Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: dfz5EVq/n0xfN7a7al69JGKy5VzvWxly4x2azL054CU=
Subject key identifier: 7B:46:32:07:6A:B8:74:9D:2F:B9:D9:44:11:2F:84:31:EA:DF:2C:5F
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 019768851F17949596BADB9AE575776B2EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 09:00:44 +0000
Manifest this update: Fri 13 Jun 2025 09:00:44 +0000
Manifest next update: Sat 14 Jun 2025 09:00:44 +0000
Files and hashes: 1: 0jsEpgPjnRorcdqt6c4SOI8vcXg.roa (hash: AO/58LruOTgEAy4nNakpvGYhSURuS28xd2Bs8Gr4IHY=)
2: BbnlwIhyrOC_wq9s3BdRg9fc6bM.roa (hash: oM0cwxxbDbi/Rv2GFMgcWwBaJUky6UMWTaWR/yxnVcw=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: 8Ex2JsVaFsm57MsX8M7v1lTLWZ7FVMioysWYdtuC4KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:1f:17:94:95:96:ba:db:9a:e5:75:77:6b:2e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Jun 13 09:00:44 2025 GMT
Not After : Jun 14 09:00:44 2025 GMT
Subject: CN=7b4632076ab8749d2fb9d944112f8431eadf2c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7e:16:b5:38:5a:6a:06:b4:99:82:8b:ab:89:
e5:34:6b:da:7a:24:47:63:93:3e:bf:20:e2:d6:f7:
b2:6d:ef:70:a4:55:dc:fe:8f:19:73:f7:ce:9e:fc:
7b:e8:93:44:74:96:c3:d3:78:d9:49:b2:bd:49:83:
4e:f2:cf:a8:87:04:b9:5a:28:13:6e:21:36:8a:4d:
ee:9b:3c:8b:fc:4e:a0:4d:a4:58:7d:65:ec:2c:14:
26:32:b1:d3:ae:4b:2e:c2:f6:3f:c4:ef:61:f2:a2:
fa:1f:4d:b8:f7:1c:ff:cf:58:24:5c:0a:c9:6d:99:
26:9e:cc:c0:ea:35:84:fb:c7:33:31:ae:58:7c:65:
f8:fd:ed:44:80:46:73:05:f3:b7:75:16:6c:52:44:
b1:54:1e:ce:b6:7a:c4:d9:4c:be:6c:27:a4:dd:c2:
74:38:0b:46:0a:70:84:cd:e3:73:93:f4:25:0a:e5:
23:40:88:e8:ed:f8:14:4c:ba:9b:da:f1:d2:99:59:
26:4f:62:76:de:fe:7a:2e:d7:30:c7:cb:9b:5b:ed:
9f:d4:4d:bb:34:fa:30:25:9f:8e:bf:6f:b7:71:34:
eb:92:49:ab:ce:3d:b2:92:b9:94:69:9c:c9:17:13:
b9:9f:6e:a7:9c:8b:13:6f:6e:f2:0a:c0:12:18:60:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:46:32:07:6A:B8:74:9D:2F:B9:D9:44:11:2F:84:31:EA:DF:2C:5F
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c7:c3:20:58:9e:06:d9:21:74:3a:6b:72:30:97:8d:e2:bb:
3e:46:ac:76:d3:85:3f:cd:44:72:bd:9f:d1:25:7c:85:1f:ee:
24:e1:2a:8a:4d:91:66:93:d7:85:98:6f:c7:87:0b:80:a9:e7:
e6:d3:17:f7:d9:b7:f0:52:61:ba:62:07:4f:56:5a:46:8a:55:
01:6a:74:ac:b3:ea:95:bc:32:c2:8e:11:7b:7a:c9:a0:e8:cc:
1d:49:ed:32:0f:01:b2:f4:01:74:5f:56:2c:6f:7d:48:b8:d8:
28:81:b3:2e:be:97:08:98:d9:05:85:53:f8:22:26:c2:05:11:
30:81:ab:59:2f:52:1a:4a:61:e5:54:e1:cf:50:33:f7:0e:f1:
30:a3:ae:ac:ee:cb:03:7d:1f:ef:7d:c9:dc:8b:e7:50:75:7a:
83:0a:b7:cf:1a:38:e5:4d:0b:4e:21:81:0d:42:5d:7a:c0:c7:
0b:ab:b7:08:fe:5e:ab:d0:02:b4:67:cc:f1:1d:ed:a4:59:3d:
ff:99:52:75:67:5f:84:fe:ad:33:8a:69:54:32:2d:0c:5a:35:
ed:13:5d:01:8b:e3:fd:78:81:a5:11:7f:ec:47:19:39:9e:2d:
1d:94:8a:bd:b8:b0:61:70:6a:da:2c:87:db:63:21:74:f3:fc:
74:9e:3e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:18:44 2025 by rpki-client