Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
File: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft (raw, json)
Hash identifier: SGB2asKsqnisrA7XUyFuXACY27rnAHOu1BcPfNhQblw=
Subject key identifier: BA:A0:3A:0E:9C:B9:B1:91:78:E2:EA:23:F3:72:E0:30:A6:D0:31:F6
Authority key identifier: CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
Certificate issuer: /CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Certificate serial: 0199FBEBA0523AB5BA31A678F4332D7C8DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
Manifest number: 06AB
Signing time: Sun 19 Oct 2025 10:02:27 +0000
Manifest this update: Sun 19 Oct 2025 10:02:27 +0000
Manifest next update: Mon 20 Oct 2025 10:02:27 +0000
Files and hashes: 1: FQK3SzsJ-m_-4y7tzcBijOiJWxA.roa (hash: N1P49G4PfCUQ9FBa1Q2u191FzAmkruySd+sQ5qCtJd4=)
2: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl (hash: RU3ERIsxf5olJ0domU8u4A2yAkCjs+381LQHi2DzRq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:a0:52:3a:b5:ba:31:a6:78:f4:33:2d:7c:8d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Validity
Not Before: Oct 19 10:02:27 2025 GMT
Not After : Oct 20 10:02:27 2025 GMT
Subject: CN=baa03a0e9cb9b19178e2ea23f372e030a6d031f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4b:8a:43:3a:42:00:9a:0b:93:1f:37:ee:5e:
4c:d8:ed:20:ec:05:32:de:70:00:9b:ca:26:7f:38:
76:ad:4d:5b:7a:be:2f:cf:09:48:0b:fe:a5:e2:83:
eb:ab:87:0d:3a:c8:82:86:98:77:f1:6c:7d:b2:0e:
7b:7b:c9:26:84:dc:c7:bf:d8:8b:a1:6e:87:5c:ce:
3a:fa:28:0c:dd:81:c2:10:dc:c9:dd:93:1a:be:ff:
18:52:1a:67:97:8c:6d:22:be:12:25:18:66:f0:d1:
2d:e1:be:05:3f:47:7e:b5:87:01:2a:d5:d2:b9:16:
e2:e4:ce:af:8e:80:4d:9d:f4:6c:da:17:fc:70:c7:
2a:b5:88:1a:9c:db:a4:4e:d9:ac:6b:48:53:e6:c9:
f1:ce:fa:86:0e:fb:c0:7d:78:0c:16:62:17:7e:cc:
a1:a4:85:fe:da:44:35:06:6b:50:81:13:a3:9b:90:
c9:ae:f7:b9:f6:46:fe:f2:0e:30:6a:17:ab:bc:49:
5a:9a:a8:13:a4:fc:0a:71:a9:8a:96:10:e3:aa:53:
2a:b2:85:a0:b1:40:96:2a:4b:a8:a6:c1:00:f6:5b:
dd:d5:20:0c:bb:36:1d:06:7a:07:1f:bc:56:a5:c0:
78:6e:c0:68:6b:c7:e0:c8:55:ba:8d:aa:8b:25:d5:
b5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A0:3A:0E:9C:B9:B1:91:78:E2:EA:23:F3:72:E0:30:A6:D0:31:F6
X509v3 Authority Key Identifier:
keyid:CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a6:f7:2c:fa:3b:d9:d1:19:27:9e:38:82:5d:1d:ff:c3:95:
b3:b8:35:76:8e:5f:41:e3:a1:33:8a:3d:3d:92:11:73:21:ae:
f9:a8:ce:fe:98:48:1c:6b:b6:68:62:2f:ac:7d:f5:04:c9:e2:
d5:fc:2f:ee:f7:af:2d:0e:81:95:e3:8e:ea:96:a6:91:90:74:
37:a1:43:e7:62:1e:81:cc:eb:e5:bd:26:0d:48:e0:70:23:35:
01:85:af:f2:0b:ec:5b:9d:bf:9e:65:d4:a9:ef:bf:2f:20:25:
87:17:63:03:62:fd:8b:94:d9:c7:27:69:86:42:8a:63:4e:80:
1d:24:9d:bd:00:06:00:fe:01:78:76:8c:f5:1a:aa:3a:98:f2:
08:70:63:da:31:d3:f5:14:58:10:26:30:42:55:0c:39:93:29:
7d:75:d0:16:2e:4d:82:4e:a6:00:b1:9c:6c:3f:71:45:34:31:
46:ca:a9:25:a0:ce:59:c7:97:da:a0:f6:39:39:2f:fe:34:12:
26:c6:fa:e8:04:d1:39:48:98:70:8e:c2:fb:c3:ed:2a:46:c6:
0d:57:e4:5b:53:5a:b6:87:ce:36:39:af:b2:a9:f5:96:ac:d8:
19:02:d7:70:90:9d:44:97:8f:46:50:2b:1c:4e:97:3c:61:90:
5e:44:e8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:33 2025 by rpki-client