
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
File: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft (raw, json)
Hash identifier: S5oDT1KjnRVwX0dtwNl9naydWq+qO4X+jL5HmUo4baY=
Subject key identifier: EC:42:5C:AE:AC:BE:69:65:B7:08:7B:0A:38:CC:58:2F:23:EB:49:90
Authority key identifier: CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
Certificate issuer: /CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Certificate serial: 01988C8F702B380A90B3F725AECDBC4D103D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
Manifest number: 03E4
Signing time: Sat 09 Aug 2025 02:01:07 +0000
Manifest this update: Sat 09 Aug 2025 02:01:07 +0000
Manifest next update: Sun 10 Aug 2025 02:01:07 +0000
Files and hashes: 1: Kj9VfdUCgMk4aGgFNgZJ64WvAz4.roa (hash: B1YIPHashB6NFlEh7qNPbd/2OLMoFdhR39F9O5/IGts=)
2: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl (hash: 43y0RsqzQcUO8F+WGu9mMiySmwqwXCNDhTLleCyKHTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:8f:70:2b:38:0a:90:b3:f7:25:ae:cd:bc:4d:10:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Validity
Not Before: Aug 9 02:01:07 2025 GMT
Not After : Aug 10 02:01:07 2025 GMT
Subject: CN=ec425caeacbe6965b7087b0a38cc582f23eb4990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:83:d1:05:cb:63:1c:2d:5b:7d:f8:0a:c5:
e1:3f:66:37:c6:40:d8:65:46:ed:ec:35:0f:fe:79:
6b:05:64:c0:ea:fe:2f:95:00:d4:21:91:25:3a:d2:
c6:ea:75:b6:68:74:bd:70:b6:1d:e7:7a:45:ef:e6:
9c:d4:d7:68:c0:5d:7b:d3:45:a4:27:25:e5:82:17:
76:72:ea:45:36:f5:be:52:e4:31:df:28:7b:81:a1:
60:6f:ec:41:16:cd:a0:f9:c4:60:95:6d:09:19:0a:
af:a4:2b:81:2d:85:b7:ba:76:db:58:00:fa:e9:7c:
a5:73:5d:46:18:ba:03:f0:6c:24:e3:ec:f7:a6:5c:
b2:3d:ca:b5:07:53:e5:91:f0:d5:16:95:37:81:3d:
2b:44:bd:23:8a:70:bb:25:eb:4f:5e:e8:47:e5:cb:
b9:a5:fb:db:3f:88:a7:17:4c:f9:32:8d:89:81:5b:
f7:f2:f5:be:9b:3b:7c:c4:8d:5a:22:79:71:b4:84:
8f:23:e7:2e:b8:7d:60:14:88:fc:3e:7d:46:42:42:
6c:d0:77:26:cd:f4:a3:84:1b:bd:0a:b6:b6:64:11:
ca:41:b1:0d:1c:39:22:53:42:1e:ae:49:e9:ba:3b:
8d:0f:08:b0:3a:ee:16:0a:7e:f0:12:1e:c4:ff:50:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:42:5C:AE:AC:BE:69:65:B7:08:7B:0A:38:CC:58:2F:23:EB:49:90
X509v3 Authority Key Identifier:
keyid:CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fe:b9:b2:00:48:fc:71:d3:a0:08:dd:59:ed:54:df:87:9e:
31:6a:dd:18:bc:ac:cd:c9:b2:31:4c:4f:0a:28:67:64:96:27:
1a:1a:95:b1:ef:76:24:21:c8:85:1b:74:e8:f5:bf:94:77:3e:
28:de:35:21:3e:e0:be:ec:e6:17:0b:e7:05:eb:fb:76:36:ea:
ff:85:8a:5e:4d:7b:4a:df:f0:93:7a:ab:4d:5a:49:00:9c:20:
40:cc:63:2a:a3:24:cd:50:94:94:44:c2:79:cc:dc:a8:f5:1a:
70:14:b4:8a:06:bf:da:da:6d:80:fc:6f:35:33:75:f8:dd:9f:
94:40:fa:89:7d:73:06:46:21:ac:e0:1b:dc:8f:b0:f1:5d:35:
fc:9c:17:5a:f7:2c:a9:27:4f:68:14:f3:16:ce:3b:10:2e:e8:
b6:70:e9:6e:a0:72:eb:b5:ff:63:66:6a:36:b1:43:bf:ef:08:
f1:22:36:74:0c:8f:fb:00:74:bd:18:9f:a3:7f:da:2d:a8:35:
bd:33:63:0e:87:da:8c:e0:69:80:de:a7:c3:d4:1f:6e:23:36:
e8:8d:71:11:0b:97:98:d9:39:ee:c0:d4:5a:21:32:df:ce:dc:
a0:fd:a8:91:44:47:1f:2a:2a:3e:bb:3f:b7:9b:39:9f:f1:d3:
b7:e6:65:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiMj3ArOAqQs/clrs28TRA9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNGRkYWZjMmNmNTY1OGQwMmU1NjgyOGMyYzkxMzUzNTI5
ZWRlOGUwHhcNMjUwODA5MDIwMTA3WhcNMjUwODEwMDIwMTA3WjAzMTEwLwYDVQQD
EyhlYzQyNWNhZWFjYmU2OTY1YjcwODdiMGEzOGNjNTgyZjIzZWI0OTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W+D0QXLYxwtW334CsXhP2Y3xkDY
ZUbt7DUP/nlrBWTA6v4vlQDUIZElOtLG6nW2aHS9cLYd53pF7+ac1NdowF1700Wk
JyXlghd2cupFNvW+UuQx3yh7gaFgb+xBFs2g+cRglW0JGQqvpCuBLYW3unbbWAD6
6Xylc11GGLoD8Gwk4+z3plyyPcq1B1PlkfDVFpU3gT0rRL0jinC7JetPXuhH5cu5
pfvbP4inF0z5Mo2JgVv38vW+mzt8xI1aInlxtISPI+cuuH1gFIj8Pn1GQkJs0Hcm
zfSjhBu9Cra2ZBHKQbENHDkiU0IerknpujuNDwiwOu4WCn7wEh7E/1C57QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxCXK6svmlltwh7CjjMWC8j60mQMB8GA1UdIwQY
MBaAFM5N2vws9WWNAuVoKMLJE1NSnt6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemszYV9DejFaWTBDNVdnb3dza1RVMUtlM280LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yMzk3ZmItMGRkMC00MWMzLWJjNmUt
YmE4NzQzOWI3ZGE5LzEvemszYV9DejFaWTBDNVdnb3dza1RVMUtlM280Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8yMzk3ZmItMGRkMC00MWMzLWJjNmUtYmE4NzQzOWI3ZGE5
LzEvemszYV9DejFaWTBDNVdnb3dza1RVMUtlM280LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ/65sgBI
/HHToAjdWe1U34eeMWrdGLyszcmyMUxPCihnZJYnGhqVse92JCHIhRt06PW/lHc+
KN41IT7gvuzmFwvnBev7djbq/4WKXk17St/wk3qrTVpJAJwgQMxjKqMkzVCUlETC
eczcqPUacBS0iga/2tptgPxvNTN1+N2flED6iX1zBkYhrOAb3I+w8V01/JwXWvcs
qSdPaBTzFs47EC7otnDpbqBy67X/Y2ZqNrFDv+8I8SI2dAyP+wB0vRifo3/aLag1
vTNjDofajOBpgN6nw9QfbiM26I1xEQuXmNk57sDUWiEy387coP2okURHHyoqPrs/
t5s5n/HTt+Zl8w==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:51:03 2025 by rpki-client