a1:b4:04:93:83:93:32:28:ef:7b:27:f8:41:8a:2c:
2d:5c:2a:44:c0:a3:23:57:29:18:7f:e9:77:36:19:d1:ef:98:
b7:9e:b2:82:ba:cd:59:c5:13:f1:b6:ad:e0:87:04:cc:7c:ee:
53:30:6e:df:7a:76:38:3f:0c:76:c8:61:86:73:ac:c8:4a:52:
e6:4d:85:8d:40:ad:56:bc:4c:27:d3:2f:e7:79:43:f6:c2:b5:
f5:52:41:a5:66:44:42:ce:e0:a8:04:c3:7a:70:22:32:2c:18:
73:2e:62:2b:72:b0:78:3d:aa:75:64:a2:0b:94:ec:2d:e7:19:
6d:f7:98:43:cf:22:8b:95:f5:31:f7:1d:a6:1f:bd:a6:06:9a:
b5:ff:09:94:0f:3b:78:68:b3:21:e3:fc:78:80:5e:f7:31:3a:
d6:66:a3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:26 2025 by rpki-client