Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: n85ClS8R1Ev3W66BUkTZ+IUYk/IpCk8/BF06U/goVQ4=
Subject key identifier: 8B:B0:B6:FB:4E:94:82:DE:99:57:E4:CE:1A:E7:FD:18:8C:24:00:84
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 01984966CACF6B17F7F8EF96AC517B394F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 08F5
Signing time: Sun 27 Jul 2025 01:02:09 +0000
Manifest this update: Sun 27 Jul 2025 01:02:09 +0000
Manifest next update: Mon 28 Jul 2025 01:02:09 +0000
Files and hashes: 1: XYOBnWiU8eSr5U3IwBwtwnYLEfo.roa (hash: 6TTZ52iyvKNZkBSm069RV4M98MsIuCFiWdEX+2UCHxo=)
2: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: B3dsnkhNCNlMGAgOKzK+HHfz1OZjxqfKpXMFqhrbztA=)
3: ywRs-a89Yf3Zz1Mxm7EOZ0IaGgU.roa (hash: KcIGbva9ede7mLUbD84cHz+pICtWNbvc08mVQzdEhMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:ca:cf:6b:17:f7:f8:ef:96:ac:51:7b:39:4f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Jul 27 01:02:09 2025 GMT
Not After : Jul 28 01:02:09 2025 GMT
Subject: CN=8bb0b6fb4e9482de9957e4ce1ae7fd188c240084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:af:04:92:f0:9c:8b:d6:ce:43:36:cf:04:f8:
c5:6c:4b:5c:d3:ce:01:bf:91:f6:ad:50:34:75:86:
d8:fe:dc:5b:26:02:4e:19:00:36:09:8c:f4:1c:a2:
38:f5:7b:16:83:07:ca:dd:ac:19:b5:5f:1f:b5:a6:
b0:13:bc:4c:29:67:70:6c:ad:1e:d1:47:55:42:0d:
af:f3:1e:3e:2f:a6:00:55:eb:71:94:16:4c:78:49:
39:35:06:9b:c9:ae:aa:9a:1e:83:75:63:ad:b9:a0:
3f:49:56:39:4b:12:5d:f2:8e:6b:12:3d:2b:97:9b:
aa:38:38:86:0a:9a:61:3e:ca:a5:49:95:92:7e:b5:
6c:d1:6a:1d:25:13:01:46:b9:31:7f:7d:be:08:39:
70:f6:90:d0:e2:74:ef:6e:e6:2a:c9:a9:51:cb:6e:
6a:b3:92:f8:ca:3a:0e:ec:d1:1f:11:e5:93:cf:5c:
ac:14:39:17:a0:b0:12:86:98:2d:6f:ad:10:2f:f4:
a2:3b:d7:56:f0:74:e3:71:64:08:b3:5f:08:d9:be:
6a:39:15:95:67:14:be:c0:8a:de:c1:66:43:57:aa:
b2:30:4c:55:7c:94:f1:44:2d:13:66:a0:b8:31:ca:
a5:fc:1e:44:fd:1d:f4:f3:77:8c:29:e9:79:43:81:
10:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B0:B6:FB:4E:94:82:DE:99:57:E4:CE:1A:E7:FD:18:8C:24:00:84
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f3:ca:e1:51:ae:a3:d7:6f:79:23:25:06:4d:9f:db:91:6f:
53:10:cf:7a:ce:69:dd:db:d1:10:92:2c:cf:19:be:84:db:2c:
29:07:89:33:c0:8d:42:15:b8:06:e9:64:db:f7:77:58:a0:78:
52:0b:a1:c5:6b:45:a6:2e:32:96:54:5c:ec:fe:68:58:23:b2:
3a:2d:f2:15:c8:17:8a:8a:ed:d3:26:3f:3c:06:7d:8a:bf:51:
d1:86:43:c5:ef:06:44:a8:f9:42:67:a3:34:f7:cd:f0:69:08:
0d:94:49:7b:36:99:94:68:86:f0:5b:eb:6a:be:11:dc:be:c1:
6b:74:ee:56:ec:79:cb:bb:ed:3c:2c:28:85:42:e3:87:29:bf:
db:d0:29:65:9c:ff:0c:54:f7:52:79:2a:e1:a4:4c:e2:12:8f:
50:f3:c3:67:e3:ab:f9:ce:60:15:c5:53:2a:9f:0c:c3:77:dd:
58:95:64:34:dc:18:59:d2:c0:24:ee:18:19:0a:46:63:49:b3:
27:f1:7b:e6:00:1c:7e:24:90:34:ab:48:b9:8e:1b:c0:4b:9a:
03:49:34:92:39:88:95:ea:2a:09:11:67:7a:6e:36:07:64:dc:
6b:53:02:22:71:94:b8:b9:7e:cd:84:02:23:57:1f:18:7b:0d:
87:64:27:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZsrPaxf3+O+WrFF7OU9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZTIyNmJjZjRhODMwYjJmNDQ4ZmQ2ZWE5OTc2YjE1MjA4
N2RkNDUwHhcNMjUwNzI3MDEwMjA5WhcNMjUwNzI4MDEwMjA5WjAzMTEwLwYDVQQD
Eyg4YmIwYjZmYjRlOTQ4MmRlOTk1N2U0Y2UxYWU3ZmQxODhjMjQwMDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA268EkvCci9bOQzbPBPjFbEtc084B
v5H2rVA0dYbY/txbJgJOGQA2CYz0HKI49XsWgwfK3awZtV8ftaawE7xMKWdwbK0e
0UdVQg2v8x4+L6YAVetxlBZMeEk5NQabya6qmh6DdWOtuaA/SVY5SxJd8o5rEj0r
l5uqODiGCpphPsqlSZWSfrVs0WodJRMBRrkxf32+CDlw9pDQ4nTvbuYqyalRy25q
s5L4yjoO7NEfEeWTz1ysFDkXoLAShpgtb60QL/SiO9dW8HTjcWQIs18I2b5qORWV
ZxS+wIrewWZDV6qyMExVfJTxRC0TZqC4Mcql/B5E/R3083eMKel5Q4EQnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuwtvtOlILemVfkzhrn/RiMJACEMB8GA1UdIwQY
MBaAFGXiJrz0qDCy9Ej9bqmXaxUgh91FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUt
MzhjOGRhZmIzZTRmLzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUtMzhjOGRhZmIzZTRm
LzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovPK4VGu
o9dveSMlBk2f25FvUxDPes5p3dvREJIszxm+hNssKQeJM8CNQhW4Bulk2/d3WKB4
UguhxWtFpi4yllRc7P5oWCOyOi3yFcgXiort0yY/PAZ9ir9R0YZDxe8GRKj5Qmej
NPfN8GkIDZRJezaZlGiG8Fvrar4R3L7Ba3TuVux5y7vtPCwohULjhym/29ApZZz/
DFT3Unkq4aRM4hKPUPPDZ+Or+c5gFcVTKp8Mw3fdWJVkNNwYWdLAJO4YGQpGY0mz
J/F75gAcfiSQNKtIuY4bwEuaA0k0kjmIleoqCRFnem42B2Tca1MCInGUuLl+zYQC
I1cfGHsNh2QnLg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:57:31 2025 by rpki-client