Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
File: zpE13-0LtjNdGd3W1-mfSK--PAE.mft (raw, json)
Hash identifier: QlUKOjmhtQFJDKECvrEoSM5QcfUEFYkMLaVcCOBSyRI=
Subject key identifier: 81:21:91:A2:64:F0:2A:03:A9:0B:F0:D6:12:E1:8F:C3:C5:E4:47:56
Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Certificate serial: 0197B96A9784E31F3DD24FF6B2C6C910AB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
Manifest number: 121D
Signing time: Sun 29 Jun 2025 02:00:59 +0000
Manifest this update: Sun 29 Jun 2025 02:00:59 +0000
Manifest next update: Mon 30 Jun 2025 02:00:59 +0000
Files and hashes: 1: 3AR-VMpBzAccZOXuS0Wv2igI9_8.roa (hash: 1IjF66OCZHXjj/PGOWfcYm6upWdu1RftdnSFzRH/4xc=)
2: 7f-9IRIqQnjGSRvU0WiDuu7Obc8.roa (hash: OLYbBSTAVUTnC5xo7ur6Zey9nNLImhpgQBUvgb05C6w=)
3: zpE13-0LtjNdGd3W1-mfSK--PAE.crl (hash: XMy6A2I3WUxl7XXLit5YGKCn4ZeJYDSRuWIbMf7ayP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:97:84:e3:1f:3d:d2:4f:f6:b2:c6:c9:10:ab:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Validity
Not Before: Jun 29 02:00:59 2025 GMT
Not After : Jun 30 02:00:59 2025 GMT
Subject: CN=812191a264f02a03a90bf0d612e18fc3c5e44756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c2:29:d5:ce:b6:00:1c:f4:ca:94:8c:23:e9:
50:98:1c:f0:03:d3:84:89:ad:62:1c:df:40:cb:a3:
bf:cc:4e:44:d6:29:53:ad:18:aa:08:a6:20:1b:13:
fc:ac:d5:6a:c1:48:92:9c:5a:3e:5f:7a:59:26:c7:
5f:a1:a0:8f:21:b6:c7:62:22:00:5e:ea:b5:cf:ec:
4a:41:86:40:e9:4c:6d:26:d8:1b:61:fe:ac:10:54:
f4:d1:19:74:d7:f1:95:95:ad:25:9f:b8:04:5c:6f:
fa:f0:77:a0:45:ec:ef:1f:d1:f6:e4:42:a6:e1:b8:
0f:30:ba:c2:b7:19:1e:f6:69:b2:03:e4:b9:2a:f5:
50:2b:33:fa:35:35:44:b8:e8:a7:dd:26:30:7a:fa:
48:89:ed:1d:8f:5f:ab:e3:b1:40:a1:87:1f:38:c7:
2e:51:fd:55:85:d0:42:6a:b7:ad:f5:f1:93:de:21:
59:67:fa:ed:91:a4:d8:c0:05:ab:8c:82:63:dd:3b:
83:0d:0f:35:7c:13:01:b7:35:cc:f3:f8:f5:2c:7b:
7d:5f:da:46:ec:ca:95:f1:c8:21:89:32:1a:60:7c:
06:5d:6a:f2:99:0c:22:2c:6d:65:fc:36:a9:45:96:
08:96:c2:43:06:c7:98:17:e1:e4:23:37:f8:3d:2d:
da:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:21:91:A2:64:F0:2A:03:A9:0B:F0:D6:12:E1:8F:C3:C5:E4:47:56
X509v3 Authority Key Identifier:
keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:00:2d:af:20:a6:34:aa:8f:0a:32:89:59:81:c9:0d:f5:35:
70:c0:85:8b:2f:23:d0:61:f6:e3:cf:20:0e:05:29:58:70:1e:
07:68:c6:a0:40:c7:ef:91:c5:c8:7f:8e:ae:a3:92:23:98:9d:
d3:49:32:ad:0f:50:47:f5:6d:85:88:b7:d2:43:67:82:16:7e:
f2:43:82:be:00:dc:ba:bb:68:8d:9a:58:60:0b:f0:16:95:ae:
f5:21:d0:fb:f4:2c:ef:20:b4:94:8d:4b:7a:fe:03:65:34:71:
76:ca:71:45:3a:ea:49:e1:f2:b2:35:45:44:83:0d:3b:fe:58:
3f:c8:90:5d:7b:c5:ef:45:d2:d7:81:ee:13:ad:d2:9e:fc:e2:
5a:fe:fb:5b:c5:64:1a:ab:f9:d7:d9:6a:be:cc:e4:b1:d0:75:
be:f7:ef:1f:a3:23:b0:0f:2e:56:f1:86:dc:0a:63:d3:0f:c3:
8e:4e:45:15:24:a1:5c:c3:13:cd:0f:cf:4d:d2:8f:34:f3:f5:
5b:64:91:e3:33:09:ce:60:46:6b:fd:a7:13:61:84:db:d6:4e:
00:c0:c0:e6:36:b4:65:e2:9a:ab:af:82:46:82:79:1d:24:65:
d0:a0:fe:69:01:44:49:50:ff:ae:7e:34:da:08:61:8a:e9:44:
24:d0:d2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:27:31 2025 by rpki-client