Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: hCnku79tsOoZgQqAN2yCT7lM03IlyKg7fOw0alyAsaU=
Subject key identifier: B5:B4:B5:5F:D2:63:A3:CA:BE:2C:AC:E9:A9:21:E9:16:4B:6E:87:07
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 01967DC6354244EC7BCEB712E11E836402A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 0807
Signing time: Mon 28 Apr 2025 19:01:03 +0000
Manifest this update: Mon 28 Apr 2025 19:01:03 +0000
Manifest next update: Tue 29 Apr 2025 19:01:03 +0000
Files and hashes: 1: XYOBnWiU8eSr5U3IwBwtwnYLEfo.roa (hash: 6TTZ52iyvKNZkBSm069RV4M98MsIuCFiWdEX+2UCHxo=)
2: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: O1c+fQbwpxA9KpoLsworghg43O1gEaElLyK4rh7OY6Y=)
3: ywRs-a89Yf3Zz1Mxm7EOZ0IaGgU.roa (hash: KcIGbva9ede7mLUbD84cHz+pICtWNbvc08mVQzdEhMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:35:42:44:ec:7b:ce:b7:12:e1:1e:83:64:02:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Apr 28 19:01:03 2025 GMT
Not After : Apr 29 19:01:03 2025 GMT
Subject: CN=b5b4b55fd263a3cabe2cace9a921e9164b6e8707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9e:58:0d:c5:82:3c:74:8c:97:67:1b:66:17:
b7:bb:a7:bd:98:95:ca:27:ae:35:07:f9:c1:84:79:
47:3a:d7:dd:e1:eb:fe:9b:96:e9:91:b3:a1:3e:2d:
99:08:09:70:ee:e9:b9:b8:df:17:32:54:93:67:15:
14:54:f1:43:8f:ae:36:6b:95:7d:03:db:0b:4f:29:
04:1f:dc:f7:0e:8a:8f:08:38:12:ac:a9:5e:71:b9:
a6:48:e6:10:d3:98:97:39:64:50:59:7d:ae:41:be:
b7:ab:32:29:11:80:25:58:e9:1d:02:ed:ef:b5:6d:
d8:a8:bd:3b:eb:18:35:44:4a:6a:aa:63:44:9d:f2:
95:05:fa:ed:cd:e2:73:68:a7:67:e8:97:7d:1b:7b:
a3:d8:38:20:51:75:cc:f7:e7:fe:4c:ab:66:4d:90:
50:2e:b8:16:1d:95:03:19:79:2c:a3:93:fc:40:38:
2a:3e:3c:63:02:ed:72:ef:32:32:77:d5:8e:c6:32:
a9:e3:b7:b3:07:12:1b:65:07:b9:14:28:64:51:20:
c5:4b:d7:66:9d:a5:36:54:22:7a:ea:8a:61:02:0d:
10:6f:6d:57:2d:fe:af:4e:2e:b0:cc:3d:49:ff:b3:
3a:8d:20:92:d4:95:f4:f0:1c:20:07:c1:e5:32:41:
46:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B4:B5:5F:D2:63:A3:CA:BE:2C:AC:E9:A9:21:E9:16:4B:6E:87:07
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1f:ba:fc:44:9b:67:1e:79:c9:15:a9:af:16:d0:fc:d2:07:
48:f0:6e:7e:e2:9d:ca:1f:3c:34:6f:54:82:2e:96:b5:22:14:
9b:50:21:ce:aa:ab:8c:7a:6f:ab:ea:b0:b1:4e:60:b9:09:f9:
3e:fe:20:c9:2f:b9:e6:6e:6f:50:62:99:bc:8f:40:70:87:3f:
02:01:4d:dd:bb:02:86:41:33:cd:68:fb:61:57:75:6b:64:dc:
4e:fd:00:ca:bf:b6:f7:a8:a5:db:6c:87:7a:a1:4e:07:dc:e7:
41:3e:53:0e:a1:52:50:ed:1f:98:5f:5b:31:9b:0e:8d:0e:06:
6f:53:c2:0b:35:7e:3c:93:73:9b:07:e9:be:21:12:5e:25:59:
29:ac:d8:04:7a:ea:5b:e8:27:da:9c:74:e0:d4:d7:c5:e5:8e:
e8:a4:70:1d:5f:dd:ff:76:e2:42:38:86:9b:49:78:eb:6e:7c:
0d:e4:2e:8a:da:d2:7c:1a:b3:6d:38:35:73:ea:2d:0f:03:7c:
80:14:05:8a:e6:79:03:0e:fe:5d:f4:03:62:3a:87:93:34:62:
0b:f6:af:96:5a:0c:3e:a8:17:d8:5d:c1:28:f5:33:fe:51:f3:
22:d4:43:42:f0:a3:e3:86:cb:9c:0b:c2:f9:20:0d:99:e3:1e:
76:da:95:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9xjVCROx7zrcS4R6DZAKoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZTIyNmJjZjRhODMwYjJmNDQ4ZmQ2ZWE5OTc2YjE1MjA4
N2RkNDUwHhcNMjUwNDI4MTkwMTAzWhcNMjUwNDI5MTkwMTAzWjAzMTEwLwYDVQQD
EyhiNWI0YjU1ZmQyNjNhM2NhYmUyY2FjZTlhOTIxZTkxNjRiNmU4NzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8p5YDcWCPHSMl2cbZhe3u6e9mJXK
J641B/nBhHlHOtfd4ev+m5bpkbOhPi2ZCAlw7um5uN8XMlSTZxUUVPFDj642a5V9
A9sLTykEH9z3DoqPCDgSrKlecbmmSOYQ05iXOWRQWX2uQb63qzIpEYAlWOkdAu3v
tW3YqL076xg1REpqqmNEnfKVBfrtzeJzaKdn6Jd9G3uj2DggUXXM9+f+TKtmTZBQ
LrgWHZUDGXkso5P8QDgqPjxjAu1y7zIyd9WOxjKp47ezBxIbZQe5FChkUSDFS9dm
naU2VCJ66ophAg0Qb21XLf6vTi6wzD1J/7M6jSCS1JX08BwgB8HlMkFGnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLW0tV/SY6PKviys6akh6RZLbocHMB8GA1UdIwQY
MBaAFGXiJrz0qDCy9Ej9bqmXaxUgh91FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUt
MzhjOGRhZmIzZTRmLzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUtMzhjOGRhZmIzZTRm
LzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEh+6/ESb
Zx55yRWprxbQ/NIHSPBufuKdyh88NG9Ugi6WtSIUm1AhzqqrjHpvq+qwsU5guQn5
Pv4gyS+55m5vUGKZvI9AcIc/AgFN3bsChkEzzWj7YVd1a2TcTv0Ayr+296il22yH
eqFOB9znQT5TDqFSUO0fmF9bMZsOjQ4Gb1PCCzV+PJNzmwfpviESXiVZKazYBHrq
W+gn2px04NTXxeWO6KRwHV/d/3biQjiGm0l46258DeQuitrSfBqzbTg1c+otDwN8
gBQFiuZ5Aw7+XfQDYjqHkzRiC/avlloMPqgX2F3BKPUz/lHzItRDQvCj44bLnAvC
+SANmeMedtqViA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 21:25:34 2025 by rpki-client