
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: QSWLtvAu1ArET1yzwp/xkreGb7BiqkYGqielkJYXFtg=
Subject key identifier: E1:5B:F2:D5:0D:DB:A5:9B:67:22:F9:13:0A:FE:8E:F8:4D:30:2E:92
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 019873E2308132370D36F131CB5755BC9D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 090B
Signing time: Mon 04 Aug 2025 07:01:00 +0000
Manifest this update: Mon 04 Aug 2025 07:01:00 +0000
Manifest next update: Tue 05 Aug 2025 07:01:00 +0000
Files and hashes: 1: XYOBnWiU8eSr5U3IwBwtwnYLEfo.roa (hash: 6TTZ52iyvKNZkBSm069RV4M98MsIuCFiWdEX+2UCHxo=)
2: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: yZmlqHmdZNPQ/BvOdJNPRfuFLjyS6C4DxBvVaDUZ3CY=)
3: ywRs-a89Yf3Zz1Mxm7EOZ0IaGgU.roa (hash: KcIGbva9ede7mLUbD84cHz+pICtWNbvc08mVQzdEhMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:30:81:32:37:0d:36:f1:31:cb:57:55:bc:9d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Aug 4 07:01:00 2025 GMT
Not After : Aug 5 07:01:00 2025 GMT
Subject: CN=e15bf2d50ddba59b6722f9130afe8ef84d302e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:85:96:ff:a5:2c:cc:17:15:40:2e:ba:be:
90:81:32:f5:ff:b3:51:3e:47:ea:90:f2:92:46:f9:
e9:db:59:f5:7c:74:83:bb:cf:7b:11:20:34:56:b0:
bb:1b:5c:73:92:60:54:63:8d:32:88:03:07:29:6b:
e9:57:0c:ac:dc:a0:e4:46:3f:16:8a:b7:14:67:5b:
d3:4d:24:84:ca:db:aa:0a:06:28:23:48:30:a2:e9:
5b:58:ab:7d:3e:e2:9a:89:51:d3:13:99:89:a6:49:
6c:91:9f:99:71:84:e9:bd:02:12:35:c2:9e:5c:2a:
73:11:4a:4a:f5:45:84:90:8d:ae:69:ed:62:d1:9d:
32:83:70:e4:47:0c:9e:0c:92:0f:f9:ea:d2:83:eb:
ba:a7:4b:9a:75:37:a8:7f:a2:7b:2c:43:b1:69:25:
c0:1c:19:44:b6:ff:2b:96:bc:d0:23:2c:65:4f:30:
db:08:95:2d:5d:fb:d4:5f:2e:69:03:38:e4:b2:45:
4a:5c:42:4d:7c:13:fd:c2:a5:70:19:a1:03:ac:74:
80:03:70:d6:ac:57:65:fd:42:79:c8:7e:b3:53:e7:
e3:30:7f:89:fb:0b:ce:73:b6:98:e3:7d:cb:79:56:
ef:55:85:87:8a:64:a2:2a:a0:61:72:8f:0e:40:4e:
ae:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5B:F2:D5:0D:DB:A5:9B:67:22:F9:13:0A:FE:8E:F8:4D:30:2E:92
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9d:aa:9b:f2:56:4c:0a:c0:27:d1:6d:a0:76:b3:d7:ba:2a:
c5:a1:66:b9:d7:e6:99:14:e9:06:84:7c:46:58:79:a0:1c:1e:
23:2a:f3:cc:f1:d9:31:06:f2:4c:46:88:5d:88:85:d8:e6:13:
0c:6c:80:c3:96:c6:5b:92:19:3f:fe:c3:9a:a1:39:13:bd:4d:
8c:f5:a8:03:d0:9b:0e:c1:f5:2a:23:da:4d:43:c0:21:3e:60:
e0:73:7b:0c:9b:9b:5e:c1:9f:f0:96:bf:80:ea:bb:f1:c3:d7:
8e:f3:7f:28:80:5f:fd:5f:1d:ee:8f:ad:84:be:54:a8:67:0d:
35:e8:f6:d1:3c:73:0e:44:d3:a3:d3:7d:31:57:f7:5c:0a:c5:
8f:07:96:10:05:b6:20:a2:92:41:52:80:63:22:0b:78:fb:9c:
b3:e1:98:b4:62:a4:ef:42:58:c4:d7:f2:d0:c6:92:09:fe:d5:
b2:88:e4:e3:f4:1e:6b:bf:c3:0b:5a:41:be:ca:74:50:25:95:
c8:5e:b6:e5:41:9a:b8:1a:ad:1b:52:22:e0:54:e5:14:46:5b:
02:d3:dc:0a:66:f9:7f:4d:ff:89:4b:17:f1:66:cb:62:d2:85:
53:77:a9:8e:e4:c8:ba:88:09:ba:50:38:68:6d:8e:e5:fc:93:
1e:c5:f4:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4jCBMjcNNvExy1dVvJ14MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZTIyNmJjZjRhODMwYjJmNDQ4ZmQ2ZWE5OTc2YjE1MjA4
N2RkNDUwHhcNMjUwODA0MDcwMTAwWhcNMjUwODA1MDcwMTAwWjAzMTEwLwYDVQQD
EyhlMTViZjJkNTBkZGJhNTliNjcyMmY5MTMwYWZlOGVmODRkMzAyZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUmFlv+lLMwXFUAuur6QgTL1/7NR
PkfqkPKSRvnp21n1fHSDu897ESA0VrC7G1xzkmBUY40yiAMHKWvpVwys3KDkRj8W
ircUZ1vTTSSEytuqCgYoI0gwoulbWKt9PuKaiVHTE5mJpklskZ+ZcYTpvQISNcKe
XCpzEUpK9UWEkI2uae1i0Z0yg3DkRwyeDJIP+erSg+u6p0uadTeof6J7LEOxaSXA
HBlEtv8rlrzQIyxlTzDbCJUtXfvUXy5pAzjkskVKXEJNfBP9wqVwGaEDrHSAA3DW
rFdl/UJ5yH6zU+fjMH+J+wvOc7aY433LeVbvVYWHimSiKqBhco8OQE6uVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFb8tUN26WbZyL5Ewr+jvhNMC6SMB8GA1UdIwQY
MBaAFGXiJrz0qDCy9Ej9bqmXaxUgh91FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUt
MzhjOGRhZmIzZTRmLzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9mNTg3M2EtODkzMi00MjZmLTgxNzUtMzhjOGRhZmIzZTRm
LzEvWmVJbXZQU29NTEwwU1AxdXFaZHJGU0NIM1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ52qm/JW
TArAJ9FtoHaz17oqxaFmudfmmRTpBoR8Rlh5oBweIyrzzPHZMQbyTEaIXYiF2OYT
DGyAw5bGW5IZP/7DmqE5E71NjPWoA9CbDsH1KiPaTUPAIT5g4HN7DJubXsGf8Ja/
gOq78cPXjvN/KIBf/V8d7o+thL5UqGcNNej20TxzDkTTo9N9MVf3XArFjweWEAW2
IKKSQVKAYyILePucs+GYtGKk70JYxNfy0MaSCf7Vsojk4/Qea7/DC1pBvsp0UCWV
yF625UGauBqtG1Ii4FTlFEZbAtPcCmb5f03/iUsX8WbLYtKFU3epjuTIuogJulA4
aG2O5fyTHsX0Fw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:35 2025 by rpki-client