Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
File: zpE13-0LtjNdGd3W1-mfSK--PAE.mft (raw, json)
Hash identifier: jga7Sa5PEAyl9u9d8QUkIPwSRWB1AGlIiW9CB3g0O44=
Subject key identifier: 5E:A7:A6:F6:87:FD:34:35:89:B8:55:B6:E0:B9:BF:8B:C5:D1:FC:92
Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Certificate serial: 019A4FD0589FE9938C31659E894062E24640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
Manifest number: 1374
Signing time: Tue 04 Nov 2025 17:00:45 +0000
Manifest this update: Tue 04 Nov 2025 17:00:45 +0000
Manifest next update: Wed 05 Nov 2025 17:00:45 +0000
Files and hashes: 1: 3AR-VMpBzAccZOXuS0Wv2igI9_8.roa (hash: 1IjF66OCZHXjj/PGOWfcYm6upWdu1RftdnSFzRH/4xc=)
2: 7f-9IRIqQnjGSRvU0WiDuu7Obc8.roa (hash: OLYbBSTAVUTnC5xo7ur6Zey9nNLImhpgQBUvgb05C6w=)
3: zpE13-0LtjNdGd3W1-mfSK--PAE.crl (hash: Ar43qGIuSth9WiKfdXIVK/Vy+4BmTA7YCe/s3KHOd9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:58:9f:e9:93:8c:31:65:9e:89:40:62:e2:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Validity
Not Before: Nov 4 17:00:45 2025 GMT
Not After : Nov 5 17:00:45 2025 GMT
Subject: CN=5ea7a6f687fd343589b855b6e0b9bf8bc5d1fc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4e:db:43:64:e0:eb:5c:c6:fd:ea:96:7e:96:
81:f4:78:09:50:7a:54:25:ff:94:8c:fb:d3:bb:7c:
6a:6b:5a:8a:8f:74:d8:9f:cf:2b:2a:36:88:f9:eb:
c8:e9:3e:9b:18:fa:33:c4:61:5e:e8:11:00:78:fd:
29:dd:3e:bb:2f:7e:b1:d4:25:9f:d6:06:b5:8b:3b:
77:89:b2:03:e5:40:ca:0f:ab:73:e5:b2:66:ca:f1:
13:63:0a:4d:3c:32:c5:87:98:11:23:b8:83:2e:6a:
eb:b0:5b:79:a4:d8:54:c2:4e:b6:64:f2:af:44:50:
04:5e:d5:a3:eb:0b:d4:a5:53:0b:5e:06:45:77:f2:
f0:5f:61:be:db:c2:a0:47:e0:37:f2:6f:01:1c:e3:
7d:53:d2:84:06:f6:45:3c:04:fa:cf:1e:b1:1f:30:
81:a7:bf:87:e6:b8:5c:4a:99:1b:f7:44:6f:52:aa:
b0:fa:b0:bd:81:df:24:8a:be:f6:11:4c:1e:bf:04:
87:04:7a:3d:3a:99:de:1c:42:98:59:b4:7e:0e:3d:
d0:e7:d2:2b:6b:89:00:a0:16:82:2e:bc:c7:ae:c1:
3f:89:18:17:af:d0:08:d4:1a:1b:42:d7:a9:60:1e:
80:af:5b:5e:4e:b4:19:01:a8:a4:77:97:c9:5a:7b:
ce:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A7:A6:F6:87:FD:34:35:89:B8:55:B6:E0:B9:BF:8B:C5:D1:FC:92
X509v3 Authority Key Identifier:
keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:10:ab:05:a4:33:29:b5:bc:3a:32:4e:c2:fd:9b:d4:b5:63:
85:b9:15:91:92:04:99:5e:61:2f:59:e3:0f:3d:d1:b4:92:ca:
60:91:07:5f:25:35:19:66:2e:1e:06:0a:08:e2:83:17:65:a9:
95:e2:5e:5f:61:9f:df:3e:76:32:25:4e:f0:e3:ff:de:a5:79:
5c:8f:bc:75:8a:8e:a4:74:b2:5c:b5:3c:a1:e6:43:fd:f1:35:
70:2c:38:c0:9c:48:c9:15:f7:25:9d:eb:76:f2:da:1f:58:f4:
84:b8:7b:6c:a2:0a:1d:a2:aa:0f:2d:6c:c5:d0:d7:84:20:af:
76:f4:1e:b4:9e:bf:8d:13:9f:04:82:ee:7c:3b:0c:ae:fd:33:
f2:41:5c:30:45:28:ba:6b:23:5f:ec:7a:6e:fb:ff:bf:08:fd:
b7:0f:27:81:e9:7f:a9:54:dd:ab:77:7f:24:30:e8:c2:0b:fe:
79:8e:98:97:65:34:6e:6d:08:0e:ec:19:cc:a3:b8:42:60:0a:
75:21:05:c4:5b:3b:d7:63:21:35:ad:07:d1:d5:2f:71:fa:e2:
01:12:6c:a2:9e:9e:87:8f:70:6a:37:29:d3:c6:6f:23:4f:80:
12:90:2b:d5:93:58:a1:6a:3d:75:33:d8:59:e1:b5:00:32:9d:
b7:31:cd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:19 2025 by rpki-client