Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
File: zpE13-0LtjNdGd3W1-mfSK--PAE.mft (raw, json)
Hash identifier: Du8bgl+B1bE0tFHivuJEDi6QMi2+dDgBLS/fJp72sn0=
Subject key identifier: 3F:76:4D:F4:FC:BD:4D:E2:62:62:20:DB:D6:D3:8A:A5:83:1B:48:01
Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Certificate serial: 019779AF8F293A94B1A28F23A8DB1A27AB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
Manifest number: 11FC
Signing time: Mon 16 Jun 2025 17:00:37 +0000
Manifest this update: Mon 16 Jun 2025 17:00:37 +0000
Manifest next update: Tue 17 Jun 2025 17:00:37 +0000
Files and hashes: 1: 3AR-VMpBzAccZOXuS0Wv2igI9_8.roa (hash: 1IjF66OCZHXjj/PGOWfcYm6upWdu1RftdnSFzRH/4xc=)
2: 7f-9IRIqQnjGSRvU0WiDuu7Obc8.roa (hash: OLYbBSTAVUTnC5xo7ur6Zey9nNLImhpgQBUvgb05C6w=)
3: zpE13-0LtjNdGd3W1-mfSK--PAE.crl (hash: POv48dWQtrcK3jh8a8EqObrY+LxjBF2IYkDRKoeSLJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:af:8f:29:3a:94:b1:a2:8f:23:a8:db:1a:27:ab:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Validity
Not Before: Jun 16 17:00:37 2025 GMT
Not After : Jun 17 17:00:37 2025 GMT
Subject: CN=3f764df4fcbd4de2626220dbd6d38aa5831b4801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:24:33:ce:a3:bf:40:b4:02:23:18:dc:18:
c3:a2:6b:cc:03:83:e8:8c:26:ea:f7:9f:86:91:5d:
fc:7e:6a:e4:0e:af:26:bc:d9:10:6b:ca:a9:c4:0c:
31:28:a7:37:d6:32:e2:cc:a8:e9:ee:7b:11:94:01:
43:f6:5c:83:5d:a8:f0:b9:e0:2a:f2:c1:98:1d:35:
6a:9a:4d:bf:71:b4:a5:e1:a0:27:35:42:aa:e5:79:
74:d9:98:b1:53:45:d1:4d:28:33:b4:5e:74:31:12:
ea:a9:73:f9:61:f0:1e:47:5e:aa:bf:6c:41:59:e3:
26:3d:f8:99:9e:de:2a:29:ef:fc:32:da:c9:11:69:
9e:ba:57:4e:ce:1e:19:e0:ed:09:d8:9b:ab:e4:8a:
64:52:6e:53:27:e3:b4:ac:bc:98:2c:59:ea:9c:96:
53:1e:5c:e2:a7:c5:0e:ef:50:78:78:b4:f2:b9:72:
29:77:d9:f6:1e:28:95:45:38:84:e6:33:27:f0:11:
a6:27:60:f6:50:24:e0:3b:31:89:b4:5f:45:bd:65:
ed:86:a7:3c:72:b6:7d:54:54:dd:1d:85:c4:85:f9:
5e:64:9f:56:8e:ed:4b:22:9d:81:6e:fb:5f:98:36:
fd:85:9f:28:e5:ce:e3:36:6c:39:92:2b:55:fe:21:
15:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:76:4D:F4:FC:BD:4D:E2:62:62:20:DB:D6:D3:8A:A5:83:1B:48:01
X509v3 Authority Key Identifier:
keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b1:6b:d7:53:c5:3f:67:a7:11:f5:a4:9b:98:db:3a:7b:c9:
f3:1a:01:61:75:76:da:ba:1f:0c:e9:62:44:94:31:c2:5b:94:
28:a5:50:e8:dd:a2:17:6b:bf:85:05:97:60:9a:be:29:db:06:
27:f6:15:a6:db:f3:f0:af:40:01:80:0d:4b:51:e8:25:37:20:
34:c4:4c:37:ec:21:6b:4f:48:73:8a:6d:c2:63:d1:67:1e:62:
fc:0f:84:63:10:5a:f2:05:ac:60:e4:55:46:e7:97:6b:01:c1:
c1:ab:50:cb:a4:00:a4:b0:67:78:62:17:56:6a:d9:6b:cb:3e:
b2:e2:33:24:cc:d6:2b:00:f7:c9:3d:5d:85:2b:22:e9:9f:59:
44:5c:2e:bf:30:8f:d2:c7:1e:46:80:df:f8:ef:70:7f:50:48:
9f:80:4f:f2:35:98:60:dd:67:7d:b6:69:e3:ed:52:84:ea:0c:
de:07:be:fc:ec:b9:be:c1:4b:93:72:19:cd:dc:68:62:66:82:
c4:ec:dd:b6:d4:79:14:42:01:94:a5:b5:d8:6b:03:1f:63:a9:
e4:02:d1:d0:07:f4:d1:80:03:f2:04:73:b1:2c:df:55:94:34:
35:84:e1:b2:32:c8:13:21:05:eb:3f:23:79:05:9d:f4:37:8b:
af:a4:20:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5r48pOpSxoo8jqNsaJ6uBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOTEzNWRmZWQwYmI2MzM1ZDE5ZGRkNmQ3ZTk5ZjQ4YWZi
ZTNjMDEwHhcNMjUwNjE2MTcwMDM3WhcNMjUwNjE3MTcwMDM3WjAzMTEwLwYDVQQD
EygzZjc2NGRmNGZjYmQ0ZGUyNjI2MjIwZGJkNmQzOGFhNTgzMWI0ODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgEkM86jv0C0AiMY3BjDomvMA4Po
jCbq95+GkV38fmrkDq8mvNkQa8qpxAwxKKc31jLizKjp7nsRlAFD9lyDXajwueAq
8sGYHTVqmk2/cbSl4aAnNUKq5Xl02ZixU0XRTSgztF50MRLqqXP5YfAeR16qv2xB
WeMmPfiZnt4qKe/8MtrJEWmeuldOzh4Z4O0J2Jur5IpkUm5TJ+O0rLyYLFnqnJZT
Hlzip8UO71B4eLTyuXIpd9n2HiiVRTiE5jMn8BGmJ2D2UCTgOzGJtF9FvWXthqc8
crZ9VFTdHYXEhfleZJ9Wju1LIp2BbvtfmDb9hZ8o5c7jNmw5kitV/iEVtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD92TfT8vU3iYmIg29bTiqWDG0gBMB8GA1UdIwQY
MBaAFM6RNd/tC7YzXRnd1tfpn0ivvjwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zYzljM2MtZDYwOC00ZWEyLTlhMjgt
YzExZWM2ZWE4NmI4LzEvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8zYzljM2MtZDYwOC00ZWEyLTlhMjgtYzExZWM2ZWE4NmI4
LzEvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7Fr11PF
P2enEfWkm5jbOnvJ8xoBYXV22rofDOliRJQxwluUKKVQ6N2iF2u/hQWXYJq+KdsG
J/YVptvz8K9AAYANS1HoJTcgNMRMN+wha09Ic4ptwmPRZx5i/A+EYxBa8gWsYORV
RueXawHBwatQy6QApLBneGIXVmrZa8s+suIzJMzWKwD3yT1dhSsi6Z9ZRFwuvzCP
0sceRoDf+O9wf1BIn4BP8jWYYN1nfbZp4+1ShOoM3ge+/Oy5vsFLk3IZzdxoYmaC
xOzdttR5FEIBlKW12GsDH2Op5ALR0Af00YAD8gRzsSzfVZQ0NYThsjLIEyEF6z8j
eQWd9DeLr6Qg1g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:08:04 2025 by rpki-client