Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: 12V5idNyxVF0bDNbkWu/byj4Uw7txlr5R8AQRpG5MH8=
Subject key identifier: 3B:02:20:B9:9D:34:CF:90:3A:E2:C2:2D:D8:D7:6E:91:D3:58:B8:95
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 0197B6A13AE6E88E671899E052955788D5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 08A9
Signing time: Sat 28 Jun 2025 13:01:49 +0000
Manifest this update: Sat 28 Jun 2025 13:01:49 +0000
Manifest next update: Sun 29 Jun 2025 13:01:49 +0000
Files and hashes: 1: XYOBnWiU8eSr5U3IwBwtwnYLEfo.roa (hash: 6TTZ52iyvKNZkBSm069RV4M98MsIuCFiWdEX+2UCHxo=)
2: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: J4VWvA057oBg0nbLEclhmLqqdpn3CY8oFn+Y7i+9RGI=)
3: ywRs-a89Yf3Zz1Mxm7EOZ0IaGgU.roa (hash: KcIGbva9ede7mLUbD84cHz+pICtWNbvc08mVQzdEhMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:3a:e6:e8:8e:67:18:99:e0:52:95:57:88:d5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Jun 28 13:01:49 2025 GMT
Not After : Jun 29 13:01:49 2025 GMT
Subject: CN=3b0220b99d34cf903ae2c22dd8d76e91d358b895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:86:1e:a3:21:d7:74:5f:51:36:de:6a:01:81:
d2:d5:69:15:6d:1b:df:8f:ee:f2:4a:9b:78:a4:63:
cd:57:1d:21:2e:c2:bb:d4:b5:4e:e6:0b:13:72:4b:
53:60:0e:79:65:13:8d:4a:e0:80:a8:e7:f3:60:e3:
6d:5b:ba:53:d6:cc:b9:34:0b:55:10:d4:a5:8d:93:
f3:04:e9:45:dd:9e:f7:ba:55:7f:9b:ae:9c:7a:9b:
b0:04:fa:f9:f9:fc:1e:4b:bc:26:52:ee:af:87:96:
a0:b0:ea:c0:ff:f5:b3:96:cd:f2:7c:df:91:1d:b0:
a0:27:7d:e3:d6:89:50:fc:82:01:fd:15:0c:ea:30:
1c:60:28:76:5f:d9:c4:f7:da:cc:56:39:54:4b:d6:
75:1a:8b:27:71:3f:a5:a8:76:d5:65:76:c3:aa:a9:
ba:da:d6:6e:56:48:b1:6a:74:48:ff:13:1e:bb:36:
f7:32:9f:e2:62:bd:5b:cf:78:fd:c7:46:ca:bd:03:
5d:47:a9:a4:44:98:d2:9e:1b:9d:f6:53:06:c9:f7:
5f:a3:28:2b:23:56:ea:49:58:cd:6c:ec:81:88:09:
1c:a8:d8:ee:4c:5c:be:5d:6c:ff:f2:d8:15:47:ea:
83:d8:d9:b9:dc:aa:3a:40:b0:74:8b:cd:fb:80:59:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:02:20:B9:9D:34:CF:90:3A:E2:C2:2D:D8:D7:6E:91:D3:58:B8:95
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:fc:51:c6:e2:55:3c:00:eb:99:6c:ce:61:dc:18:02:78:a0:
3f:7c:28:cc:05:02:4b:d6:c5:3a:dd:54:3b:83:3d:09:6d:0a:
82:6f:50:4e:22:ce:b0:8e:53:5f:83:c6:a2:3a:c1:9b:45:a3:
ca:28:0b:e0:86:79:5b:b5:3c:23:66:4f:00:12:7a:50:02:7a:
f4:df:88:d5:0a:1b:d6:21:38:ec:ec:f4:35:37:2f:04:8e:8e:
58:c4:7c:43:02:17:4c:c1:85:a7:49:3c:55:f0:67:f7:66:e5:
47:7e:e7:32:78:1f:91:29:40:66:66:3e:bc:16:e9:ff:35:57:
ea:f2:8a:a1:84:c1:1c:2e:e7:95:f5:a0:ac:a4:ab:a3:f6:cf:
bb:a6:c8:49:2c:2b:85:57:b3:64:46:06:88:2c:41:ea:6b:7d:
40:85:17:00:9e:eb:1d:75:11:7d:68:d4:87:8a:36:50:bf:65:
7e:6c:d1:38:b7:f2:c9:53:a9:ab:7d:00:04:86:3c:46:ad:2a:
de:af:18:db:16:e8:3e:91:87:f2:bd:dc:8f:07:93:24:26:ab:
98:48:71:35:c1:7b:e0:0e:51:b1:a0:b3:81:70:97:19:8a:38:
67:3f:34:05:d3:32:49:00:03:40:fe:20:00:49:ac:35:e4:dd:
32:22:11:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:21 2025 by rpki-client