Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
File: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft (raw, json)
Hash identifier: Y4mxCzzt5jTvYNtK7vZUJJR5juT26dXAszyuvjrQp/c=
Subject key identifier: 88:40:9E:B7:9C:EA:25:8C:45:D9:43:6D:45:BB:CD:87:21:B2:FE:F2
Authority key identifier: CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
Certificate issuer: /CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Certificate serial: 019921B0FE7323952C7778CC8A57A1C46FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
Manifest number: 063A
Signing time: Sun 07 Sep 2025 01:01:11 +0000
Manifest this update: Sun 07 Sep 2025 01:01:11 +0000
Manifest next update: Mon 08 Sep 2025 01:01:11 +0000
Files and hashes: 1: FQK3SzsJ-m_-4y7tzcBijOiJWxA.roa (hash: N1P49G4PfCUQ9FBa1Q2u191FzAmkruySd+sQ5qCtJd4=)
2: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl (hash: 4kkIqqiUzNb5eiZYDaXKK/UdzxZ7vM4sfHNeAGoFmek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:fe:73:23:95:2c:77:78:cc:8a:57:a1:c4:6f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119
Validity
Not Before: Sep 7 01:01:11 2025 GMT
Not After : Sep 8 01:01:11 2025 GMT
Subject: CN=88409eb79cea258c45d9436d45bbcd8721b2fef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dc:c9:c0:fa:11:a1:6f:5e:f7:4e:f1:67:4f:
b9:75:aa:b5:a1:e8:3b:c1:be:ea:73:11:78:b6:05:
cc:65:51:36:8e:cb:cc:5f:62:4f:57:3e:b0:2c:41:
e7:77:47:e7:7b:b9:db:3a:1f:9a:8e:62:84:ba:23:
9c:8f:b8:09:de:fe:ec:10:7a:38:2f:e5:e2:e7:c0:
b3:7d:81:47:c4:db:0c:66:1a:03:8f:ad:c1:91:3f:
99:a2:47:ff:7e:86:7b:fb:23:08:44:79:f2:87:81:
ad:d2:87:30:25:aa:ea:de:96:9f:d5:94:23:f9:27:
61:6e:a0:f2:86:50:11:b1:44:42:80:4e:7d:cc:a6:
ef:ab:82:12:de:20:b7:a1:5d:6c:0e:35:9f:9f:e2:
72:d3:21:c8:d7:f9:c1:52:ed:34:67:60:47:d0:6c:
79:43:35:e3:16:0b:86:cb:c7:c6:61:12:ec:f5:8c:
a0:a9:7c:02:6d:61:57:66:80:c4:77:1d:21:5c:da:
f2:d3:86:84:a6:64:c6:99:40:58:59:66:66:df:51:
4c:69:a5:3c:8a:71:3f:ca:1b:2b:ec:24:6e:37:ed:
90:94:ef:d6:34:27:6f:dd:58:d8:26:fd:9e:00:92:
6a:48:61:77:16:03:95:cd:cf:a8:93:49:21:fa:e7:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:40:9E:B7:9C:EA:25:8C:45:D9:43:6D:45:BB:CD:87:21:B2:FE:F2
X509v3 Authority Key Identifier:
keyid:CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c3:72:c6:eb:b0:07:27:22:95:d5:d0:2f:95:0b:a9:3f:b1:
cc:08:fd:df:e7:06:3c:12:f1:24:30:4d:98:b2:4c:fa:6d:29:
95:51:db:2c:b3:25:b2:21:fd:51:fe:6a:72:1d:b2:7d:6b:1b:
54:ab:1b:6b:30:ab:32:6f:97:8a:11:49:e7:07:a7:2b:62:f8:
32:18:02:52:f2:35:c3:1a:cc:29:4e:55:c1:13:d3:3a:0d:69:
f6:da:ef:6f:37:9e:f0:dc:b6:6f:a2:f4:71:3f:62:eb:df:0b:
6b:7d:5f:f3:64:78:b9:94:92:b4:d9:98:c5:7a:0b:41:08:14:
20:91:4e:41:66:0f:1d:e4:57:bb:1e:fa:f2:d5:63:7a:66:00:
bf:91:55:66:60:e2:8d:a5:24:e7:e1:7d:c7:79:f9:d1:b7:08:
a3:31:ce:c0:ed:41:26:19:33:c7:2f:99:e4:e5:3a:ae:a4:ca:
0c:1f:9d:6c:54:f3:a8:8e:38:38:eb:0f:2a:33:a3:e3:38:91:
87:78:d7:ca:30:ad:23:2c:74:94:48:51:f1:e4:76:af:f9:d2:
09:f8:2b:41:8b:18:03:7c:d3:ff:da:0b:51:9f:fc:a2:c5:60:
b7:f4:c9:1b:7c:57:c4:6b:c4:9f:bb:ac:05:3c:91:85:0b:08:
cd:ce:ac:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:09 2025 by rpki-client