Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
File: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft (raw, json)
Hash identifier: 86Qfx4SFW6upWwEIJV6odgmxBNh/QkPBLnOfkCMf8VM=
Subject key identifier: FA:A9:96:E5:64:7D:02:86:74:6F:F2:B9:5E:61:8E:EB:EE:7F:CB:EC
Authority key identifier: CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
Certificate issuer: /CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Certificate serial: 019A4D07953DF807BBC819A3E26033E1197D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
Manifest number: 06D5
Signing time: Tue 04 Nov 2025 04:02:13 +0000
Manifest this update: Tue 04 Nov 2025 04:02:13 +0000
Manifest next update: Wed 05 Nov 2025 04:02:13 +0000
Files and hashes: 1: FQK3SzsJ-m_-4y7tzcBijOiJWxA.roa (hash: N1P49G4PfCUQ9FBa1Q2u191FzAmkruySd+sQ5qCtJd4=)
2: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl (hash: rnzL2Mno5rg4RbpDY6FRPbkVWlT6gzEFB2YRl8i7YLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:95:3d:f8:07:bb:c8:19:a3:e2:60:33:e1:19:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Validity
Not Before: Nov 4 04:02:13 2025 GMT
Not After : Nov 5 04:02:13 2025 GMT
Subject: CN=faa996e5647d0286746ff2b95e618eebee7fcbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cb:1c:da:cb:c1:4a:03:7d:f3:a1:fa:d3:af:
54:27:42:f8:90:36:06:ff:f4:e0:b3:6a:15:73:f5:
3d:33:83:21:f6:9d:cb:74:39:f9:6e:55:9b:eb:44:
f7:ef:1e:4b:c3:b1:81:95:20:70:f1:a7:33:2c:69:
84:a7:83:5f:09:c2:51:3c:77:38:fd:8d:d8:72:af:
d6:13:d8:58:38:8e:6b:d8:7f:e9:1c:0d:6a:aa:9e:
3a:50:2f:ff:d0:ef:6c:25:b2:c1:ed:1e:1d:78:4f:
f3:55:5c:02:a0:0b:98:09:b8:e5:77:5d:ec:48:98:
c3:31:f1:79:55:6c:3a:f4:1c:39:a8:b6:ce:c8:81:
c0:4d:cd:6f:af:23:0e:ba:5c:24:b5:7c:e7:d3:86:
1a:30:f4:32:55:cb:56:91:c8:36:f3:4d:93:7f:20:
f4:4e:8f:9f:8d:98:1e:49:98:97:3c:24:e0:19:98:
93:c3:6f:bf:65:02:5c:28:33:1b:35:fe:1f:a5:3e:
59:1e:45:b3:e3:90:89:6a:56:ff:07:f6:f9:ca:f4:
62:cf:be:32:b5:8a:e5:92:83:16:db:61:f8:a7:19:
65:fc:bd:26:f4:4f:b5:79:4b:74:a9:c9:5c:20:d2:
97:18:77:e9:ef:f6:5e:a5:5b:a2:15:b5:e2:96:de:
55:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A9:96:E5:64:7D:02:86:74:6F:F2:B9:5E:61:8E:EB:EE:7F:CB:EC
X509v3 Authority Key Identifier:
keyid:CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f2:20:bd:67:c3:9d:cd:72:7e:c0:ab:8a:d7:f9:7e:55:e8:
49:99:cb:0e:97:be:cc:7e:5d:96:73:4b:b1:95:fa:65:0e:c9:
13:56:a5:e2:48:a8:f4:d0:29:72:a4:68:27:0a:e2:e4:4c:79:
b9:86:53:a6:e0:5f:23:1e:bb:ba:a4:c3:68:f0:37:8a:f0:40:
82:c2:57:72:13:78:d2:23:73:c8:dc:3a:89:1a:83:27:f9:34:
d0:09:0d:a7:49:bc:33:36:8d:b9:a3:9e:e2:bc:ff:16:26:92:
e8:e6:c6:03:74:0f:ee:50:19:d7:03:51:ec:40:88:91:83:b7:
a3:46:2c:8a:2f:69:54:44:93:d0:5f:2f:87:71:c6:3c:7d:7d:
82:ba:e5:fc:c9:1f:b0:e6:eb:b1:4d:45:fb:1e:95:9a:c0:99:
3c:20:6b:59:c5:ba:6c:8d:47:d2:71:e2:51:34:4d:58:e9:c7:
4d:c0:87:c7:8d:de:0c:1d:67:6d:da:21:82:dc:4d:60:52:44:
3c:41:15:30:65:46:c9:37:c9:73:5f:fd:df:29:ca:0f:a0:9c:
1f:c8:d3:05:98:94:6f:71:64:ca:a4:7a:6a:be:22:f9:be:61:
48:1b:e9:19:37:41:d1:37:e1:0b:d0:c1:2d:0b:e9:07:f8:be:
98:3b:d8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:17 2025 by rpki-client