Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
File: zpE13-0LtjNdGd3W1-mfSK--PAE.mft (raw, json)
Hash identifier: n5hSa547HiGk9e2JfKR2eR74jIbMp3mCXEh4Gu9IqBM=
Subject key identifier: 6F:9A:81:4E:2C:92:15:D7:56:98:E0:A8:1A:6A:2D:2F:34:2F:60:AC
Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Certificate serial: 01989592D5D8BA8C1C2E94B50F0CE29AE4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
Manifest number: 128F
Signing time: Sun 10 Aug 2025 20:01:24 +0000
Manifest this update: Sun 10 Aug 2025 20:01:24 +0000
Manifest next update: Mon 11 Aug 2025 20:01:24 +0000
Files and hashes: 1: 3AR-VMpBzAccZOXuS0Wv2igI9_8.roa (hash: 1IjF66OCZHXjj/PGOWfcYm6upWdu1RftdnSFzRH/4xc=)
2: 7f-9IRIqQnjGSRvU0WiDuu7Obc8.roa (hash: OLYbBSTAVUTnC5xo7ur6Zey9nNLImhpgQBUvgb05C6w=)
3: zpE13-0LtjNdGd3W1-mfSK--PAE.crl (hash: 7Uu8mKnOmp/s3spffd78iu7LG7obeoXacsi2pkDajbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:d5:d8:ba:8c:1c:2e:94:b5:0f:0c:e2:9a:e4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Validity
Not Before: Aug 10 20:01:24 2025 GMT
Not After : Aug 11 20:01:24 2025 GMT
Subject: CN=6f9a814e2c9215d75698e0a81a6a2d2f342f60ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:b3:94:cb:ba:52:49:4d:a3:4b:1f:1a:a2:
08:c4:e5:c1:43:67:7e:9b:79:b8:0b:ff:f9:81:9c:
9d:ae:e1:72:a2:78:19:33:83:dd:29:fa:67:f6:68:
ab:86:19:aa:95:e6:d4:88:b1:b9:ec:19:e6:90:0d:
36:ad:41:2e:70:f3:4e:c3:8e:40:be:7f:fd:bb:47:
8f:fd:f3:dd:c3:ca:ac:2c:49:1e:78:aa:90:45:2d:
a2:da:42:bf:03:5c:79:22:6d:0f:89:d1:76:04:2f:
54:fa:a1:64:e1:0c:47:e4:93:10:ff:65:cb:9a:b1:
fc:d2:20:8b:c6:cd:88:45:ef:72:06:e2:9f:11:8c:
c3:c1:4b:ea:fa:03:1d:d4:26:84:2b:1f:e9:e8:cf:
16:df:79:56:ef:b2:2d:5b:96:4b:39:4b:94:e6:71:
01:dc:13:b3:1a:76:40:e3:0d:db:a8:cd:ed:10:84:
f1:88:7f:7e:c3:a1:10:87:17:bd:cd:f7:89:46:c0:
e5:b7:5a:cc:74:b9:20:3c:48:3a:33:2f:bc:4b:88:
f1:cb:07:8f:09:fa:84:86:5e:99:c7:a3:be:77:95:
af:5a:71:b7:0e:a9:62:ff:4f:bc:eb:36:02:d1:7d:
1e:38:5f:47:dd:72:0c:6d:6d:fa:4f:93:4e:b2:c2:
50:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9A:81:4E:2C:92:15:D7:56:98:E0:A8:1A:6A:2D:2F:34:2F:60:AC
X509v3 Authority Key Identifier:
keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8a:f1:62:95:4c:79:52:81:c0:0a:30:8f:8b:66:57:83:3e:
f3:ec:c6:21:1a:58:3c:7b:a4:1f:d6:c1:de:da:68:b3:a8:38:
29:d8:fd:be:7a:2c:9b:8c:aa:86:42:80:fc:96:cf:e6:6d:aa:
40:db:d0:b3:8f:df:67:89:84:e6:75:67:a0:2b:1f:81:53:73:
3d:c4:73:10:ea:83:fe:cc:c0:72:ff:02:e1:26:5d:4e:c8:25:
d3:f4:dd:48:70:45:71:32:26:73:07:4a:24:40:29:9e:5a:61:
c0:f8:e6:35:e0:82:44:14:e0:60:7e:c8:a9:5f:c1:fc:d7:d1:
d5:e5:75:75:1b:5f:d1:f9:d0:af:ee:2f:9a:90:54:e4:3d:f2:
2d:43:9b:d4:1f:be:c7:93:2f:3f:b8:c6:10:e5:0a:76:1e:a1:
2a:13:18:89:ea:61:33:40:48:4a:88:49:e0:b8:bb:e6:70:cb:
4a:34:43:3b:0f:44:fa:ae:5d:2d:d6:ee:e8:95:b6:1e:d9:4d:
36:09:66:11:54:fe:87:10:27:4b:90:89:1d:17:f9:39:25:61:
56:2c:af:29:58:18:2e:6b:21:68:07:55:76:46:aa:09:72:d4:
6f:69:bd:ec:2a:82:7e:0d:0a:51:12:40:79:f5:18:5b:37:66:
19:d4:39:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:46:31 2025 by rpki-client