Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: xH8ErW7YNr5eS1UHlOW1B4OVl/QwvU4D9no0AwXzK/o=
Subject key identifier: 83:35:58:7A:64:6F:74:A1:24:2D:CF:E3:35:9F:A1:F3:CD:32:82:26
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 019A72CABC7846F79B93870E6EFBBA3EEB2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 12:01:20 +0000
Manifest this update: Tue 11 Nov 2025 12:01:20 +0000
Manifest next update: Wed 12 Nov 2025 12:01:20 +0000
Files and hashes: 1: 0jsEpgPjnRorcdqt6c4SOI8vcXg.roa (hash: AO/58LruOTgEAy4nNakpvGYhSURuS28xd2Bs8Gr4IHY=)
2: BbnlwIhyrOC_wq9s3BdRg9fc6bM.roa (hash: oM0cwxxbDbi/Rv2GFMgcWwBaJUky6UMWTaWR/yxnVcw=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: 6htjSyJHyrQ23cJ1CDzNo1WZ5CRKsdRQTFzUUuFA7zg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:bc:78:46:f7:9b:93:87:0e:6e:fb:ba:3e:eb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Nov 11 12:01:20 2025 GMT
Not After : Nov 12 12:01:20 2025 GMT
Subject: CN=8335587a646f74a1242dcfe3359fa1f3cd328226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:07:8d:ce:6f:86:92:c1:fe:53:0c:86:6c:
6e:c8:4d:b6:00:56:9f:fe:2c:4c:f3:c9:66:d9:7d:
d8:5f:f4:f3:97:9b:ac:23:cc:87:06:84:4f:34:5c:
e7:3c:d6:6e:0a:bc:ee:f5:d4:d0:9a:95:aa:06:65:
fa:f3:bd:50:49:16:4d:a2:1b:d6:19:db:c0:2e:7c:
a0:50:b0:97:a7:34:a5:1d:de:9d:72:50:9f:07:8c:
03:a3:ea:fe:eb:24:78:14:23:b5:e8:34:e5:e0:c2:
18:a3:6f:b7:d1:f4:60:23:2f:6e:97:46:1d:42:6a:
df:be:ca:ed:bb:62:32:2f:ad:f3:91:4f:0b:e7:5a:
90:56:1f:87:18:7c:04:75:0d:58:44:c8:b1:c7:92:
aa:39:a4:88:12:ec:e8:69:4f:8c:94:ed:3e:22:d0:
af:b4:ca:a9:85:06:13:67:72:10:f8:03:cc:3b:01:
af:9d:16:04:4d:a9:20:58:6d:56:91:1d:1a:01:3f:
98:4c:f8:fd:7e:79:f5:34:c4:22:92:5c:24:6a:b3:
59:69:70:58:b3:d1:22:c6:7e:78:47:20:8e:b5:3c:
cb:76:dd:0d:42:a6:88:de:e7:ae:fb:76:68:b6:bb:
41:c4:c6:5d:41:26:a8:0b:37:ea:1c:09:e5:08:03:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:35:58:7A:64:6F:74:A1:24:2D:CF:E3:35:9F:A1:F3:CD:32:82:26
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:53:30:98:ca:87:6d:59:33:4a:94:49:7d:1d:d2:39:1c:66:
b6:0d:cc:43:d7:51:ca:49:c1:ca:83:fa:15:11:d5:87:c1:10:
ef:9c:42:ae:6a:25:35:16:97:aa:b7:df:69:09:e1:bf:f5:1f:
19:a4:b6:d6:d3:79:a2:b7:86:8b:65:f2:fa:86:cc:44:78:52:
58:16:b3:24:13:f4:a1:cb:1b:f2:f8:80:74:2c:c9:e4:1c:b6:
7f:ba:d9:1b:52:8b:19:ad:b3:09:41:96:98:31:c9:ad:06:ed:
58:0b:ec:4f:a1:e2:26:77:80:12:11:f4:7f:d8:69:70:75:50:
72:82:03:a3:d8:5f:7c:ae:a9:fc:b5:1b:d6:8d:b9:cf:c9:3d:
a4:58:a1:f1:6e:b2:a6:d0:9f:5b:f0:0f:85:15:e0:80:0f:4d:
cf:77:f5:f7:ee:3e:6d:a5:e5:f9:0d:8b:c3:c2:9a:ec:1d:ff:
a6:70:db:e6:50:08:33:72:63:d2:cf:01:c2:8d:ba:6e:92:6d:
4e:d8:f7:31:ba:77:b8:be:f2:5e:a0:fb:bb:f6:52:b5:86:65:
3f:e5:0c:db:5b:72:2b:87:81:a0:cf:3e:d5:c8:9b:50:1a:58:
29:80:4b:48:95:e5:ab:c0:41:e6:da:89:cc:4c:0a:2b:03:c2:
0d:75:d1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:09 2025 by rpki-client