Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: Ck+rAVyORMXCaCX6s/vrxEO0v6BF5CDaZOlrk9RsMsg=
Subject key identifier: C6:B5:31:20:9F:A9:1D:B9:EE:02:5A:7A:47:B2:0E:FD:F0:1C:66:A9
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 019885B161DA2DB89340C6928A2C5A7470DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 4E
Signing time: Thu 07 Aug 2025 18:00:51 +0000
Manifest this update: Thu 07 Aug 2025 18:00:51 +0000
Manifest next update: Fri 08 Aug 2025 18:00:51 +0000
Files and hashes: 1: TCYwxyjyD1g2jKWdC_sz91XC0QI.roa (hash: 0MLzUPLd2BzGhf3bCW09crL9cUV2m9lOgzQdaDbCtoQ=)
2: VjBVb7qAWY4H2MSTTk3mE7tLdAI.roa (hash: rsEp+YspuHuBffI28dbqNM5X9+3GHXkR3gxoffTTdrs=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: 1+P4HrsyMjCWIC/CxRGN8Grc7hPblzupp69nCeeJwus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:b1:61:da:2d:b8:93:40:c6:92:8a:2c:5a:74:70:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Aug 7 18:00:51 2025 GMT
Not After : Aug 8 18:00:51 2025 GMT
Subject: CN=c6b531209fa91db9ee025a7a47b20efdf01c66a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:d6:2a:6f:a2:d0:a0:e0:10:65:c8:8d:d6:
74:ed:bd:62:91:f5:65:d9:b2:9f:b3:77:d5:37:59:
79:49:fc:29:4b:1d:56:be:29:de:c8:e5:79:e0:b9:
d1:10:5e:81:d5:14:84:df:0c:b4:34:46:a4:a1:19:
ea:28:1a:b6:59:31:c7:e1:db:ea:a7:c4:82:9f:5a:
a0:02:a5:a2:fc:35:c7:f0:2e:1d:a9:e7:bf:6a:e3:
49:5c:bc:17:1c:f8:e1:b8:11:55:bf:2c:ff:a8:7d:
4e:5a:98:36:14:7d:cc:ae:09:6f:f4:7e:0e:b2:12:
c9:15:cf:34:32:7e:96:1b:3f:71:ee:ea:d9:3f:3c:
54:14:45:2a:ed:5c:71:f4:83:35:cb:3a:c8:23:77:
14:06:d1:5b:35:b2:4b:7d:ba:7c:79:d5:1e:ff:96:
98:7e:3d:68:c5:ec:0d:e4:21:a0:a9:cd:e9:21:b2:
8e:22:bf:6d:8e:2c:7d:68:f3:82:d2:c1:d2:56:15:
86:72:fc:74:fb:63:5c:de:22:9d:b7:5a:b9:b0:6d:
f5:47:0e:8e:df:89:e9:a3:85:81:ad:33:81:e3:23:
18:a0:2f:0d:69:6b:9a:be:c4:af:35:ec:ef:ff:d3:
5a:fa:40:dd:3b:07:c0:5c:f8:21:29:67:b3:32:d0:
5c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B5:31:20:9F:A9:1D:B9:EE:02:5A:7A:47:B2:0E:FD:F0:1C:66:A9
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fb:43:e5:bd:e6:ae:24:db:98:9b:2f:c0:d2:ad:30:d5:c7:
fe:47:48:38:3c:21:29:6b:37:2b:65:50:bc:9f:a3:d3:bf:63:
85:fc:77:7e:c3:d0:d2:35:a3:7d:01:24:18:a9:07:89:72:a4:
ea:63:1c:e9:27:30:0d:4d:9b:44:bf:e1:b1:b1:48:9a:23:a8:
39:82:04:f1:67:12:e5:c3:3d:09:8f:06:c3:59:6b:70:be:1f:
58:b2:41:ea:3d:9f:5b:da:96:bf:ef:05:ef:2d:c6:1b:b8:c1:
ec:be:ff:77:41:c7:41:28:ca:c6:5c:c0:61:a0:d7:d2:8e:eb:
4e:bd:ce:c1:b5:32:45:c7:43:c9:69:bb:e9:22:fe:b2:9a:92:
02:19:63:9e:be:9e:3f:d6:ec:03:e6:ea:aa:e5:9c:89:c4:2d:
64:97:28:1f:d4:25:db:ca:6e:e9:72:44:dc:b3:78:c9:0e:b0:
72:e8:db:17:a8:10:64:ac:db:ab:84:3c:f5:04:2c:17:16:f9:
0f:76:40:55:0b:06:6d:78:8d:13:16:ea:c1:ee:e5:b4:68:62:
20:bf:87:63:99:67:aa:dc:9a:ef:ab:c4:58:0c:a1:6f:37:72:
20:10:6b:16:60:41:78:c2:03:fb:14:5e:de:9e:bc:59:23:78:
55:dc:2f:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFsWHaLbiTQMaSiixadHDdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZjY5ZWY4YTU0ODMwYzVhN2I2Mzc4OTFmYzNjOTBhYjEy
Y2JhNzgwHhcNMjUwODA3MTgwMDUxWhcNMjUwODA4MTgwMDUxWjAzMTEwLwYDVQQD
EyhjNmI1MzEyMDlmYTkxZGI5ZWUwMjVhN2E0N2IyMGVmZGYwMWM2NmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovnWKm+i0KDgEGXIjdZ07b1ikfVl
2bKfs3fVN1l5SfwpSx1WvineyOV54LnREF6B1RSE3wy0NEakoRnqKBq2WTHH4dvq
p8SCn1qgAqWi/DXH8C4dqee/auNJXLwXHPjhuBFVvyz/qH1OWpg2FH3Mrglv9H4O
shLJFc80Mn6WGz9x7urZPzxUFEUq7Vxx9IM1yzrII3cUBtFbNbJLfbp8edUe/5aY
fj1oxewN5CGgqc3pIbKOIr9tjix9aPOC0sHSVhWGcvx0+2Nc3iKdt1q5sG31Rw6O
34npo4WBrTOB4yMYoC8NaWuavsSvNezv/9Na+kDdOwfAXPghKWezMtBc0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMa1MSCfqR257gJaekeyDv3wHGapMB8GA1UdIwQY
MBaAFMz2nvilSDDFp7Y3iR/DyQqxLLp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBhZS1LVklNTVdudGplSkg4UEpDckVzdW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yMDg2MjMtMjY4Yy00YmY2LWI5NDct
ZjQ1OTIzNWQ5ODdiLzEvelBhZS1LVklNTVdudGplSkg4UEpDckVzdW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yMDg2MjMtMjY4Yy00YmY2LWI5NDctZjQ1OTIzNWQ5ODdi
LzEvelBhZS1LVklNTVdudGplSkg4UEpDckVzdW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/tD5b3m
riTbmJsvwNKtMNXH/kdIODwhKWs3K2VQvJ+j079jhfx3fsPQ0jWjfQEkGKkHiXKk
6mMc6ScwDU2bRL/hsbFImiOoOYIE8WcS5cM9CY8Gw1lrcL4fWLJB6j2fW9qWv+8F
7y3GG7jB7L7/d0HHQSjKxlzAYaDX0o7rTr3OwbUyRcdDyWm76SL+spqSAhljnr6e
P9bsA+bqquWcicQtZJcoH9Ql28pu6XJE3LN4yQ6wcujbF6gQZKzbq4Q89QQsFxb5
D3ZAVQsGbXiNExbqwe7ltGhiIL+HY5lnqtya76vEWAyhbzdyIBBrFmBBeMID+xRe
3p68WSN4Vdwviw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 23:58:28 2025 by rpki-client