
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: k9gorMbndvlO82O/6jjF9XdtEpDvB2LzGYq7OtWlp+o=
Subject key identifier: 5C:44:BD:0C:81:81:7E:28:2D:36:4A:21:46:EE:83:DB:0E:2D:B1:77
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 0199FBEBF65BBD73630DEBA91428100B6E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 09D6
Signing time: Sun 19 Oct 2025 10:02:49 +0000
Manifest this update: Sun 19 Oct 2025 10:02:49 +0000
Manifest next update: Mon 20 Oct 2025 10:02:49 +0000
Files and hashes: 1: XYOBnWiU8eSr5U3IwBwtwnYLEfo.roa (hash: 6TTZ52iyvKNZkBSm069RV4M98MsIuCFiWdEX+2UCHxo=)
2: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: nZO4k0Hb2muVKX43gAEH2s4S+9VZ3RLdctLiM4Vg0pE=)
3: ywRs-a89Yf3Zz1Mxm7EOZ0IaGgU.roa (hash: KcIGbva9ede7mLUbD84cHz+pICtWNbvc08mVQzdEhMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f6:5b:bd:73:63:0d:eb:a9:14:28:10:0b:6e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Oct 19 10:02:49 2025 GMT
Not After : Oct 20 10:02:49 2025 GMT
Subject: CN=5c44bd0c81817e282d364a2146ee83db0e2db177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:9b:fb:f9:a8:b9:58:89:5f:1d:68:66:6c:
71:cb:70:33:ab:15:c8:b2:4e:cb:16:92:91:ab:42:
06:3b:df:44:55:92:3c:1f:fd:87:c6:61:96:14:c2:
9d:a4:87:c0:3f:9d:01:bb:f5:2f:60:f3:09:df:6d:
ac:b8:b5:7c:ef:ff:22:77:8a:91:ab:81:01:14:8f:
94:ce:53:97:ed:16:a0:83:c3:30:12:a2:a1:6b:f0:
18:f7:26:f9:58:c5:2e:1e:98:7a:b5:4e:c2:9d:41:
2c:e8:4a:dd:b6:2f:11:3a:32:b1:57:3f:1d:ef:31:
9c:cc:e2:5e:b4:2b:2d:61:15:a7:8f:ec:f2:ff:62:
97:f9:a6:4b:4b:37:dc:27:16:b4:a4:bc:07:47:01:
4e:ff:be:13:f8:4e:c6:5b:11:74:8a:54:86:59:40:
15:10:49:82:ba:fb:74:43:bf:f2:e9:47:a3:43:f9:
d2:a3:37:f1:ae:e8:64:8c:e3:11:43:a4:60:97:1a:
65:5d:47:95:27:a4:33:8b:96:cf:1c:be:84:9a:a4:
86:3d:a8:92:2c:d2:ab:2b:10:9e:35:f9:86:a7:ad:
a6:6e:f0:cf:44:fa:48:a2:03:e5:82:6f:c9:33:a6:
ee:7a:e0:0d:05:ad:5c:c2:b2:3e:eb:85:60:8c:30:
e3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:44:BD:0C:81:81:7E:28:2D:36:4A:21:46:EE:83:DB:0E:2D:B1:77
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:99:53:71:cc:0f:22:c7:1c:cf:7e:84:04:c1:aa:cf:30:ea:
d8:a7:56:1d:05:c5:42:a7:a4:43:f8:bc:81:70:4d:eb:0e:ce:
f1:97:9c:e4:9e:cc:06:9b:dd:26:cf:22:7e:9b:4c:90:63:63:
d3:c1:0e:64:76:20:af:3e:61:a1:1d:11:15:a7:a0:b1:ff:44:
4b:11:d1:c2:8a:f9:03:95:2d:ef:f7:b0:34:ca:45:07:e8:db:
b4:3f:4d:09:3d:21:b3:59:26:d1:d3:d2:31:88:cd:c4:54:b2:
75:bf:58:b3:a6:fc:a3:40:f9:89:8c:36:52:bd:c8:dd:f7:a3:
49:ea:c5:09:72:8f:4d:76:ba:3a:c2:00:31:f5:02:dc:3f:1c:
87:e8:e7:ce:5a:8a:67:7d:55:84:fe:62:7f:f0:b6:2a:b4:29:
12:56:de:fc:6b:99:72:d3:7c:69:9f:bc:fc:9b:6c:b9:91:35:
94:08:12:e1:27:7e:7c:d3:57:d1:0e:2f:91:ef:f3:86:8d:30:
d0:da:5a:fa:4d:f9:41:22:3c:10:43:74:23:a7:7f:c9:24:00:
7b:a7:76:a2:d7:ff:ae:f2:de:84:4a:c1:cd:67:cf:a7:52:d3:
af:2e:4e:19:0e:0d:64:7a:24:b2:64:b7:20:4e:91:4c:40:0c:
8d:05:20:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:17 2025 by rpki-client