Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: Ym8VWQ+5bN+LPztJrypqVpnYi5oh6fqEdNCLXPZONvc=
Subject key identifier: 58:E9:4D:09:09:9E:5D:31:AC:35:B4:B0:58:4E:7F:A7:17:7F:DC:2D
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 019A5150B0BA46D547DA2E69FF71E9812F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 013C
Signing time: Wed 05 Nov 2025 00:00:33 +0000
Manifest this update: Wed 05 Nov 2025 00:00:33 +0000
Manifest next update: Thu 06 Nov 2025 00:00:33 +0000
Files and hashes: 1: TCYwxyjyD1g2jKWdC_sz91XC0QI.roa (hash: 0MLzUPLd2BzGhf3bCW09crL9cUV2m9lOgzQdaDbCtoQ=)
2: VjBVb7qAWY4H2MSTTk3mE7tLdAI.roa (hash: rsEp+YspuHuBffI28dbqNM5X9+3GHXkR3gxoffTTdrs=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: BYBLLTfLx8yTGy/y4mgyhL319LVXTgKP8dOJCzg1x2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:b0:ba:46:d5:47:da:2e:69:ff:71:e9:81:2f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Nov 5 00:00:33 2025 GMT
Not After : Nov 6 00:00:33 2025 GMT
Subject: CN=58e94d09099e5d31ac35b4b0584e7fa7177fdc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:c2:09:ce:24:f8:15:45:a2:60:39:57:f2:
27:44:ae:a8:30:8c:37:59:fd:4d:4a:b2:c7:bb:8d:
74:d4:b6:73:44:5c:1a:87:c9:3f:b2:dd:2a:27:ff:
ec:60:d8:29:f0:54:2e:c7:31:8e:a0:2e:45:6b:ea:
a5:92:22:b2:14:cf:dc:3e:cd:8f:85:85:d6:4e:43:
21:68:90:8c:96:58:3c:ba:0b:66:c5:b4:22:bf:de:
1d:7c:dd:93:74:cb:7d:e0:36:7e:26:05:d6:0b:3d:
7d:77:ee:4e:cb:46:23:4e:fc:20:6a:73:53:ec:9e:
86:b4:c2:7c:fd:95:a6:49:75:c0:76:8a:98:96:ff:
9b:e5:c3:13:19:a2:05:3b:c3:37:03:c0:c9:ab:c0:
be:c8:4a:56:22:69:95:d2:bf:50:73:20:67:4e:ef:
fa:7b:27:d2:96:9a:24:e9:1f:f2:b1:c7:ef:7b:cb:
a2:20:21:81:3f:4e:7b:69:4b:2e:dc:6f:4c:d1:92:
d8:20:54:50:ab:13:1a:a9:57:f9:e3:af:16:5c:d6:
3b:0f:82:32:9c:0a:f1:b8:e8:17:82:35:c3:13:0e:
77:20:67:aa:3b:cd:11:aa:36:d5:20:bd:92:4f:c8:
33:81:62:49:a6:3e:e3:ec:db:01:5e:ac:f9:56:4a:
d7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E9:4D:09:09:9E:5D:31:AC:35:B4:B0:58:4E:7F:A7:17:7F:DC:2D
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f2:e7:d0:c0:62:b7:13:d0:05:71:41:ec:2d:89:91:bf:1c:
f2:77:70:46:ad:5f:c2:ee:d8:81:79:86:85:78:0e:a7:c8:6b:
e9:7d:eb:b5:23:7a:86:18:4a:5d:4d:7a:ee:8f:8d:65:1a:42:
36:90:91:04:41:3f:6c:03:5e:3f:63:59:29:54:83:89:04:d8:
d9:31:c3:16:84:41:05:be:e9:52:64:93:6b:3c:9c:87:34:b9:
49:db:70:ad:04:4b:5d:4c:78:ac:48:59:5d:a6:3d:31:75:ef:
9a:a2:4a:0b:cd:fb:19:a9:0b:15:be:9a:9e:37:72:52:7d:0f:
f3:ef:c5:63:ce:97:ec:b1:de:a8:79:7d:0b:e8:e3:72:fe:d4:
98:ce:89:9a:b0:a4:3c:a2:5d:bc:0a:0e:4a:f8:44:d0:43:5e:
a9:5a:15:be:38:49:9e:26:89:9e:cd:97:31:90:24:d0:5f:db:
55:c0:0c:fd:de:8a:40:0f:43:44:67:3d:82:32:cb:14:f7:0e:
16:45:66:06:94:8c:31:57:f2:18:c6:1d:fb:49:a3:9d:2b:a7:
33:43:71:02:73:9e:1d:e6:d5:0a:bb:e2:20:83:c4:47:c6:a2:
2b:4b:1d:c9:ea:ea:e1:32:da:07:39:09:d4:61:3e:94:3a:6b:
77:52:f7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:52:55 2025 by rpki-client