Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: eAFJb1LLQs1qzVlXp+6vtjAn0ySTcRGTE34+DjueZCs=
Subject key identifier: 6B:BF:55:F3:3F:EC:F2:D9:44:20:FC:9A:53:9C:A8:1E:46:99:CE:0F
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 019922C337065DA40D6B34732A4D0FBADC71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 06:00:42 +0000
Manifest this update: Sun 07 Sep 2025 06:00:42 +0000
Manifest next update: Mon 08 Sep 2025 06:00:42 +0000
Files and hashes: 1: 0jsEpgPjnRorcdqt6c4SOI8vcXg.roa (hash: AO/58LruOTgEAy4nNakpvGYhSURuS28xd2Bs8Gr4IHY=)
2: BbnlwIhyrOC_wq9s3BdRg9fc6bM.roa (hash: oM0cwxxbDbi/Rv2GFMgcWwBaJUky6UMWTaWR/yxnVcw=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: 5AbjmJRbYL+oAySq2CDpj4JMsdLPMSEiFyyFivYx7og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:37:06:5d:a4:0d:6b:34:73:2a:4d:0f:ba:dc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Sep 7 06:00:42 2025 GMT
Not After : Sep 8 06:00:42 2025 GMT
Subject: CN=6bbf55f33fecf2d94420fc9a539ca81e4699ce0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:98:1a:46:70:13:92:47:73:e1:90:41:ad:72:
a3:c6:6a:46:14:0b:89:53:94:8b:9d:36:e1:5b:29:
7a:8c:94:0c:b5:7e:1b:30:52:eb:40:e4:3a:9a:6f:
b6:f8:28:20:67:e4:90:d7:46:55:40:2c:47:d1:08:
cf:7e:da:0d:44:c8:79:52:bc:6c:cd:c6:38:18:81:
a8:03:c9:3c:44:4b:67:ac:b8:b1:01:2a:e4:41:e0:
ca:02:1e:06:f9:cc:d9:32:9a:9a:c8:84:78:35:58:
12:6e:67:c6:a5:90:f4:7f:4a:fc:a1:0b:99:9c:a9:
ce:3c:fd:aa:6a:75:96:9d:e4:54:80:fe:a8:fb:c4:
60:64:9b:7c:c4:70:28:2e:ac:2c:bd:a4:98:a3:73:
67:27:80:d2:1d:34:a2:6d:20:fc:7a:32:00:d5:09:
11:a6:15:95:ca:9c:0f:53:b4:9d:f2:96:6a:d7:a0:
33:31:0f:ca:aa:cd:36:49:aa:68:fb:75:31:ed:d0:
75:09:e5:dd:08:ba:50:78:1e:a2:45:fc:78:0a:fc:
e9:22:c3:0d:05:82:dd:0c:e2:4a:b9:ca:7a:c8:b0:
f6:d2:d7:e0:5e:29:0b:cf:74:bd:9e:e5:8c:aa:bb:
73:70:6d:f2:a2:3f:bc:6c:50:de:99:b8:ce:d7:26:
21:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BF:55:F3:3F:EC:F2:D9:44:20:FC:9A:53:9C:A8:1E:46:99:CE:0F
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a9:0a:16:e5:6f:a5:b9:67:61:a5:81:45:b1:5a:45:09:05:
d8:d9:ae:98:32:05:96:a1:2f:dc:52:95:ce:02:d9:60:69:09:
af:c7:a2:0d:71:c3:53:d4:f4:40:3b:aa:a4:37:52:5e:28:dd:
29:21:39:d6:f1:ee:e9:75:e8:00:cb:96:08:36:2f:19:bb:20:
bb:bd:48:95:86:86:30:b4:51:b7:52:a0:c9:33:ed:54:78:de:
72:30:f4:7a:b2:a9:8d:c6:9d:7a:73:15:19:1e:09:c9:4a:20:
3a:96:95:8c:6d:7c:77:09:64:39:5d:ba:80:0a:89:e1:66:63:
e1:e7:0a:b5:27:e0:6f:11:f6:71:01:69:df:ad:a0:2e:98:0b:
72:1e:d1:6b:45:b1:1d:cd:3b:0c:50:31:de:46:aa:9e:20:55:
95:5f:5d:d5:82:20:05:3d:e2:a1:1b:f9:9a:1f:f8:8c:33:08:
21:ff:52:db:79:cb:fd:e1:3b:c6:d7:66:03:83:fe:7f:75:02:
77:a9:4d:14:42:04:3f:b5:c8:1f:72:5b:f2:9d:5c:41:79:de:
89:b3:90:f3:58:85:d8:2d:4d:d3:4c:a5:de:be:c4:e1:ee:96:
e9:99:f1:dc:ba:5a:52:81:4c:95:7d:0a:f9:a3:28:56:ac:a5:
11:81:6d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:19 2025 by rpki-client