Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
File: zpE13-0LtjNdGd3W1-mfSK--PAE.mft (raw, json)
Hash identifier: j6Yu3P4Fo+QGMQOTFslAzaVlVyIxXU2SueJQg7UfikU=
Subject key identifier: FB:A9:D2:DE:7E:66:44:40:76:F6:8C:5E:D7:1C:BC:54:C2:E7:4E:83
Authority key identifier: CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
Certificate issuer: /CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Certificate serial: 0199228CE58E1D4BA0B6D4E7B47977F16A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
Manifest number: 12D8
Signing time: Sun 07 Sep 2025 05:01:23 +0000
Manifest this update: Sun 07 Sep 2025 05:01:23 +0000
Manifest next update: Mon 08 Sep 2025 05:01:23 +0000
Files and hashes: 1: 3AR-VMpBzAccZOXuS0Wv2igI9_8.roa (hash: 1IjF66OCZHXjj/PGOWfcYm6upWdu1RftdnSFzRH/4xc=)
2: 7f-9IRIqQnjGSRvU0WiDuu7Obc8.roa (hash: OLYbBSTAVUTnC5xo7ur6Zey9nNLImhpgQBUvgb05C6w=)
3: zpE13-0LtjNdGd3W1-mfSK--PAE.crl (hash: /LkOfyBjftmIi/PDCKWPYkD4CmVIcmC2kjbWvHaYAjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:e5:8e:1d:4b:a0:b6:d4:e7:b4:79:77:f1:6a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce9135dfed0bb6335d19ddd6d7e99f48afbe3c01
Validity
Not Before: Sep 7 05:01:23 2025 GMT
Not After : Sep 8 05:01:23 2025 GMT
Subject: CN=fba9d2de7e66444076f68c5ed71cbc54c2e74e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:29:43:99:b5:dd:6d:73:63:f4:97:20:4c:1c:
59:1e:c2:80:4b:4e:66:0c:22:2e:76:e1:bf:a5:3b:
70:e2:66:6e:bc:a3:07:cb:56:fe:7d:7c:57:e6:75:
ca:90:21:7c:02:0b:6d:af:ba:3d:12:f7:bf:df:4f:
a2:f8:17:4a:23:de:b1:e9:bf:67:20:d4:70:d4:7d:
2b:2e:3f:b7:46:7e:13:bc:9a:e9:5e:8f:d5:b5:95:
8f:45:2b:29:b5:08:5c:7d:f2:84:a0:1f:c6:e6:32:
ce:af:59:b4:40:c2:55:41:0f:2e:16:fe:6e:58:f9:
9f:4a:94:34:70:b3:fd:a9:0c:2b:0c:a7:d2:54:c2:
d0:cc:f4:82:6d:89:81:cd:c5:9b:6b:77:c0:5f:15:
c5:bb:2d:4d:14:f2:61:44:3e:e9:f3:d5:ec:75:23:
39:07:04:9d:d4:3d:93:5b:ee:b2:ba:b6:4c:05:48:
6b:5b:af:20:16:db:ad:f9:a9:77:75:be:f2:87:2c:
43:32:03:5e:41:1b:a3:a7:a4:25:eb:3c:a1:2d:21:
bc:f2:dd:d9:40:35:5c:80:36:79:57:e6:f1:3d:30:
5d:cd:f4:7d:9a:05:b1:c6:b2:6a:84:02:70:a7:d2:
65:9c:71:b8:6f:ca:00:3b:c7:e1:6f:e8:d9:b2:89:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A9:D2:DE:7E:66:44:40:76:F6:8C:5E:D7:1C:BC:54:C2:E7:4E:83
X509v3 Authority Key Identifier:
keyid:CE:91:35:DF:ED:0B:B6:33:5D:19:DD:D6:D7:E9:9F:48:AF:BE:3C:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpE13-0LtjNdGd3W1-mfSK--PAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/3c9c3c-d608-4ea2-9a28-c11ec6ea86b8/1/zpE13-0LtjNdGd3W1-mfSK--PAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ae:b2:58:06:dd:e2:f3:78:02:cd:90:59:f3:4c:a7:61:61:
08:c6:a2:5f:a8:13:6a:aa:3e:d2:84:65:1f:38:00:3d:bc:a9:
3e:14:9d:ff:a3:d6:8a:fb:ac:47:78:e5:78:77:01:07:a3:c2:
72:f0:40:db:a1:79:a0:e8:0f:e1:e3:92:81:d3:c3:31:b7:c6:
45:c6:ca:1e:f9:1f:7c:e4:80:82:af:cc:7b:c8:c3:8e:63:7a:
85:91:0d:07:c2:5a:cc:23:5a:05:5c:7a:98:2e:07:52:4b:36:
22:73:bf:c7:5b:63:a1:71:1c:a4:f1:11:a7:7f:c3:84:da:15:
0a:f2:a2:a5:ed:d4:db:de:a3:fc:ab:2f:1a:98:2c:de:46:12:
9d:86:1c:59:21:57:d0:ae:79:85:0d:ce:1c:be:48:af:6f:c4:
2f:86:68:9f:6e:9f:6c:b9:df:46:80:7f:a5:91:a8:75:d4:8d:
93:a4:d3:ba:68:39:a2:07:42:be:0e:5f:18:a5:c6:51:92:e5:
65:a2:53:5d:b2:92:71:b2:63:a5:ca:e3:c1:84:16:6f:3d:47:
6e:26:eb:24:41:88:8c:f2:99:0c:91:82:9d:63:08:d8:40:7d:
02:b2:f9:bc:c6:97:f4:8c:f9:22:e0:a1:a4:c7:46:91:a5:4d:
1d:f8:3c:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijOWOHUugttTntHl38WpsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlOTEzNWRmZWQwYmI2MzM1ZDE5ZGRkNmQ3ZTk5ZjQ4YWZi
ZTNjMDEwHhcNMjUwOTA3MDUwMTIzWhcNMjUwOTA4MDUwMTIzWjAzMTEwLwYDVQQD
EyhmYmE5ZDJkZTdlNjY0NDQwNzZmNjhjNWVkNzFjYmM1NGMyZTc0ZTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsClDmbXdbXNj9JcgTBxZHsKAS05m
DCIuduG/pTtw4mZuvKMHy1b+fXxX5nXKkCF8Agttr7o9Eve/30+i+BdKI96x6b9n
INRw1H0rLj+3Rn4TvJrpXo/VtZWPRSsptQhcffKEoB/G5jLOr1m0QMJVQQ8uFv5u
WPmfSpQ0cLP9qQwrDKfSVMLQzPSCbYmBzcWba3fAXxXFuy1NFPJhRD7p89XsdSM5
BwSd1D2TW+6yurZMBUhrW68gFtut+al3db7yhyxDMgNeQRujp6Ql6zyhLSG88t3Z
QDVcgDZ5V+bxPTBdzfR9mgWxxrJqhAJwp9JlnHG4b8oAO8fhb+jZson4GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPup0t5+ZkRAdvaMXtccvFTC506DMB8GA1UdIwQY
MBaAFM6RNd/tC7YzXRnd1tfpn0ivvjwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8zYzljM2MtZDYwOC00ZWEyLTlhMjgt
YzExZWM2ZWE4NmI4LzEvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8zYzljM2MtZDYwOC00ZWEyLTlhMjgtYzExZWM2ZWE4NmI4
LzEvenBFMTMtMEx0ak5kR2QzVzEtbWZTSy0tUEFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjq6yWAbd
4vN4As2QWfNMp2FhCMaiX6gTaqo+0oRlHzgAPbypPhSd/6PWivusR3jleHcBB6PC
cvBA26F5oOgP4eOSgdPDMbfGRcbKHvkffOSAgq/Me8jDjmN6hZENB8JazCNaBVx6
mC4HUks2InO/x1tjoXEcpPERp3/DhNoVCvKipe3U296j/KsvGpgs3kYSnYYcWSFX
0K55hQ3OHL5Ir2/EL4Zon26fbLnfRoB/pZGoddSNk6TTumg5ogdCvg5fGKXGUZLl
ZaJTXbKScbJjpcrjwYQWbz1HbibrJEGIjPKZDJGCnWMI2EB9ArL5vMaX9Iz5IuCh
pMdGkaVNHfg8cg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:32 2025 by rpki-client