Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
File: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft (raw, json)
Hash identifier: duAy/29AsIDpzgxuiJVp8miy/wy9B8UJjSLoWnl1Ejg=
Subject key identifier: 50:EC:49:28:A4:46:50:84:4A:D4:F3:71:47:12:8D:6D:49:C9:5A:37
Authority key identifier: CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
Certificate issuer: /CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Certificate serial: 0197B82139041A3A70B506E1017F39C828F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
Manifest number: 0376
Signing time: Sat 28 Jun 2025 20:01:14 +0000
Manifest this update: Sat 28 Jun 2025 20:01:14 +0000
Manifest next update: Sun 29 Jun 2025 20:01:14 +0000
Files and hashes: 1: Kj9VfdUCgMk4aGgFNgZJ64WvAz4.roa (hash: B1YIPHashB6NFlEh7qNPbd/2OLMoFdhR39F9O5/IGts=)
2: zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl (hash: +F3Z/YK+yvTdbnHULfXpSdgJZrFJpB4IP35dqHiTt7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:39:04:1a:3a:70:b5:06:e1:01:7f:39:c8:28:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4ddafc2cf5658d02e56828c2c91353529ede8e
Validity
Not Before: Jun 28 20:01:14 2025 GMT
Not After : Jun 29 20:01:14 2025 GMT
Subject: CN=50ec4928a44650844ad4f37147128d6d49c95a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9b:6c:d1:24:95:d8:b7:00:9e:c1:96:58:09:
36:09:9b:d0:7d:a6:9a:d8:7d:ad:89:0a:bd:f8:68:
8b:ec:b6:c9:01:76:09:16:6e:73:13:54:90:69:e4:
16:c8:3f:4e:19:9a:32:d2:f3:07:e6:1d:b3:c1:e6:
11:75:59:da:ff:62:22:6e:f0:63:61:23:f4:31:8b:
21:86:6d:91:88:ae:e4:92:1d:6c:22:32:56:fb:6b:
c2:f9:b4:bc:d7:af:4b:cd:4c:fe:6e:8b:be:e9:48:
ac:8a:c4:2c:89:84:a3:5c:b2:60:7c:b3:32:89:82:
68:78:dc:cb:f9:90:5d:fa:c8:2e:5f:d9:40:1c:36:
27:06:da:bf:75:bc:4f:12:0d:a6:80:22:a6:5f:d0:
84:c3:65:96:fb:f2:ae:a3:b4:77:5c:78:cb:69:6c:
7a:97:ab:03:a4:ea:80:50:98:fb:39:cc:9d:61:36:
2d:27:04:12:db:20:81:be:c5:f0:ff:80:3b:60:f3:
24:8d:49:ac:5d:e2:3c:3f:35:c3:60:20:6e:e5:ae:
c8:9e:3c:f1:24:4f:6b:65:80:36:5e:55:29:2a:eb:
84:de:bb:da:73:a0:2f:16:3c:93:6a:99:a7:3e:ae:
dd:d9:61:cc:15:f9:eb:97:52:44:89:96:c1:ee:9d:
93:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EC:49:28:A4:46:50:84:4A:D4:F3:71:47:12:8D:6D:49:C9:5A:37
X509v3 Authority Key Identifier:
keyid:CE:4D:DA:FC:2C:F5:65:8D:02:E5:68:28:C2:C9:13:53:52:9E:DE:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2397fb-0dd0-41c3-bc6e-ba87439b7da9/1/zk3a_Cz1ZY0C5WgowskTU1Ke3o4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:62:f7:25:33:bc:fe:1a:91:dd:7e:75:ce:e1:d4:2d:a8:d1:
dd:51:af:6e:3a:bd:0f:a4:b2:15:d2:88:c6:25:a3:bf:e5:70:
6d:b4:cd:49:59:f2:40:58:53:a4:46:8e:55:07:1a:95:db:d4:
e9:07:f3:2f:f4:d5:73:5d:20:7a:a5:ee:56:6e:f5:68:5a:9c:
75:2a:3c:d2:3a:4d:12:e2:bc:74:96:04:a4:d3:84:ea:7d:8b:
3f:9b:0e:13:85:b1:44:87:e0:50:12:49:75:7f:30:4b:8b:f9:
0d:b4:fb:e4:45:f8:67:e6:5c:9a:76:a4:89:10:86:08:eb:43:
ad:7d:e4:90:b2:f8:c3:7a:8c:19:b2:30:20:b9:1f:61:fe:61:
c7:34:8d:11:93:83:6d:1f:57:ab:46:f4:e5:50:8c:89:da:20:
95:da:8f:17:31:46:a8:d4:d6:48:07:e7:13:eb:66:1b:43:fd:
17:3b:af:1d:55:ae:ce:49:31:59:40:a1:04:ea:b5:a3:e6:f0:
5c:cb:df:cd:72:08:2d:a4:54:39:35:41:13:29:7b:af:44:b9:
1b:d6:d9:23:98:27:6c:2a:2c:9d:6a:80:f4:e2:36:c3:49:ff:
ac:60:a5:eb:cb:06:8a:c6:02:44:f1:20:0c:69:b3:26:6e:00:
6d:59:b8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:38:11 2025 by rpki-client