Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
File: ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft (raw, json)
Hash identifier: H/ZrKEQutx12gOMRDhvDbbXXK7PoBIfUR2MxFv59D3Q=
Subject key identifier: 77:97:01:B0:05:B3:30:03:94:41:01:E7:29:32:F9:D6:20:CC:A9:A1
Authority key identifier: 65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
Certificate issuer: /CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Certificate serial: 019A4EF49E9EC9765134D07965E8AB0BA1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
Manifest number: 0A01
Signing time: Tue 04 Nov 2025 13:00:45 +0000
Manifest this update: Tue 04 Nov 2025 13:00:45 +0000
Manifest next update: Wed 05 Nov 2025 13:00:45 +0000
Files and hashes: 1: XYOBnWiU8eSr5U3IwBwtwnYLEfo.roa (hash: 6TTZ52iyvKNZkBSm069RV4M98MsIuCFiWdEX+2UCHxo=)
2: ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl (hash: 4V7njCRdCgh4eRDVZ2P/SCqbs0TOTeBBlowSBa77BaE=)
3: ywRs-a89Yf3Zz1Mxm7EOZ0IaGgU.roa (hash: KcIGbva9ede7mLUbD84cHz+pICtWNbvc08mVQzdEhMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9e:9e:c9:76:51:34:d0:79:65:e8:ab:0b:a1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65e226bcf4a830b2f448fd6ea9976b152087dd45
Validity
Not Before: Nov 4 13:00:45 2025 GMT
Not After : Nov 5 13:00:45 2025 GMT
Subject: CN=779701b005b33003944101e72932f9d620cca9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:c5:c1:7a:a1:f3:77:e2:a7:6e:14:7c:7e:
13:6a:c1:b5:2d:8c:3e:9f:64:ce:6e:3f:59:10:c2:
e9:bc:02:8d:7d:9d:30:e4:bc:b2:fe:17:92:3d:6d:
7c:16:55:8d:9a:e4:d1:2b:90:d8:7d:48:0e:c2:68:
3b:04:e0:b9:f8:4b:21:a6:d0:9f:c6:e9:64:c1:27:
b2:11:d4:67:07:3f:d9:a8:51:c2:00:3f:aa:48:c9:
e7:2e:b6:3d:98:75:a6:75:c1:f9:cb:94:b1:ae:7d:
f3:6a:d2:e0:0e:ef:99:36:fd:be:60:d3:a5:d1:14:
86:99:ac:49:7d:05:b7:fd:cb:25:ea:93:76:42:c2:
a2:c9:40:f6:d3:ad:35:ab:c9:d8:76:11:97:78:38:
eb:f9:7d:0c:5c:d6:09:24:7b:0a:dc:49:2e:e0:36:
87:86:96:61:2c:d7:53:42:fd:82:ee:de:58:1f:b9:
cf:8a:e8:86:00:4a:bc:d7:14:d3:38:24:a8:81:14:
c2:63:8d:9d:5d:83:bf:7b:c5:c8:93:c1:fa:e4:df:
e6:a8:c9:2d:1a:bd:58:85:74:d4:d6:bf:e2:df:30:
14:0f:27:68:c2:ad:69:08:0a:5d:aa:ff:bf:46:9c:
19:0b:53:b6:9c:87:1a:07:fb:04:be:3c:af:35:66:
38:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:97:01:B0:05:B3:30:03:94:41:01:E7:29:32:F9:D6:20:CC:A9:A1
X509v3 Authority Key Identifier:
keyid:65:E2:26:BC:F4:A8:30:B2:F4:48:FD:6E:A9:97:6B:15:20:87:DD:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeImvPSoMLL0SP1uqZdrFSCH3UU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f5873a-8932-426f-8175-38c8dafb3e4f/1/ZeImvPSoMLL0SP1uqZdrFSCH3UU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:39:69:8f:cf:2f:2d:aa:05:fa:99:41:40:e7:fa:2e:1d:84:
fd:cd:0e:b6:b3:c1:c7:99:5c:fe:d2:bf:50:e7:eb:d8:63:95:
22:6a:4a:9e:89:a5:96:60:5a:9e:f2:29:fd:5e:41:ed:a5:95:
b3:96:b0:8c:60:fb:e6:1a:3d:ab:c4:7e:77:9e:76:ac:31:a9:
ff:df:ed:48:40:39:5d:b5:64:04:70:eb:7a:99:56:52:1a:20:
3b:25:d1:98:16:69:32:d6:29:ae:85:48:3d:23:fc:5b:54:4e:
a7:35:c6:31:00:d1:c2:b4:2d:7f:cc:e9:9a:f7:cf:0d:fa:6a:
ca:10:8b:a4:fa:a6:25:39:ac:92:0a:d4:dd:ac:72:76:af:fe:
00:ef:af:5c:0b:cb:c5:27:78:cf:e9:a7:64:7d:b0:05:e1:49:
63:a5:de:1d:c3:ad:12:c3:04:16:d4:8f:ac:ea:2e:8f:fa:92:
6a:00:60:3d:40:0c:5d:a0:e0:e0:f8:89:c8:61:5d:2f:f7:cf:
0d:88:73:24:09:45:90:9e:05:84:48:b5:f2:3c:08:bf:01:12:
9c:90:6b:30:de:b1:f1:36:0c:25:e2:50:dd:07:5a:7c:8d:8f:
45:f8:62:f7:88:82:57:69:e9:d3:48:d0:aa:c9:82:66:71:6a:
de:8b:cf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:38 2025 by rpki-client