Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
File: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft (raw, json)
Hash identifier: 0Tk5DEjOFNrZk+ZS4384i56WzOWKhEyjuv7jknETqMg=
Subject key identifier: A4:1C:B4:57:F8:36:23:24:1A:B8:E9:0C:0F:FE:3B:DE:91:8F:70:BC
Authority key identifier: CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
Certificate issuer: /CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Certificate serial: 019873E3F6E2AC5626229C75D918C3047084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
Manifest number: 05E0
Signing time: Mon 04 Aug 2025 07:02:56 +0000
Manifest this update: Mon 04 Aug 2025 07:02:56 +0000
Manifest next update: Tue 05 Aug 2025 07:02:56 +0000
Files and hashes: 1: FQK3SzsJ-m_-4y7tzcBijOiJWxA.roa (hash: N1P49G4PfCUQ9FBa1Q2u191FzAmkruySd+sQ5qCtJd4=)
2: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl (hash: GgRwmtCWi1XYVBaBXayFUrnrVu4i+VmeTQOmaY8InKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:f6:e2:ac:56:26:22:9c:75:d9:18:c3:04:70:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Validity
Not Before: Aug 4 07:02:56 2025 GMT
Not After : Aug 5 07:02:56 2025 GMT
Subject: CN=a41cb457f83623241ab8e90c0ffe3bde918f70bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:7f:50:74:4e:b1:a6:7f:d0:1e:6f:bd:50:
64:b6:99:98:99:3a:68:32:32:e2:a7:98:ff:91:a6:
62:5a:10:94:7e:e4:1d:47:29:5f:e0:4e:90:f1:4c:
54:a5:fe:28:f6:d6:a7:8e:48:ac:28:e2:60:fe:12:
00:1b:19:e8:52:5d:7d:b5:e8:09:d0:9d:46:97:73:
ba:b9:58:75:9b:97:0c:d2:b1:b6:35:e5:4c:22:2a:
90:35:f6:d8:d9:7d:56:3d:3e:42:9d:32:54:a0:61:
ed:0d:6b:a4:e2:10:c4:f0:3e:b1:c5:d1:a4:a4:48:
53:f8:b1:2a:bf:f2:fb:80:49:6b:32:be:c1:ce:0c:
3b:8f:3a:86:3d:80:ae:81:9a:1c:16:13:8d:91:d9:
33:87:2a:0b:99:c8:81:d2:0f:8b:92:61:23:95:c4:
1e:af:e8:b3:ff:82:b0:a3:ca:69:93:b1:63:15:0f:
04:1d:00:09:cc:86:a3:13:53:9d:76:a4:29:66:99:
e6:a2:78:2c:22:9c:70:9e:e7:a4:92:52:18:6a:10:
58:99:20:5d:23:af:a6:e3:49:95:cf:15:fb:2a:31:
8e:26:58:56:d6:bf:20:a8:6e:7e:e9:e7:db:c7:75:
52:2a:50:87:dd:90:c9:5e:86:b8:0a:32:ae:9d:f6:
48:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1C:B4:57:F8:36:23:24:1A:B8:E9:0C:0F:FE:3B:DE:91:8F:70:BC
X509v3 Authority Key Identifier:
keyid:CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7d:a2:6b:c6:a0:b0:68:da:3f:ac:ec:a1:b7:56:9c:e3:aa:
e4:b7:b6:80:7a:ec:b4:22:8d:21:10:9e:55:90:55:5d:8e:e5:
18:82:67:7a:bc:e9:21:6a:b2:c3:20:39:f6:9e:43:2c:85:5e:
22:55:fa:79:52:d3:4d:ff:93:40:6d:41:b8:9b:30:90:d8:7d:
f1:17:da:43:28:e4:50:b1:aa:9a:12:4c:1f:c1:92:2b:f3:e8:
e1:75:6b:f6:34:48:b6:d6:9d:2f:3f:08:40:1f:d5:b2:3a:ce:
02:0c:9e:c0:6e:cb:c9:bc:86:45:06:c4:6f:9f:52:82:17:90:
09:59:c7:86:13:68:52:df:b8:3c:86:be:a6:99:52:06:fb:8d:
11:f2:47:0e:a3:3d:47:39:73:de:3a:9f:2e:cd:67:f2:46:35:
a7:7d:6b:4d:38:65:c4:01:af:0e:fc:0b:41:5b:44:f5:cf:9b:
72:8c:64:2f:a4:9b:54:39:f6:8a:54:2f:e1:ab:93:ba:81:ff:
f6:c9:5d:0a:f5:1f:ee:8e:ad:55:32:16:37:a3:dd:1f:99:1e:
10:2d:7d:ac:59:0b:14:c0:48:bd:a4:b6:a7:69:85:08:46:51:
76:5f:18:78:ca:48:8a:0a:5c:2c:c2:eb:00:8b:7e:1a:de:2f:
ec:98:8c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:34:45 2025 by rpki-client