Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: CqlkiSFIEzVeDhd9STCv6NbM9i2BKj8J64VPbCWWw10=
Subject key identifier: 51:69:11:0C:A9:4A:18:44:7B:80:AA:21:6C:20:CA:30:9C:88:0E:C0
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 019A0B5D5AFCF646D3C69CFB77F89709E084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 09DE
Signing time: Wed 22 Oct 2025 10:00:58 +0000
Manifest this update: Wed 22 Oct 2025 10:00:58 +0000
Manifest next update: Thu 23 Oct 2025 10:00:58 +0000
Files and hashes: 1: XYOBnWiU8eSr5U3IwBwtwnYLEfo.roa (hash: 6TTZ52iyvKNZkBSm069RV4M98MsIuCFiWdEX+2UCHxo=)
2: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: 0zXLjhtnBmaMfE52NmgniIjw6Bh3d/s/Z48TJdae4Do=)
3: ywRs-a89Yf3Zz1Mxm7EOZ0IaGgU.roa (hash: KcIGbva9ede7mLUbD84cHz+pICtWNbvc08mVQzdEhMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:5d:5a:fc:f6:46:d3:c6:9c:fb:77:f8:97:09:e0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Oct 22 10:00:58 2025 GMT
Not After : Oct 23 10:00:58 2025 GMT
Subject: CN=5169110ca94a18447b80aa216c20ca309c880ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:03:af:33:5b:1d:0f:1c:97:00:e8:20:a2:
c3:8a:81:02:b2:75:89:e1:62:f0:ff:f8:e2:75:1c:
f8:ad:cc:34:37:d5:ef:eb:3b:05:23:2d:ef:cf:b6:
95:5a:05:95:4d:3a:99:bd:e7:99:da:a3:f3:f6:e6:
33:e5:33:17:e3:ff:2f:73:04:70:41:27:8f:ee:75:
8b:fd:02:12:02:9d:3c:87:28:29:6b:4a:76:cd:1b:
02:33:f6:66:f6:65:ba:53:41:d8:2f:3a:5b:a9:ff:
fe:e5:6b:48:25:ae:c3:15:3d:21:2a:17:3a:48:ad:
2a:d7:f4:7d:5b:2e:85:99:91:37:42:cd:36:7a:99:
eb:90:c3:6e:44:dc:06:aa:95:ef:66:c9:f8:90:52:
02:89:b9:8d:1a:ff:e3:6e:1f:a8:08:e6:d5:8d:69:
19:75:67:75:b3:23:49:64:5a:1e:8d:80:c3:bf:a7:
ef:fd:09:14:11:fd:39:84:45:b6:37:9f:ce:cf:7a:
5a:38:03:39:3d:9c:f5:14:5a:6a:58:88:9c:62:0b:
a4:c5:be:9d:ce:6a:ce:5b:1a:52:7e:a3:98:87:58:
64:a4:98:d2:4f:d5:92:99:42:c3:b7:d2:62:3d:d7:
bd:1c:7e:dd:27:b9:3c:09:f8:59:07:f1:6a:85:16:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:69:11:0C:A9:4A:18:44:7B:80:AA:21:6C:20:CA:30:9C:88:0E:C0
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0f:f9:95:d2:f0:fb:2a:1d:5e:c3:9b:a0:bf:de:50:d0:04:
3f:3d:eb:51:9d:6d:76:0d:18:fa:f6:13:53:b3:fa:a1:48:fe:
fe:67:c0:93:eb:c4:56:84:f8:0f:f1:99:b8:32:91:19:6b:cb:
52:11:70:80:bf:7b:a4:47:8c:8f:b9:c7:74:1e:fe:8f:ad:cd:
db:2b:bb:7a:e0:e6:80:65:d1:75:7d:69:1b:87:4a:af:c5:fb:
6b:79:dc:d7:3e:16:14:aa:30:fd:ad:e5:74:a3:cc:3e:a3:3a:
6b:77:61:c1:72:c4:74:16:cb:72:f2:b8:d9:d2:ad:8c:76:dd:
10:51:66:26:da:87:e8:e3:86:f6:15:e9:c9:b2:60:5f:01:ce:
7a:1e:bd:b3:d4:75:94:4e:37:a7:36:86:93:6c:c4:27:b2:ba:
d1:91:55:2f:de:d7:16:d5:b6:75:83:81:63:2a:8d:9b:2c:01:
2f:9d:b6:20:30:74:ea:de:9b:55:e6:16:c4:af:f3:c0:b8:e3:
8a:18:42:4e:93:c6:0f:87:47:98:b8:21:f4:74:bf:98:c2:c5:
f9:e7:0b:50:bc:6d:ce:08:57:a4:1d:5f:b1:26:6c:18:fb:a8:
2f:e1:b7:7b:2b:ae:b0:83:c2:21:1f:5f:cc:f9:7b:7f:38:ef:
26:82:4c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:44:54 2025 by rpki-client