Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: 870QxeWnIEMy6q8ONGaJyir4OM+hwNK1Xb35CBtFDco=
Subject key identifier: 91:17:49:34:5A:BA:2C:03:3B:AD:36:A7:A9:62:6B:D1:48:58:85:7B
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 0198D4E0261ABA2F2761510DB00440C4211C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 77
Signing time: Sat 23 Aug 2025 03:01:56 +0000
Manifest this update: Sat 23 Aug 2025 03:01:56 +0000
Manifest next update: Sun 24 Aug 2025 03:01:56 +0000
Files and hashes: 1: TCYwxyjyD1g2jKWdC_sz91XC0QI.roa (hash: 0MLzUPLd2BzGhf3bCW09crL9cUV2m9lOgzQdaDbCtoQ=)
2: VjBVb7qAWY4H2MSTTk3mE7tLdAI.roa (hash: rsEp+YspuHuBffI28dbqNM5X9+3GHXkR3gxoffTTdrs=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: UWEvFj1d7HrtXERl8oZS17Io6ds4Ssm+b8UjY2Es/tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:26:1a:ba:2f:27:61:51:0d:b0:04:40:c4:21:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Aug 23 03:01:56 2025 GMT
Not After : Aug 24 03:01:56 2025 GMT
Subject: CN=911749345aba2c033bad36a7a9626bd14858857b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:82:92:fa:46:88:e9:96:ca:5e:57:04:e5:09:
d8:20:41:e9:30:de:00:bc:6e:30:52:f6:31:d2:f0:
33:f4:ae:37:c0:e5:e8:64:ea:c1:17:aa:5f:05:e2:
3f:de:8d:90:60:35:c8:e9:43:13:aa:ae:da:50:ff:
ab:95:7d:41:9d:11:71:55:f6:d5:96:d9:e0:8d:8f:
88:83:7c:1a:37:f7:c3:5f:2a:31:43:1a:f8:49:08:
8c:6f:60:ee:ef:53:04:28:56:cd:2c:90:da:0e:a7:
0d:6a:5d:a2:41:b0:90:c1:4c:0b:29:7c:dc:03:73:
2a:95:1e:1d:b7:54:a5:f8:55:60:91:30:9b:3b:c1:
9b:3a:24:08:3f:84:d2:47:00:22:77:2a:02:38:45:
55:dd:c7:f4:84:17:ff:c7:d9:e0:a9:2b:c9:7a:8e:
64:7b:4e:1a:51:67:00:c9:09:2e:07:64:95:a4:41:
56:d0:ec:80:42:d9:3d:80:3b:8e:bd:ce:9d:e9:52:
fd:b6:33:be:de:a3:24:a3:67:6f:52:54:0a:25:40:
a7:a7:92:f9:ca:79:0b:3e:b1:42:19:a0:c8:11:c7:
f5:c3:76:35:87:f1:95:47:e7:d2:13:40:f7:b6:c7:
04:f3:8c:38:bb:c9:b5:3d:16:12:15:c7:b5:24:13:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:17:49:34:5A:BA:2C:03:3B:AD:36:A7:A9:62:6B:D1:48:58:85:7B
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:87:e5:5d:b3:a2:2b:2c:9b:a1:13:3d:ab:f7:7e:9e:16:83:
4a:e0:1e:a6:8d:0b:a3:66:0c:c0:90:3a:e6:10:2a:be:8c:61:
58:ac:31:39:f2:30:cc:4e:4a:44:36:d4:52:08:fa:30:6d:3a:
5c:98:81:53:49:83:45:75:dc:40:d8:f5:8d:b5:9c:77:e1:31:
e9:40:bc:e0:f9:46:a9:a2:96:b7:9d:f1:05:ce:99:c6:5f:67:
cd:8c:26:3a:25:e1:93:0b:19:3d:54:3f:b2:89:aa:e2:5a:6b:
94:6e:7d:de:c2:a5:1d:5f:30:12:31:9c:1d:0d:b1:6b:1b:7b:
9a:bf:e5:75:81:59:96:16:e9:68:6f:6e:76:6b:c9:df:39:dd:
bc:ab:2e:74:9b:b2:11:23:21:fc:81:3d:54:08:9e:19:a8:c0:
3a:e4:44:9a:75:e9:6f:4b:9d:b2:5a:d8:50:0a:d1:7e:07:15:
a3:c0:a9:0a:5d:5c:2a:f2:6f:31:65:33:c0:ea:9b:0e:a2:09:
25:1e:7a:fc:bb:28:46:55:a8:58:91:46:71:a6:ad:f0:2f:79:
28:d4:3b:2b:22:f5:b8:36:c0:8f:3a:17:9b:53:fa:26:20:d7:
00:df:e4:23:21:2d:a2:e7:af:89:72:53:ee:97:f4:bd:a4:eb:
42:ef:26:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:50 2025 by rpki-client