Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
File: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft (raw, json)
Hash identifier: e96sPIhF115WNBMnFkR02UEPtAVgIZWbXV1mfGG+6oc=
Subject key identifier: 2A:B7:51:B1:5E:33:8E:BA:89:08:1D:AD:4F:AB:62:54:8E:07:B7:C4
Authority key identifier: CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
Certificate issuer: /CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Certificate serial: 0199FB7CFA5D7541A6FAC3577CD286617F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
Manifest number: 04A2
Signing time: Sun 19 Oct 2025 08:01:35 +0000
Manifest this update: Sun 19 Oct 2025 08:01:35 +0000
Manifest next update: Mon 20 Oct 2025 08:01:35 +0000
Files and hashes: 1: Kj9VfdUCgMk4aGgFNgZJ64WvAz4.roa (hash: B1YIPHashB6NFlEh7qNPbd/2OLMoFdhR39F9O5/IGts=)
2: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl (hash: liRsPWDjLdzpnK9Lzlc0t3qcFMsj7ehGVHiSdpfXMOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:fa:5d:75:41:a6:fa:c3:57:7c:d2:86:61:7f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Validity
Not Before: Oct 19 08:01:35 2025 GMT
Not After : Oct 20 08:01:35 2025 GMT
Subject: CN=2ab751b15e338eba89081dad4fab62548e07b7c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:34:15:2c:74:b3:26:6c:04:8b:6f:77:40:3e:
43:25:95:4e:56:46:cf:ee:64:83:55:ce:4a:a7:dd:
bb:84:ca:f5:76:06:37:e1:ac:7e:91:93:df:81:91:
3b:a1:48:1c:83:fb:a6:bc:4c:23:d1:8c:52:b0:b2:
56:6f:5b:bc:f5:cd:44:fd:ab:74:9a:55:4b:2d:80:
69:f9:73:a5:2b:79:89:9b:85:5e:db:de:52:f3:ca:
5a:87:38:da:85:53:00:fa:d2:72:05:18:18:a2:31:
84:1b:a9:01:85:96:48:3c:af:45:3e:40:44:0e:a6:
91:3d:1a:9f:6f:de:3a:15:b9:39:84:86:92:42:ab:
1e:b7:3b:ed:e4:9a:f6:a6:86:06:b9:bb:3f:b8:24:
7c:b0:41:a5:d7:ca:70:89:b3:50:d4:df:8e:74:2a:
f7:fe:37:53:3c:ef:c4:a6:d8:c0:a5:7e:70:66:f0:
cc:9c:6b:79:19:2e:39:ba:55:0b:2c:4e:56:7b:77:
d3:23:8e:35:4e:18:a4:55:9e:06:53:d5:2f:ba:6d:
0d:47:2c:f3:df:4e:f0:38:21:46:54:3a:5d:bd:41:
a4:53:56:27:a5:ac:6f:5b:0a:42:90:07:05:02:74:
d7:dd:60:ba:8c:21:ce:0b:25:59:db:c6:9e:fd:89:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B7:51:B1:5E:33:8E:BA:89:08:1D:AD:4F:AB:62:54:8E:07:B7:C4
X509v3 Authority Key Identifier:
keyid:CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ee:27:3e:bc:a8:32:cc:ef:2c:d8:42:02:be:f7:6e:a7:4b:
ab:94:e0:89:a3:d5:fb:b4:a8:21:a3:95:63:b4:7a:29:36:32:
9c:c1:da:1e:5a:89:7f:bf:98:2d:df:1e:b1:b6:a1:5c:5e:d0:
5d:9b:da:e1:a6:a9:46:76:3f:05:ae:ca:c8:82:ae:12:8c:e0:
ca:9a:6f:97:ba:12:2d:69:18:cd:be:e6:b0:be:da:aa:60:81:
f0:9d:e4:d9:c5:15:12:52:ec:df:dd:d5:22:e0:07:a9:7e:e4:
fe:de:55:c4:31:bd:7a:17:ea:df:2d:93:46:f1:8d:0c:61:d4:
d4:7d:ad:d7:84:bd:d8:9f:d6:7f:1a:cd:a1:6b:d6:0d:38:e1:
53:7c:87:68:ce:a2:a5:e9:d4:79:a2:28:d1:f0:5b:99:ef:2a:
d3:a7:44:44:94:6a:9f:54:52:c0:61:e3:c6:df:0f:38:97:f3:
3c:35:7c:86:7a:b0:f0:19:d9:7b:6a:09:d1:c6:d4:fb:f9:a0:
c4:0c:0d:44:06:6c:05:1e:84:99:c8:6c:bf:ed:b3:09:e4:25:
18:be:5c:08:39:76:64:35:ed:47:69:e3:9f:06:22:5e:92:f5:
76:79:9c:3c:d5:99:85:e8:af:4f:d5:d6:51:1d:50:dc:39:8d:
3f:d6:22:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:38 2025 by rpki-client