Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: jU/RMywiY79yazWpbymUbpJBMwwukaaE7L94q1++Pcg=
Subject key identifier: 62:92:36:9D:B9:92:56:2E:EB:96:8C:83:67:CD:2A:F4:99:33:EF:89
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 019874F5336E7DFAB01292E392651CD3ECD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 12:01:23 +0000
Manifest this update: Mon 04 Aug 2025 12:01:23 +0000
Manifest next update: Tue 05 Aug 2025 12:01:23 +0000
Files and hashes: 1: 0jsEpgPjnRorcdqt6c4SOI8vcXg.roa (hash: AO/58LruOTgEAy4nNakpvGYhSURuS28xd2Bs8Gr4IHY=)
2: BbnlwIhyrOC_wq9s3BdRg9fc6bM.roa (hash: oM0cwxxbDbi/Rv2GFMgcWwBaJUky6UMWTaWR/yxnVcw=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: Qun4DxT5OtS2jL/pVd4yP628Px7h89nU5AnJ+UGQisc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:33:6e:7d:fa:b0:12:92:e3:92:65:1c:d3:ec:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Aug 4 12:01:23 2025 GMT
Not After : Aug 5 12:01:23 2025 GMT
Subject: CN=6292369db992562eeb968c8367cd2af49933ef89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:81:f0:99:ba:f8:43:b6:dd:ae:77:9b:ca:7b:
71:a3:48:86:97:09:46:2e:20:9b:8e:30:c4:d9:ee:
c3:66:3e:57:14:4f:18:14:8a:57:ce:c1:57:ab:92:
0c:97:0b:0b:38:9b:37:31:f3:0b:ca:61:fa:16:5e:
2c:66:fa:8e:b6:97:cf:a2:25:65:2c:c0:62:cd:f0:
05:38:20:9f:77:80:e9:82:d5:f0:29:49:a5:25:36:
75:17:d5:49:18:df:c6:ae:90:d8:9e:34:80:0e:ba:
4d:67:57:7b:20:1b:14:1f:82:c5:e3:2f:0f:9a:18:
cd:74:f9:c5:2b:53:71:a5:49:3b:08:6c:1c:f5:4d:
31:a8:f2:35:4b:b2:45:5a:dd:92:79:65:44:76:76:
af:b5:74:19:4a:a5:6a:fc:1d:13:c9:c6:47:bf:19:
50:d9:ac:f8:a7:8e:1f:39:ef:40:0f:f9:56:1d:61:
a9:09:85:e6:ac:df:59:61:eb:33:cb:bf:a0:14:14:
3f:51:1c:6d:e7:25:3f:f4:5f:df:ee:b7:17:dd:57:
ec:d6:9c:96:10:53:9c:b1:af:ae:bb:ef:70:d3:56:
83:49:38:11:d3:db:3e:92:23:dc:cf:a7:a6:22:3b:
74:c9:1c:2b:33:d5:0d:eb:43:ae:8b:91:36:30:90:
05:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:92:36:9D:B9:92:56:2E:EB:96:8C:83:67:CD:2A:F4:99:33:EF:89
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:35:d6:c4:8f:59:97:5f:4a:92:0f:17:01:9d:80:20:79:ad:
92:31:d1:dd:60:f5:ec:f5:a8:52:4c:b2:9f:68:88:80:15:77:
58:64:59:fe:84:0e:04:05:e6:ef:46:50:f7:bb:1c:69:58:fa:
6e:db:e1:55:c4:b2:af:57:8f:42:c1:6d:c0:52:84:f1:ad:de:
28:53:48:29:0f:1b:8c:73:ea:ff:3f:ac:70:14:a5:c1:8a:70:
23:94:80:f5:55:43:16:e3:71:e8:b4:e8:1c:66:5a:6d:88:88:
ff:dd:51:b2:de:ac:08:bc:93:ac:ea:3d:fc:47:97:d8:6b:a8:
c4:8a:28:28:a3:25:0a:cf:bd:4b:e2:a0:c9:96:28:a2:ff:62:
24:80:01:f5:8e:30:92:61:cd:61:2d:21:9a:f7:4c:2d:9e:13:
86:b4:04:3e:74:ba:c0:a2:46:cd:24:eb:69:f8:cf:65:8e:de:
c7:49:15:a9:c1:1a:7f:ca:49:6c:c9:1b:a6:38:e7:a4:ab:08:
e1:2b:8e:ef:3b:02:58:d0:01:ad:56:0b:be:73:5a:be:24:ed:
8f:bd:47:6f:0a:da:a8:31:50:aa:e1:84:0e:47:eb:bc:7e:15:
dc:48:23:3b:72:71:10:b9:38:52:b1:2d:33:e8:fa:a3:49:0e:
25:db:82:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09TNuffqwEpLjkmUc0+zWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNDQ5MTU1OGNkMjQ4NzVkYjUyNDI3MzQxMDUwMmZkYWUz
YTY3ODIwHhcNMjUwODA0MTIwMTIzWhcNMjUwODA1MTIwMTIzWjAzMTEwLwYDVQQD
Eyg2MjkyMzY5ZGI5OTI1NjJlZWI5NjhjODM2N2NkMmFmNDk5MzNlZjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IHwmbr4Q7bdrnebyntxo0iGlwlG
LiCbjjDE2e7DZj5XFE8YFIpXzsFXq5IMlwsLOJs3MfMLymH6Fl4sZvqOtpfPoiVl
LMBizfAFOCCfd4DpgtXwKUmlJTZ1F9VJGN/GrpDYnjSADrpNZ1d7IBsUH4LF4y8P
mhjNdPnFK1NxpUk7CGwc9U0xqPI1S7JFWt2SeWVEdnavtXQZSqVq/B0TycZHvxlQ
2az4p44fOe9AD/lWHWGpCYXmrN9ZYeszy7+gFBQ/URxt5yU/9F/f7rcX3Vfs1pyW
EFOcsa+uu+9w01aDSTgR09s+kiPcz6emIjt0yRwrM9UN60Oui5E2MJAFsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKSNp25klYu65aMg2fNKvSZM++JMB8GA1UdIwQY
MBaAFMxEkVWM0kh121JCc0EFAv2uOmeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekVTUlZZelNTSFhiVWtKelFRVUNfYTQ2WjRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80MzllZmUtZjEzMC00OTMxLTkzMWMt
YzhkNWMwNGUzZDQzLzEvekVTUlZZelNTSFhiVWtKelFRVUNfYTQ2WjRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80MzllZmUtZjEzMC00OTMxLTkzMWMtYzhkNWMwNGUzZDQz
LzEvekVTUlZZelNTSFhiVWtKelFRVUNfYTQ2WjRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzXWxI9Z
l19Kkg8XAZ2AIHmtkjHR3WD17PWoUkyyn2iIgBV3WGRZ/oQOBAXm70ZQ97scaVj6
btvhVcSyr1ePQsFtwFKE8a3eKFNIKQ8bjHPq/z+scBSlwYpwI5SA9VVDFuNx6LTo
HGZabYiI/91Rst6sCLyTrOo9/EeX2GuoxIooKKMlCs+9S+KgyZYoov9iJIAB9Y4w
kmHNYS0hmvdMLZ4ThrQEPnS6wKJGzSTrafjPZY7ex0kVqcEaf8pJbMkbpjjnpKsI
4SuO7zsCWNABrVYLvnNaviTtj71HbwraqDFQquGEDkfrvH4V3EgjO3JxELk4UrEt
M+j6o0kOJduCgg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:07:56 2025 by rpki-client