Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
File: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft (raw, json)
Hash identifier: xoPOpRmRjpENkLT2b8ti9X1uuklhrZ0Hi9l0BPGNHXM=
Subject key identifier: 25:F5:88:9F:3E:71:8D:C3:1D:73:BE:E2:AE:86:CB:9B:35:D6:79:EE
Authority key identifier: CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
Certificate issuer: /CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Certificate serial: 0198D4043E045084E975D5F4F45BC64764D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
Manifest number: 0409
Signing time: Fri 22 Aug 2025 23:01:44 +0000
Manifest this update: Fri 22 Aug 2025 23:01:44 +0000
Manifest next update: Sat 23 Aug 2025 23:01:44 +0000
Files and hashes: 1: Kj9VfdUCgMk4aGgFNgZJ64WvAz4.roa (hash: B1YIPHashB6NFlEh7qNPbd/2OLMoFdhR39F9O5/IGts=)
2: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl (hash: 9vOup+UAvcfc+lfWQYU42uZXEswkyqh+BuCOyPdUYDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:3e:04:50:84:e9:75:d5:f4:f4:5b:c6:47:64:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Validity
Not Before: Aug 22 23:01:44 2025 GMT
Not After : Aug 23 23:01:44 2025 GMT
Subject: CN=25f5889f3e718dc31d73bee2ae86cb9b35d679ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:ae:cf:f0:5e:0d:54:2e:86:15:cf:cb:af:
5a:22:40:75:02:0d:63:5f:1e:de:9e:81:44:45:dc:
92:7e:8d:36:98:c3:3d:8c:7a:30:a0:ac:da:28:4c:
c9:42:62:47:84:6d:85:2c:f0:17:8a:aa:6f:6e:71:
db:d3:4c:4b:a9:eb:44:77:99:50:85:ac:eb:d8:0b:
83:52:71:fa:a8:49:f2:97:cf:ec:4a:1a:60:0d:ae:
57:2a:42:4a:ad:9a:a9:ac:72:25:81:ff:88:7c:f7:
e2:14:c2:84:30:eb:4a:2b:82:14:a8:01:f6:03:c8:
8b:06:22:1a:da:08:6f:f7:93:fd:bb:d0:ea:0a:f5:
28:a1:eb:f5:1d:56:e5:cd:a1:be:b1:35:80:95:59:
1b:14:ff:b0:c2:51:d6:3e:97:13:78:c3:3b:ac:02:
ab:09:e9:70:4a:21:aa:df:bf:12:98:15:43:30:01:
75:9e:fe:a9:ce:48:12:71:0e:d8:8c:23:08:ef:74:
9b:5c:40:d7:70:69:e0:18:99:d9:99:93:bf:85:23:
97:5f:bb:f1:5c:f1:1f:92:40:fb:9a:d4:ea:d0:84:
5e:d1:8b:2c:66:1e:be:ed:fc:50:56:c0:d6:c0:e8:
d4:1a:61:0b:01:d3:8d:c2:40:13:89:a8:52:3a:40:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F5:88:9F:3E:71:8D:C3:1D:73:BE:E2:AE:86:CB:9B:35:D6:79:EE
X509v3 Authority Key Identifier:
keyid:CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:6d:32:51:4e:2f:86:1f:c0:29:37:89:02:19:68:6b:df:39:
f1:56:f2:88:4e:5e:a4:69:20:c1:41:07:bc:d8:2b:78:01:1c:
00:a1:e7:2b:67:15:ac:b5:bb:05:20:a2:ff:9b:71:4c:09:53:
22:37:a6:cd:59:06:e0:09:f1:79:6e:14:9f:6f:65:2a:eb:d2:
13:42:fc:04:a2:a8:e2:a0:5a:ce:34:67:bd:aa:7b:79:32:11:
8f:9c:74:43:3c:2e:fd:c1:b7:6f:a4:5c:3a:ab:aa:92:26:08:
a8:4d:8a:5c:12:68:5a:50:08:81:30:46:6f:85:4d:42:a6:91:
9e:10:10:f7:0b:51:48:1a:97:dc:52:6d:04:38:f9:1d:f4:b9:
db:e2:cd:b3:46:0a:c8:1b:67:23:21:96:ed:9a:69:0e:90:76:
a8:99:05:9c:aa:3d:b6:59:6c:f9:7f:f0:f1:2a:64:26:fc:a9:
d1:d3:17:45:b5:e4:52:fd:05:c7:ed:b5:b5:43:43:cd:03:c4:
30:f7:e0:83:e9:5b:92:7a:2d:04:03:24:a8:a9:51:01:f3:8f:
32:92:7e:49:f4:a1:6b:64:c8:89:c8:20:e9:b2:58:81:31:1d:
ce:a1:56:a4:86:af:4c:89:65:d2:29:da:42:cb:8d:a8:93:72:
dc:19:a2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:38 2025 by rpki-client