Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
File: zPae-KVIMMWntjeJH8PJCrEsung.mft (raw, json)
Hash identifier: bVlW/i+fTqg6P8uBlV0G+aGZNk26fAQtmjWX6J5aM0c=
Subject key identifier: 0E:FC:61:01:F4:F0:3A:F6:0E:11:B1:DB:C4:E5:83:29:5D:9E:C0:11
Authority key identifier: CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
Certificate issuer: /CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Certificate serial: 019A22F7BFF45D680A90D0C41D9615D66A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
Manifest number: 0124
Signing time: Mon 27 Oct 2025 00:00:53 +0000
Manifest this update: Mon 27 Oct 2025 00:00:53 +0000
Manifest next update: Tue 28 Oct 2025 00:00:53 +0000
Files and hashes: 1: TCYwxyjyD1g2jKWdC_sz91XC0QI.roa (hash: 0MLzUPLd2BzGhf3bCW09crL9cUV2m9lOgzQdaDbCtoQ=)
2: VjBVb7qAWY4H2MSTTk3mE7tLdAI.roa (hash: rsEp+YspuHuBffI28dbqNM5X9+3GHXkR3gxoffTTdrs=)
3: zPae-KVIMMWntjeJH8PJCrEsung.crl (hash: C25mdttscZOn/7FSJ9Gw0FNS6rOw8jHrjXh+jMczXgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:bf:f4:5d:68:0a:90:d0:c4:1d:96:15:d6:6a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccf69ef8a54830c5a7b637891fc3c90ab12cba78
Validity
Not Before: Oct 27 00:00:53 2025 GMT
Not After : Oct 28 00:00:53 2025 GMT
Subject: CN=0efc6101f4f03af60e11b1dbc4e583295d9ec011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b5:54:f7:94:28:95:df:43:87:a3:19:b6:ff:
f5:bb:b8:41:c6:67:bf:68:48:88:b2:07:93:11:ab:
51:0b:41:ca:df:d8:0e:8c:f8:5f:87:20:44:79:4f:
8b:69:a0:7f:e6:58:d5:ed:1b:11:4f:35:54:78:be:
1c:8f:e2:c5:7a:5e:c7:74:b3:9b:9e:13:de:22:57:
a3:fc:e4:1a:9c:54:b0:29:03:77:c0:03:cd:f0:b5:
f4:ef:11:b1:85:cb:cb:12:b9:7d:de:af:a9:65:ef:
a1:66:93:22:84:fb:e1:0b:d8:f8:a3:3d:73:6b:b6:
be:c0:99:cc:a0:82:36:f1:c9:d1:97:39:d5:7c:4a:
55:6c:3c:85:c0:97:b3:92:2f:71:c1:7b:b1:61:01:
33:e5:a4:73:6a:d2:34:1c:f6:16:40:eb:6b:77:c7:
12:70:73:c8:06:8d:97:0e:25:ed:37:48:cc:27:d0:
8e:6c:6e:a6:37:75:95:f3:ea:d0:e3:b9:09:65:a4:
d1:cf:ac:6d:01:a0:e3:55:31:33:40:10:b2:87:b2:
39:a8:73:ca:70:99:64:37:6e:3a:48:e1:f1:58:72:
46:73:fd:47:29:00:08:96:e6:44:22:24:43:6b:29:
ea:53:39:0c:71:d0:e2:70:34:27:02:73:cf:db:fc:
a0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FC:61:01:F4:F0:3A:F6:0E:11:B1:DB:C4:E5:83:29:5D:9E:C0:11
X509v3 Authority Key Identifier:
keyid:CC:F6:9E:F8:A5:48:30:C5:A7:B6:37:89:1F:C3:C9:0A:B1:2C:BA:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zPae-KVIMMWntjeJH8PJCrEsung.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/208623-268c-4bf6-b947-f459235d987b/1/zPae-KVIMMWntjeJH8PJCrEsung.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:8a:b1:8c:30:37:9c:63:a1:97:b1:eb:95:18:32:82:08:04:
90:62:f8:09:b9:f7:bc:fe:9d:42:a7:ca:46:a6:bb:63:f9:fc:
94:69:c1:6f:e5:15:a5:92:0f:ce:a0:57:84:81:d6:22:2e:62:
e9:a6:16:bc:07:10:cc:91:25:cb:b9:7a:cc:53:da:8b:b2:59:
e4:24:65:68:31:22:05:c8:ce:5b:91:e1:b2:6d:48:2e:9e:87:
55:a6:f7:01:4a:3a:24:da:87:4d:da:76:8d:c7:98:e5:bd:0c:
76:36:ef:c8:78:81:dc:42:94:be:71:48:4e:d0:c5:e0:8b:4a:
0e:36:67:db:cb:99:d1:88:df:c9:c9:c5:bb:7b:ce:4a:81:6a:
bd:36:57:d4:4f:6b:96:c1:90:65:e6:10:d7:bd:1b:44:6b:48:
48:f6:d6:4b:ac:90:7c:2c:cc:e7:1f:e0:7e:f3:03:21:22:35:
bc:36:d9:35:19:c1:a3:73:9d:c0:d4:ad:83:fe:65:43:f8:e4:
8a:da:26:7f:e6:49:69:11:41:74:3e:6b:87:25:3e:18:3b:36:
f3:dc:2d:58:82:5d:e9:2c:90:03:a2:a7:c1:e3:77:09:34:9f:
49:72:e0:24:ae:61:4b:96:3b:b1:37:b2:90:c4:df:5d:89:8a:
12:a3:8c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:12:16 2025 by rpki-client