Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
File: zpE13-0LtjNdGd3W1-mfSK--PAE.mft (raw, json)
Hash identifier: Mezz/M6sKtLhmCMIv22bFKxk8HAGuQgXdPczeItimTc=
Subject key identifier: 28:BB:E9:A6:41:97:49:8B:5A:B1:BA:6C:3B:DC:18:38:19:13:22:53
Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Certificate serial: 019A7293FC16E4B672E8892BCBA0E1EF5492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
Manifest number: 1386
Signing time: Tue 11 Nov 2025 11:01:32 +0000
Manifest this update: Tue 11 Nov 2025 11:01:32 +0000
Manifest next update: Wed 12 Nov 2025 11:01:32 +0000
Files and hashes: 1: 3AR-VMpBzAccZOXuS0Wv2igI9_8.roa (hash: 1IjF66OCZHXjj/PGOWfcYm6upWdu1RftdnSFzRH/4xc=)
2: 7f-9IRIqQnjGSRvU0WiDuu7Obc8.roa (hash: OLYbBSTAVUTnC5xo7ur6Zey9nNLImhpgQBUvgb05C6w=)
3: zpE13-0LtjNdGd3W1-mfSK--PAE.crl (hash: 79j1ygwTPiFQYxOyek/k4PCA4pjNBUXeONb6k/r7pL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:fc:16:e4:b6:72:e8:89:2b:cb:a0:e1:ef:54:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Validity
Not Before: Nov 11 11:01:32 2025 GMT
Not After : Nov 12 11:01:32 2025 GMT
Subject: CN=28bbe9a64197498b5ab1ba6c3bdc183819132253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:35:db:d1:bc:6a:f4:ec:69:a5:33:c6:ac:
6a:60:da:59:25:26:4c:25:30:51:f2:07:94:3e:8b:
88:07:52:56:2a:10:ee:d8:c2:c2:18:44:13:48:1c:
e9:be:e7:6d:b0:59:53:7e:38:09:ea:6a:e0:bf:4b:
d3:3d:e3:4a:57:d0:1b:1c:15:18:cc:1f:1b:92:11:
52:32:c9:c5:5a:e7:30:3d:81:b3:46:d6:ef:3d:92:
10:a0:a2:2e:b7:89:55:c6:73:f9:9f:9d:56:f5:3d:
63:2d:f2:c4:25:04:c7:18:e5:54:19:eb:e4:60:73:
20:8e:e0:bd:a1:01:2b:f8:24:e0:b7:30:01:de:76:
1f:f9:e0:c6:bb:1a:3d:98:49:38:d0:13:e7:2c:2d:
c9:de:a4:e5:72:4b:6e:72:57:28:c7:d5:d0:f0:37:
86:c4:30:5d:78:db:84:ea:0c:f2:4b:e9:67:ba:3e:
c1:70:c2:98:b4:68:cf:40:4a:55:eb:3c:85:86:d8:
1a:3d:d4:cd:84:8b:f7:af:d4:26:a1:25:ce:46:21:
5a:e1:b2:a7:e0:05:c7:b1:71:f3:f9:b4:9f:c5:ce:
0e:76:f0:16:91:c8:03:13:f0:59:d2:c1:eb:37:b3:
08:7d:88:c4:35:98:19:73:c1:2b:01:cb:15:76:fa:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BB:E9:A6:41:97:49:8B:5A:B1:BA:6C:3B:DC:18:38:19:13:22:53
X509v3 Authority Key Identifier:
keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:23:e6:f3:c3:aa:9a:1e:fe:30:53:62:6b:10:84:7e:7e:fa:
c7:1b:3e:3c:66:9f:01:33:64:df:e9:c4:f7:2f:78:01:91:b3:
bf:70:01:49:3a:de:de:41:20:e9:2d:11:06:3a:1d:fa:d0:4c:
1d:df:51:66:9b:f3:7d:1e:f2:5c:0f:f3:c5:d9:94:d1:3f:a3:
b2:2a:7d:e7:b1:bc:47:42:a6:7f:72:12:4e:12:0a:4a:76:33:
5c:f4:89:c6:d0:47:54:56:16:7a:06:2a:e2:a7:11:63:bc:a6:
19:c6:7c:0a:37:b8:6b:1b:b6:23:5e:14:94:a1:9b:74:f9:b0:
7a:65:bc:4f:36:66:20:46:2a:33:71:cf:8f:9b:d9:9c:6a:cf:
53:78:1d:46:c4:5b:da:1d:0d:74:5d:c1:98:b2:8f:1f:f0:00:
18:47:05:4f:f1:7a:0d:50:d0:77:be:40:28:b2:28:97:5c:e9:
b6:b9:40:d9:73:4a:8c:70:ee:18:38:d3:8f:8a:9b:3a:b7:0f:
bc:a3:66:a6:9a:d3:62:8a:3c:f5:71:73:d6:e6:af:90:b4:42:
9e:00:ad:af:3f:7f:b5:cc:5d:d4:f2:8f:78:c3:5a:d3:65:62:
da:db:53:bd:7a:2b:86:53:f1:2d:93:27:db:05:0d:15:ff:bb:
0b:7b:d2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:55:13 2025 by rpki-client