Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: i0jSkL+gxb0ykwI3/Oveznd+ME+yQ9qvHQaxn+J1GU4=
Subject key identifier: 61:2C:5E:5F:F9:C0:1D:DE:F9:76:D0:FD:53:8F:C2:4B:0D:E7:9A:27
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 0199FC584387EBA14441007329CDA00F537F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 0110
Signing time: Sun 19 Oct 2025 12:01:06 +0000
Manifest this update: Sun 19 Oct 2025 12:01:06 +0000
Manifest next update: Mon 20 Oct 2025 12:01:06 +0000
Files and hashes: 1: TCYwxyjyD1g2jKWdC_sz91XC0QI.roa (hash: 0MLzUPLd2BzGhf3bCW09crL9cUV2m9lOgzQdaDbCtoQ=)
2: VjBVb7qAWY4H2MSTTk3mE7tLdAI.roa (hash: rsEp+YspuHuBffI28dbqNM5X9+3GHXkR3gxoffTTdrs=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: 2JjXo347cGrmka2406AUqazIDqe24/1Qejlk38NClXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:43:87:eb:a1:44:41:00:73:29:cd:a0:0f:53:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Oct 19 12:01:06 2025 GMT
Not After : Oct 20 12:01:06 2025 GMT
Subject: CN=612c5e5ff9c01ddef976d0fd538fc24b0de79a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4f:64:09:0f:a6:a2:31:e8:36:67:2d:69:43:
5b:70:8a:eb:bd:06:16:71:13:7c:2a:93:41:b3:9b:
6f:81:6c:86:b2:a0:e7:f0:62:b0:04:81:0c:ca:7a:
ea:0f:a7:8c:f9:37:fe:f2:7c:d9:87:e6:ea:87:98:
a8:c3:43:68:df:6b:ce:96:d4:25:94:30:a0:f0:1a:
66:81:c1:fc:0c:76:68:98:ab:21:17:59:c9:3b:d7:
a7:ae:42:8e:4d:3a:36:e5:a6:95:7f:f7:1a:93:1f:
8e:1f:a2:f1:ae:f4:09:be:57:e2:ce:82:81:b6:b2:
4e:05:41:df:6d:f1:a5:c2:33:c4:69:86:2a:f3:b7:
dd:57:b9:3a:ea:fe:14:58:90:54:b3:c7:1f:08:47:
19:02:e0:41:c3:d9:ee:a1:f8:d4:1f:14:57:07:80:
9e:f0:de:59:f5:81:bf:d1:18:e8:35:0c:5a:ea:31:
b7:8f:cd:69:bf:cb:82:9e:51:40:8f:44:6b:49:aa:
f2:b3:81:36:46:93:ec:12:e1:d3:3e:9b:53:76:e2:
a8:21:11:d2:2c:0d:15:df:e7:65:80:64:94:31:4f:
9d:d3:38:7c:13:e5:c2:b7:63:fd:f1:b2:96:5d:63:
ed:6c:35:2a:e8:9a:64:05:28:f5:cb:7b:12:8a:5b:
a4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2C:5E:5F:F9:C0:1D:DE:F9:76:D0:FD:53:8F:C2:4B:0D:E7:9A:27
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:88:86:00:a7:d1:67:74:5b:75:e7:47:d5:39:a6:10:88:3b:
1b:82:fd:c9:fe:06:44:98:18:a4:e2:43:c2:bc:aa:1a:48:8f:
4d:c6:ab:21:6a:80:3a:4e:ed:bd:7e:5d:b0:2f:91:74:85:26:
e9:77:44:af:86:34:f2:d3:d1:3e:70:13:f2:44:a2:ff:c6:13:
bd:42:0d:6c:11:fb:35:f9:0a:d8:17:af:7f:c0:43:1f:43:0b:
59:63:d2:4c:0f:52:e1:e1:e9:4e:f8:7b:4d:5e:63:2c:b3:46:
1d:c7:ea:ad:8f:ca:ee:04:58:4a:79:de:ce:63:ee:fa:bd:ae:
56:46:d5:f3:7b:df:a1:6d:a8:97:52:bc:6a:ac:03:9d:bb:0a:
a5:5a:d8:92:53:ff:ee:61:ef:4e:71:e1:55:f5:24:73:57:dc:
f8:08:96:a5:57:72:e8:92:96:12:8c:33:4b:7e:eb:b4:03:a1:
82:20:30:52:3e:d3:8c:7e:ee:18:2e:c1:43:8b:34:5a:70:bf:
d3:e1:e1:e8:85:2d:23:3a:3b:41:67:1d:05:57:e1:4f:4e:db:
1d:cd:ac:0d:69:53:ba:c4:f4:6c:62:e7:23:59:9b:56:3c:79:
41:99:3e:49:4f:52:b3:24:6e:62:64:97:b3:4e:7d:99:25:57:
4d:4f:0f:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WEOH66FEQQBzKc2gD1N/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZjY5ZWY4YTU0ODMwYzVhN2I2Mzc4OTFmYzNjOTBhYjEy
Y2JhNzgwHhcNMjUxMDE5MTIwMTA2WhcNMjUxMDIwMTIwMTA2WjAzMTEwLwYDVQQD
Eyg2MTJjNWU1ZmY5YzAxZGRlZjk3NmQwZmQ1MzhmYzI0YjBkZTc5YTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E9kCQ+mojHoNmctaUNbcIrrvQYW
cRN8KpNBs5tvgWyGsqDn8GKwBIEMynrqD6eM+Tf+8nzZh+bqh5iow0No32vOltQl
lDCg8BpmgcH8DHZomKshF1nJO9enrkKOTTo25aaVf/cakx+OH6LxrvQJvlfizoKB
trJOBUHfbfGlwjPEaYYq87fdV7k66v4UWJBUs8cfCEcZAuBBw9nuofjUHxRXB4Ce
8N5Z9YG/0RjoNQxa6jG3j81pv8uCnlFAj0RrSarys4E2RpPsEuHTPptTduKoIRHS
LA0V3+dlgGSUMU+d0zh8E+XCt2P98bKWXWPtbDUq6JpkBSj1y3sSilukoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEsXl/5wB3e+XbQ/VOPwksN55onMB8GA1UdIwQY
MBaAFMz2nvilSDDFp7Y3iR/DyQqxLLp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelBhZS1LVklNTVdudGplSkg4UEpDckVzdW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yMDg2MjMtMjY4Yy00YmY2LWI5NDct
ZjQ1OTIzNWQ5ODdiLzEvelBhZS1LVklNTVdudGplSkg4UEpDckVzdW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yMDg2MjMtMjY4Yy00YmY2LWI5NDctZjQ1OTIzNWQ5ODdi
LzEvelBhZS1LVklNTVdudGplSkg4UEpDckVzdW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYiGAKfR
Z3RbdedH1TmmEIg7G4L9yf4GRJgYpOJDwryqGkiPTcarIWqAOk7tvX5dsC+RdIUm
6XdEr4Y08tPRPnAT8kSi/8YTvUINbBH7NfkK2Bevf8BDH0MLWWPSTA9S4eHpTvh7
TV5jLLNGHcfqrY/K7gRYSnnezmPu+r2uVkbV83vfoW2ol1K8aqwDnbsKpVrYklP/
7mHvTnHhVfUkc1fc+AiWpVdy6JKWEowzS37rtAOhgiAwUj7TjH7uGC7BQ4s0WnC/
0+Hh6IUtIzo7QWcdBVfhT07bHc2sDWlTusT0bGLnI1mbVjx5QZk+SU9SsyRuYmSX
s059mSVXTU8Pvg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:11 2025 by rpki-client