Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
File: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft (raw, json)
Hash identifier: gEs8BcQV7TDwuDLGNREIeHhF96DFaTj1Q4e7BnH9Otw=
Subject key identifier: 59:18:82:47:10:CC:79:BA:AF:58:72:1C:7B:34:A1:8A:DC:85:2A:ED
Authority key identifier: CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
Certificate issuer: /CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Certificate serial: 019A71B7E22F9A96F315F11C70C5AEE21096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
Manifest number: 06E8
Signing time: Tue 11 Nov 2025 07:01:07 +0000
Manifest this update: Tue 11 Nov 2025 07:01:07 +0000
Manifest next update: Wed 12 Nov 2025 07:01:07 +0000
Files and hashes: 1: FQK3SzsJ-m_-4y7tzcBijOiJWxA.roa (hash: N1P49G4PfCUQ9FBa1Q2u191FzAmkruySd+sQ5qCtJd4=)
2: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl (hash: iZNrgxqgXoPyTWslBEzwTNmf5bBoDRMrJi25VmQvb2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e2:2f:9a:96:f3:15:f1:1c:70:c5:ae:e2:10:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Validity
Not Before: Nov 11 07:01:07 2025 GMT
Not After : Nov 12 07:01:07 2025 GMT
Subject: CN=5918824710cc79baaf58721c7b34a18adc852aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a6:06:fe:38:60:9e:ea:0a:de:98:83:36:b2:
e5:c7:32:8b:81:82:d1:1f:ac:e7:a8:ef:47:b2:4d:
8f:2a:08:26:09:2e:81:3d:02:92:a5:7b:a7:f2:c5:
9f:d3:ac:67:cd:0c:5b:ba:53:e0:85:d7:58:35:e6:
77:7a:4b:c1:0b:a6:aa:e5:10:ca:7c:81:f0:f1:4b:
a7:45:a8:cb:76:ff:21:a2:a7:db:ee:fd:ea:bc:f2:
47:fc:c1:79:98:5b:c1:46:e6:25:4c:f0:fc:7b:f2:
e5:e0:98:f6:99:88:a3:91:85:69:35:e2:2a:ef:dd:
d6:c1:50:55:21:c5:bd:90:77:06:2f:b7:e5:85:b0:
42:8b:c4:92:2d:39:4b:64:70:44:fd:e3:90:64:f7:
9f:6b:fe:9d:d5:c5:7d:af:94:69:f3:d6:04:c7:92:
31:b1:08:6a:3e:f3:1f:2e:05:bc:c7:17:bf:e8:32:
10:5a:03:de:6c:30:94:cb:04:07:5d:50:0c:62:56:
51:8e:8a:14:b7:bf:3f:45:b0:c9:60:a9:e5:77:d9:
17:e3:be:40:17:6c:a9:bd:f3:58:fd:d2:79:e3:70:
8d:ea:a0:c9:2b:2e:91:6f:ff:60:5e:02:7e:71:62:
24:c7:e4:26:88:2c:b5:1c:d7:8a:5c:c9:ea:57:aa:
ed:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:18:82:47:10:CC:79:BA:AF:58:72:1C:7B:34:A1:8A:DC:85:2A:ED
X509v3 Authority Key Identifier:
keyid:CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:74:f9:13:cc:70:25:bd:c4:fc:a1:55:b3:5d:33:a2:7a:82:
28:b0:32:43:e5:e0:98:7e:81:25:4b:a0:7f:dd:45:28:56:54:
7e:36:17:80:5c:92:f0:ae:0b:6c:0b:3e:07:cc:39:7b:6c:8c:
4b:07:9a:b3:0a:60:a5:e3:36:20:4e:4d:c0:96:6e:77:5b:8b:
13:de:4f:e9:16:07:a1:79:ed:02:69:33:84:69:f2:17:fd:53:
cf:ce:95:c5:5a:a0:3f:1a:51:ee:6f:50:fc:82:5b:19:05:b3:
7d:9f:50:65:f6:ed:14:4e:04:e8:7c:51:ee:ca:9c:55:e5:a8:
d1:52:84:61:45:8f:55:23:96:c1:0a:d5:e4:51:69:69:96:49:
4a:19:30:5f:56:8f:48:f5:26:28:26:dd:1c:6c:ca:c9:db:96:
34:a3:9e:d4:5f:90:ce:0d:f6:cc:b6:d1:f2:72:6d:f9:27:fc:
46:30:f8:ca:ab:cf:14:cb:f7:3b:9e:9a:b8:05:bd:4a:bd:9c:
5e:dc:9c:55:a0:45:a1:93:e3:64:df:fc:ed:9c:bc:e6:dd:1c:
cb:d0:3a:80:24:34:d4:be:a4:f3:21:f0:cf:ee:cf:be:d1:33:
d8:b6:41:58:57:fb:26:72:33:18:f4:61:9d:9b:43:6b:de:44:
b9:8a:45:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:25 2025 by rpki-client