Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: eKSN3wjNvjovsQFXiPmSUD8KweYQBYHdfcRUw6+tlA0=
Subject key identifier: 1C:E5:CF:43:1C:36:B1:48:71:F4:EA:B9:8D:92:86:F7:87:42:48:F9
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 019A4E18DA29CA56DC50D9769D4F40FE3C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 09:00:42 +0000
Manifest this update: Tue 04 Nov 2025 09:00:42 +0000
Manifest next update: Wed 05 Nov 2025 09:00:42 +0000
Files and hashes: 1: 0jsEpgPjnRorcdqt6c4SOI8vcXg.roa (hash: AO/58LruOTgEAy4nNakpvGYhSURuS28xd2Bs8Gr4IHY=)
2: BbnlwIhyrOC_wq9s3BdRg9fc6bM.roa (hash: oM0cwxxbDbi/Rv2GFMgcWwBaJUky6UMWTaWR/yxnVcw=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: Bg/VNQYwbgU6Supzx8KgUgHzxR1S6ROOU4fwHgS/3os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:da:29:ca:56:dc:50:d9:76:9d:4f:40:fe:3c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Nov 4 09:00:42 2025 GMT
Not After : Nov 5 09:00:42 2025 GMT
Subject: CN=1ce5cf431c36b14871f4eab98d9286f7874248f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f9:e5:18:ce:de:69:d2:22:58:5d:1f:e5:67:
d9:be:b5:af:7a:f3:72:14:b9:94:8f:af:c0:4a:97:
f2:c0:9a:a9:f8:0c:36:cf:dc:68:81:16:e4:6e:9f:
23:74:d0:76:cc:02:c8:2c:74:db:47:f9:1c:df:c6:
62:40:e5:b7:fd:b7:96:13:6c:c7:37:da:13:26:5a:
d2:67:56:23:81:7c:95:dd:a0:14:ac:00:83:aa:52:
e9:bf:63:4b:29:8f:3f:bc:ae:9e:f8:be:81:3c:e0:
aa:e7:8a:a0:1d:22:19:83:60:d9:75:81:1f:2f:c9:
83:12:5d:b2:e2:79:c2:f1:8a:8d:f7:2e:9a:8d:ad:
7b:5e:28:51:f6:71:a6:7e:ca:78:5d:2f:9a:81:d7:
87:6a:6e:ca:76:54:f0:ad:8e:d6:a4:1c:13:60:3a:
6c:28:d1:05:2d:37:59:e2:8b:74:8a:81:b6:0e:eb:
0e:be:d2:a7:ef:d1:89:41:af:f9:dd:51:c0:02:49:
be:37:72:86:1b:d2:b6:e5:aa:3a:aa:4f:0b:93:e8:
f9:c3:69:76:63:6e:2e:2b:5c:b8:6a:ea:04:3d:5f:
6b:35:66:95:2a:a2:10:a3:4b:5d:12:e8:bc:75:7a:
ec:bc:b0:61:36:23:5e:68:dc:52:9d:92:fc:66:45:
c9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E5:CF:43:1C:36:B1:48:71:F4:EA:B9:8D:92:86:F7:87:42:48:F9
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:08:a5:de:27:30:e3:c5:74:e2:06:92:75:1c:b1:a8:73:90:
09:8e:92:15:c1:36:de:07:bd:8e:6b:e3:82:b6:a1:d2:38:6e:
d7:a1:8f:b2:ba:80:f5:07:3d:5e:a9:a9:b7:ab:80:10:9f:68:
a2:db:2a:aa:88:d1:f1:5e:50:65:39:8d:50:c9:bc:cf:66:93:
87:33:fd:3b:8b:1f:cc:9e:4f:26:ac:ac:20:29:14:19:40:d9:
98:2a:e4:bb:97:d7:2a:97:8e:4d:48:ff:09:06:ce:71:4f:8d:
d9:e7:06:ae:d4:85:ca:9b:d5:b9:22:91:f4:bd:d1:df:aa:d8:
9d:3c:83:e0:1f:00:8d:9c:17:da:e4:60:d3:9f:f5:b3:53:d9:
0e:78:a9:1f:46:9d:9b:aa:0e:33:44:2d:b9:8d:26:bc:23:01:
e9:36:58:9b:09:64:67:ef:fc:04:11:b4:bb:d9:eb:55:f7:bd:
68:0f:15:df:38:f2:b7:bc:c5:06:ca:e2:87:d1:1b:e5:f4:e3:
ed:ce:58:b8:1f:54:44:b4:8d:46:bd:31:86:0a:43:85:ec:e5:
4a:c5:03:71:c6:97:75:82:39:eb:f5:3b:0a:f8:17:8f:b6:fd:
91:90:4b:75:f6:72:4b:a8:d8:a2:f6:8a:53:1b:64:43:aa:7f:
27:e0:72:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:20 2025 by rpki-client