Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: SmUZmm3AbxZKDtbUN3T2NhIdq4BcC3/aUjJFSm3x03I=
Subject key identifier: 84:EA:A3:D6:BE:64:99:15:AA:64:F4:30:82:C0:4D:13:FB:61:EB:85
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 019A533F215A0A0B81EF789DE5DA66074302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 013D
Signing time: Wed 05 Nov 2025 09:00:37 +0000
Manifest this update: Wed 05 Nov 2025 09:00:37 +0000
Manifest next update: Thu 06 Nov 2025 09:00:37 +0000
Files and hashes: 1: TCYwxyjyD1g2jKWdC_sz91XC0QI.roa (hash: 0MLzUPLd2BzGhf3bCW09crL9cUV2m9lOgzQdaDbCtoQ=)
2: VjBVb7qAWY4H2MSTTk3mE7tLdAI.roa (hash: rsEp+YspuHuBffI28dbqNM5X9+3GHXkR3gxoffTTdrs=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: L9draBFznRJKmNXotm8Bxth8a1wF8nXX18Q1g9rd87s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:21:5a:0a:0b:81:ef:78:9d:e5:da:66:07:43:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Nov 5 09:00:37 2025 GMT
Not After : Nov 6 09:00:37 2025 GMT
Subject: CN=84eaa3d6be649915aa64f43082c04d13fb61eb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:52:cc:90:5e:52:41:89:06:99:12:1e:93:
f8:7d:b4:08:72:ec:97:dc:ed:5d:e1:dd:ca:74:1e:
fb:1c:fc:59:97:42:d6:86:5f:34:34:6c:3f:8a:b5:
a4:a4:f2:4f:5b:39:eb:ef:60:73:0c:2b:d7:e9:a0:
11:3c:c4:b3:a3:ae:3f:dc:c9:1e:55:d1:ea:35:2f:
e6:46:4b:01:35:a0:8e:8d:a7:6d:99:32:a6:8f:29:
f0:62:89:23:63:50:1e:84:7f:d0:5d:80:e9:57:79:
39:e3:a6:16:f9:1a:f3:ce:86:e3:6c:66:d0:ec:f3:
26:93:41:f5:e5:17:3b:27:00:d0:a5:60:8b:0e:a2:
49:58:90:a1:5d:90:9c:24:a0:45:cb:eb:6f:d3:25:
bb:ca:0a:e1:04:32:17:e0:9a:e7:2d:3d:cc:d0:e0:
81:c1:d4:a9:1a:b5:d2:36:81:ec:b0:fa:0c:1d:94:
e5:4c:ea:b9:d2:cf:e1:f1:c3:d5:94:3d:47:ee:bc:
3c:94:97:1e:1a:f1:c6:b4:9c:cf:bc:5d:8e:a2:29:
f1:da:76:ac:f5:a2:ab:3d:5e:04:96:0e:c4:68:1f:
6e:5d:ba:ce:cf:b9:3d:a8:7b:f1:8a:97:ab:d3:89:
97:73:37:a4:99:3d:dc:b9:1c:35:cd:82:05:81:73:
62:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EA:A3:D6:BE:64:99:15:AA:64:F4:30:82:C0:4D:13:FB:61:EB:85
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:df:3b:2e:4f:d2:fe:00:40:e0:1c:5a:8c:e6:d3:e8:9d:10:
93:4d:4e:b8:fc:4d:35:87:ee:1e:dc:f2:47:97:0c:ba:e4:dd:
7d:90:35:d7:63:b1:ed:f9:40:9f:33:06:2e:ce:26:94:1c:f8:
56:87:10:5e:c4:a5:dc:fa:c7:36:32:eb:08:24:7a:1b:7e:96:
59:d1:cf:4a:a1:9b:0e:64:14:aa:93:90:69:2d:f3:bf:b5:ff:
f8:2d:ae:97:5e:5c:dd:7d:2d:be:9a:9f:2f:b6:ca:ec:d1:eb:
f1:38:7d:b7:64:93:ac:3f:a8:55:8b:8e:fc:81:71:60:01:fe:
cd:31:e1:64:c3:03:5f:88:c2:e1:68:c0:47:04:8e:d3:1f:03:
0d:d6:59:63:da:55:9a:c0:5d:7b:8f:6d:62:99:5f:a6:f2:11:
20:45:f6:da:6e:d0:f3:d1:f8:d7:0e:d7:5e:42:55:4b:cd:77:
22:02:0b:d6:d5:00:76:6c:14:3f:82:27:8d:34:dd:f6:48:1f:
68:fa:74:87:5e:12:22:16:1c:2b:8d:ed:87:fa:1f:17:ff:84:
72:c7:c9:f2:e1:db:98:19:ae:41:bc:77:59:b8:97:36:88:e3:
bd:48:d3:8a:a5:38:35:71:5e:1f:85:f8:e7:96:b1:bc:cb:66:
9c:76:d6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:16:32 2025 by rpki-client