Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: 9tlKfHrg5r0SMC09m4BH0UwEvBFjP7rVq1eST68FXZM=
Subject key identifier: 8A:09:A9:97:97:13:6B:3D:DA:04:2E:00:5F:80:52:CA:D2:73:D1:29
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 0197488CF5D96A416FDB4817E88B4519156E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 0870
Signing time: Sat 07 Jun 2025 04:01:26 +0000
Manifest this update: Sat 07 Jun 2025 04:01:26 +0000
Manifest next update: Sun 08 Jun 2025 04:01:26 +0000
Files and hashes: 1: XYOBnWiU8eSr5U3IwBwtwnYLEfo.roa (hash: 6TTZ52iyvKNZkBSm069RV4M98MsIuCFiWdEX+2UCHxo=)
2: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: MNAMZTsvdKgQib8AmS6Jf6xkJTfNXeHl1yZDv16Ey4w=)
3: ywRs-a89Yf3Zz1Mxm7EOZ0IaGgU.roa (hash: KcIGbva9ede7mLUbD84cHz+pICtWNbvc08mVQzdEhMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:f5:d9:6a:41:6f:db:48:17:e8:8b:45:19:15:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Jun 7 04:01:26 2025 GMT
Not After : Jun 8 04:01:26 2025 GMT
Subject: CN=8a09a99797136b3dda042e005f8052cad273d129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:80:c2:2d:43:1b:eb:e2:48:03:4f:e4:bb:
08:af:7c:b6:75:6f:b4:84:2b:5a:15:92:09:05:b4:
92:77:e4:94:3f:88:57:80:4d:17:3e:49:78:85:3e:
37:dd:ad:b7:9d:f7:bd:58:03:1f:dc:09:df:3e:d3:
da:d0:6f:1b:2e:4e:26:2b:31:f0:a0:47:e5:74:7b:
8a:49:18:77:8f:08:fe:a5:eb:0d:d6:bd:77:1e:df:
d7:66:eb:4c:4b:15:46:72:df:f3:e1:a5:39:c4:6f:
e2:ea:3b:e2:fe:56:96:c5:0a:88:89:eb:13:f7:a6:
1e:35:54:9d:88:85:48:7f:78:d0:ab:1f:be:f5:80:
61:c0:1c:43:25:4f:ee:28:54:fe:13:98:3b:48:1d:
75:c5:a4:ec:1a:97:11:2b:a6:71:1f:2a:4a:b3:0a:
7c:3d:f1:21:21:2e:fe:49:04:78:ba:6d:5b:eb:d6:
b3:48:4d:e1:5d:8a:c0:60:d9:43:90:b6:94:f4:62:
91:a7:b3:fe:d6:f5:ad:74:f9:9d:70:99:28:62:df:
05:fd:a7:a0:fa:7e:38:a5:f6:ed:29:13:76:9d:91:
6a:e7:56:23:c3:36:34:a8:00:72:34:8c:8b:22:48:
1f:6e:dd:3c:4f:4c:d7:54:50:0d:db:2f:73:34:ab:
78:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:09:A9:97:97:13:6B:3D:DA:04:2E:00:5F:80:52:CA:D2:73:D1:29
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:39:9b:53:bc:9e:76:1f:d6:55:4e:74:7c:e4:35:5e:a3:05:
4b:f8:d5:b3:bf:66:9a:c3:da:dc:74:74:f2:30:3b:ef:fe:ea:
3e:84:81:54:e1:cf:a8:d5:7f:96:52:b7:99:26:d0:6d:08:86:
1d:c1:64:04:bc:72:f2:3f:c4:b6:0a:ac:3e:45:cd:c6:ac:97:
9a:6a:b0:00:5c:7c:3d:71:38:5f:cc:89:7f:da:6c:73:1b:ac:
dc:0a:ed:8a:74:f3:97:85:09:1a:62:6d:aa:5e:0b:37:c2:7d:
26:1b:d1:8a:b9:93:33:1b:51:94:40:a6:32:5b:5d:0d:f1:41:
eb:9b:e2:58:ce:fb:44:e8:94:f6:32:09:a1:b9:73:e4:98:2f:
bf:78:02:95:17:6c:da:19:55:9e:26:a9:e1:63:53:42:03:bc:
f9:fd:e6:1b:6f:87:86:98:fd:21:7b:d5:34:eb:29:3c:0f:b4:
7c:b2:a4:14:72:89:78:20:f2:58:1e:52:d9:02:6d:59:8e:3e:
51:47:4c:fd:61:5e:47:bc:47:e8:1c:e0:ff:51:ee:c5:97:f5:
23:8d:2c:8e:18:c5:98:e5:5b:1e:ac:5d:ec:88:0f:d8:7d:0f:
6c:61:66:55:de:1e:98:69:2c:bb:50:24:96:cf:ed:04:bc:8e:
81:db:46:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:38:30 2025 by rpki-client