Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
File: zpE13-0LtjNdGd3W1-mfSK--PAE.mft (raw, json)
Hash identifier: +CS+J73Zk8OS+atFPpesSmXuEdZTywJcN9ApGPSfL5Q=
Subject key identifier: 8F:D2:17:5E:47:6A:FB:21:32:07:6A:F7:66:CA:12:55:30:13:7D:B7
Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Certificate serial: 01967EA141C56DE6125AF5E243CBD2475750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
Manifest number: 117A
Signing time: Mon 28 Apr 2025 23:00:18 +0000
Manifest this update: Mon 28 Apr 2025 23:00:18 +0000
Manifest next update: Tue 29 Apr 2025 23:00:18 +0000
Files and hashes: 1: 3AR-VMpBzAccZOXuS0Wv2igI9_8.roa (hash: 1IjF66OCZHXjj/PGOWfcYm6upWdu1RftdnSFzRH/4xc=)
2: 7f-9IRIqQnjGSRvU0WiDuu7Obc8.roa (hash: OLYbBSTAVUTnC5xo7ur6Zey9nNLImhpgQBUvgb05C6w=)
3: zpE13-0LtjNdGd3W1-mfSK--PAE.crl (hash: vXzDkGRrNlayWcfTvbx7M8KrfeT5G3BZXWZmLbpc690=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:41:c5:6d:e6:12:5a:f5:e2:43:cb:d2:47:57:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Validity
Not Before: Apr 28 23:00:18 2025 GMT
Not After : Apr 29 23:00:18 2025 GMT
Subject: CN=8fd2175e476afb2132076af766ca125530137db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5f:0d:94:df:2b:43:8c:79:a2:cc:c0:66:42:
e3:5b:37:88:5b:c8:29:8b:17:71:a8:e1:69:47:eb:
30:98:de:7b:d7:62:21:2d:08:48:ab:80:cf:ad:4e:
2d:fe:57:99:6b:13:4f:6f:4e:7e:d1:a3:52:b0:0d:
b8:77:fe:0c:3b:64:2a:d1:a8:09:02:83:1d:2a:2a:
17:70:99:4d:d7:2e:99:57:7b:86:9a:80:59:b6:bf:
82:a0:ea:17:09:3d:37:7b:8c:29:38:82:cd:35:99:
dc:e7:83:2f:ba:b4:87:35:05:0d:22:2d:6c:3b:41:
d8:dd:7d:0b:ad:6c:90:56:40:69:92:35:c5:35:e0:
01:71:20:43:70:f6:26:a6:16:64:d3:e2:e6:f6:aa:
04:71:bc:ef:ff:7d:1b:fc:9f:88:9e:e2:20:70:00:
09:e8:6c:6d:96:99:fe:89:f8:65:79:b0:7b:76:2f:
22:84:81:97:09:5f:4e:c7:5e:e7:74:47:f1:5a:f3:
06:4d:bd:ff:7f:0d:1f:70:49:b4:54:5f:4f:3d:57:
76:99:ca:f2:75:d8:78:5d:2a:94:04:1a:3e:e5:4e:
62:e0:5d:f6:59:1d:81:fd:91:97:d5:21:24:77:1c:
8a:49:cd:eb:ac:d5:62:29:3f:1d:11:fa:57:69:29:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D2:17:5E:47:6A:FB:21:32:07:6A:F7:66:CA:12:55:30:13:7D:B7
X509v3 Authority Key Identifier:
keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:88:d4:81:70:8e:50:1b:bd:5d:10:68:4a:3e:50:b1:9a:44:
37:df:33:dc:20:f8:58:43:52:c7:11:eb:17:4b:65:e8:71:e3:
90:85:c6:88:6d:6c:49:68:b2:df:e3:2c:26:a2:03:0d:74:e0:
7a:71:c6:02:16:e1:1b:d8:6c:05:37:0e:ee:ce:a9:a3:f9:54:
a0:cb:5b:d1:2a:26:a6:8c:6a:f5:d5:62:4f:15:ce:8c:82:06:
1a:0b:68:db:8e:91:dd:6a:6a:22:51:cc:3a:eb:53:50:df:bc:
8e:48:7e:dd:ac:8c:e8:7b:ab:36:75:39:92:2d:18:44:65:32:
a2:59:04:43:fd:a3:2c:2d:ad:b5:3f:40:3f:41:3f:c3:04:e6:
2c:26:cd:24:f2:90:1a:f8:e5:08:d1:c2:be:dd:a4:35:65:a2:
e7:e1:d3:ac:12:d3:be:db:05:b9:86:98:87:ab:1a:00:51:a3:
82:f2:53:c8:f5:d8:0f:8b:3d:af:9c:58:92:13:f5:80:b1:62:
40:e1:a8:fe:f6:4c:7b:a3:1e:a2:97:37:66:f9:ff:cf:b3:c8:
e0:b6:6a:43:74:1a:e8:30:8a:68:45:06:78:25:71:07:17:56:
8c:54:d2:85:1c:66:82:b9:fd:1d:1e:da:f1:da:5d:fc:f6:e7:
d7:50:bf:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+oUHFbeYSWvXiQ8vSR1dQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOTEzNWRmZWQwYmI2MzM1ZDE5ZGRkNmQ3ZTk5ZjQ4YWZi
ZTNjMDEwHhcNMjUwNDI4MjMwMDE4WhcNMjUwNDI5MjMwMDE4WjAzMTEwLwYDVQQD
Eyg4ZmQyMTc1ZTQ3NmFmYjIxMzIwNzZhZjc2NmNhMTI1NTMwMTM3ZGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF8NlN8rQ4x5oszAZkLjWzeIW8gp
ixdxqOFpR+swmN5712IhLQhIq4DPrU4t/leZaxNPb05+0aNSsA24d/4MO2Qq0agJ
AoMdKioXcJlN1y6ZV3uGmoBZtr+CoOoXCT03e4wpOILNNZnc54MvurSHNQUNIi1s
O0HY3X0LrWyQVkBpkjXFNeABcSBDcPYmphZk0+Lm9qoEcbzv/30b/J+InuIgcAAJ
6Gxtlpn+ifhlebB7di8ihIGXCV9Ox17ndEfxWvMGTb3/fw0fcEm0VF9PPVd2mcry
ddh4XSqUBBo+5U5i4F32WR2B/ZGX1SEkdxyKSc3rrNViKT8dEfpXaSm7fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/SF15HavshMgdq92bKElUwE323MB8GA1UdIwQY
MBaAFM6RNd/tC7YzXRnd1tfpn0ivvjwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zYzljM2MtZDYwOC00ZWEyLTlhMjgt
YzExZWM2ZWE4NmI4LzEvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8zYzljM2MtZDYwOC00ZWEyLTlhMjgtYzExZWM2ZWE4NmI4
LzEvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIjUgXCO
UBu9XRBoSj5QsZpEN98z3CD4WENSxxHrF0tl6HHjkIXGiG1sSWiy3+MsJqIDDXTg
enHGAhbhG9hsBTcO7s6po/lUoMtb0Sompoxq9dViTxXOjIIGGgto246R3WpqIlHM
OutTUN+8jkh+3ayM6HurNnU5ki0YRGUyolkEQ/2jLC2ttT9AP0E/wwTmLCbNJPKQ
GvjlCNHCvt2kNWWi5+HTrBLTvtsFuYaYh6saAFGjgvJTyPXYD4s9r5xYkhP1gLFi
QOGo/vZMe6Meopc3Zvn/z7PI4LZqQ3Qa6DCKaEUGeCVxBxdWjFTShRxmgrn9HR7a
8dpd/Pbn11C/iA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 09:30:21 2025 by rpki-client