Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: TkDyzBEQk2I1ve4s7JgkXM0NQADwcAQdUYu3QwD+ytU=
Subject key identifier: 87:09:10:D7:82:3E:D9:8E:B1:C3:A9:33:1A:70:EF:0E:2E:32:91:F0
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 0198D65FCDB6E6ED8A7CD01E3C96F081E343
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 093E
Signing time: Sat 23 Aug 2025 10:00:59 +0000
Manifest this update: Sat 23 Aug 2025 10:00:59 +0000
Manifest next update: Sun 24 Aug 2025 10:00:59 +0000
Files and hashes: 1: XYOBnWiU8eSr5U3IwBwtwnYLEfo.roa (hash: 6TTZ52iyvKNZkBSm069RV4M98MsIuCFiWdEX+2UCHxo=)
2: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: cl5rCPMLb21lRKfec+hFmRLq0ZfK/VEv1TAfwCQ3cNE=)
3: ywRs-a89Yf3Zz1Mxm7EOZ0IaGgU.roa (hash: KcIGbva9ede7mLUbD84cHz+pICtWNbvc08mVQzdEhMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:cd:b6:e6:ed:8a:7c:d0:1e:3c:96:f0:81:e3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Aug 23 10:00:59 2025 GMT
Not After : Aug 24 10:00:59 2025 GMT
Subject: CN=870910d7823ed98eb1c3a9331a70ef0e2e3291f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2e:b5:7a:f7:c7:24:f2:79:64:d4:6b:c5:b8:
c4:b6:e1:4c:38:b6:12:96:77:91:02:1f:d6:fb:ca:
62:c0:e6:26:26:d4:19:91:fc:34:88:73:94:20:4d:
a2:63:c1:9d:e6:af:8c:7e:1b:75:2c:d8:96:97:3e:
2c:0b:03:b1:8a:3c:71:a9:a4:39:64:8a:d0:bf:17:
5d:62:0b:b3:ef:6f:75:64:dc:a4:0e:99:8b:f2:c0:
8d:77:e2:ff:ad:f8:24:3c:8e:98:74:2e:a9:e9:db:
94:23:cd:7d:37:6d:3e:3e:f6:74:6d:e6:f5:63:f5:
ce:ad:73:e3:07:50:0e:1e:df:77:64:66:d1:ab:c4:
cd:6c:e1:43:79:06:71:f7:bf:88:44:b0:f7:fe:2d:
53:5a:c2:13:83:7d:26:af:bd:d3:ec:2e:be:15:fa:
35:56:bc:8b:a4:9e:fc:e7:19:97:88:3d:16:a3:1e:
a1:af:4a:7a:a8:75:55:fb:db:20:e5:8a:bb:35:31:
cd:a5:9a:ae:2f:ce:20:da:5b:3e:09:e3:61:91:58:
57:cb:29:14:d9:f1:b1:ef:7e:30:3a:bc:a1:49:c8:
5b:5e:cc:37:d4:ac:c3:0e:de:f4:20:c2:84:37:56:
26:23:38:79:8c:5f:8c:9e:d3:12:30:18:37:f1:44:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:09:10:D7:82:3E:D9:8E:B1:C3:A9:33:1A:70:EF:0E:2E:32:91:F0
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:39:ce:c9:91:a1:0a:e0:ad:90:90:5d:92:b2:27:0e:50:8f:
ab:b8:19:04:54:f6:9b:f2:62:25:05:82:8a:67:6c:7d:42:8d:
f3:cf:f0:3b:6b:4a:6e:03:e7:1b:03:3a:ed:e4:22:3f:41:10:
f0:64:32:11:e8:a4:a7:83:fa:83:8d:f5:df:cb:13:24:fc:91:
33:ab:bc:fc:3f:d8:c2:a1:76:37:c1:aa:c9:4b:a2:cb:56:a4:
4e:f9:a1:5d:c7:4d:bd:7f:e1:53:40:e4:e8:c6:db:28:0a:ee:
7b:e1:91:e6:3b:f3:5e:97:8a:68:c7:cf:7b:a7:a1:75:bc:ea:
d5:7d:32:46:b4:1a:50:4c:96:9e:25:14:b5:76:c9:0d:83:66:
52:48:9b:fc:52:ba:fb:2c:1a:db:cf:45:1b:27:9f:57:2e:33:
07:f4:0c:9d:34:91:53:02:f1:4b:cc:de:67:57:4b:1a:b7:ea:
74:04:ee:c7:d7:87:94:18:10:25:d7:7a:e9:df:98:ad:c3:da:
ee:b1:ea:4d:33:1b:f7:d3:33:92:e8:dc:b4:b4:31:f1:4d:c2:
91:88:55:aa:36:58:59:82:bf:e8:9a:79:80:bc:19:94:91:cf:
d3:00:8b:6e:b1:de:3a:d0:c8:38:64:69:b3:7a:88:69:7b:ad:
70:99:fd:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:24 2025 by rpki-client