Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: vmowO4PNuutLmPLBPrjwbsF9/uBCmGI2JT7s7Va8hqI=
Subject key identifier: AF:68:23:BA:39:DF:5A:11:E4:91:CE:90:6C:88:D5:42:CF:27:F4:60
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 01974B8D82E4A149A41074F65347A60F2626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 18:00:54 +0000
Manifest this update: Sat 07 Jun 2025 18:00:54 +0000
Manifest next update: Sun 08 Jun 2025 18:00:54 +0000
Files and hashes: 1: 0jsEpgPjnRorcdqt6c4SOI8vcXg.roa (hash: AO/58LruOTgEAy4nNakpvGYhSURuS28xd2Bs8Gr4IHY=)
2: BbnlwIhyrOC_wq9s3BdRg9fc6bM.roa (hash: oM0cwxxbDbi/Rv2GFMgcWwBaJUky6UMWTaWR/yxnVcw=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: puab4iZ/EO3knvqD/WY5NR9ABVJwps0BGuajl4Ujpy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:82:e4:a1:49:a4:10:74:f6:53:47:a6:0f:26:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Jun 7 18:00:54 2025 GMT
Not After : Jun 8 18:00:54 2025 GMT
Subject: CN=af6823ba39df5a11e491ce906c88d542cf27f460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:56:e9:b9:e4:a5:2f:c2:d2:5b:f0:db:67:11:
99:c8:3b:89:a5:75:24:1d:32:8d:46:c6:6d:cc:33:
4f:18:7d:02:72:44:3f:05:6a:7d:de:63:31:ed:04:
d2:30:dd:a3:a2:23:21:49:99:92:1e:00:be:b9:75:
0a:d8:35:1c:c5:88:dd:d3:c0:92:1e:25:8a:bc:88:
6f:f6:c8:4a:c2:c8:e8:43:0b:31:28:9e:cb:91:d4:
4a:5e:63:1e:e0:72:c0:2c:8f:e0:af:d3:be:4d:3a:
5e:83:fd:8f:3e:24:13:81:78:d8:44:62:17:19:fb:
18:6f:81:2b:52:51:14:f0:ed:12:e0:e7:fb:12:43:
31:02:db:15:af:bb:cd:40:a1:ea:13:bf:78:ae:e8:
cb:2b:1b:5c:44:e4:98:5e:e2:5e:b0:1b:d1:d7:2e:
21:e5:72:6a:7c:4b:cf:3c:65:f9:bf:92:f4:40:cd:
3f:58:c5:0d:94:c2:73:3c:42:3d:dd:bf:df:93:6c:
06:71:56:ef:48:ae:fc:8b:0d:68:de:3d:9c:e7:90:
24:e0:aa:e1:f3:6d:3e:88:24:76:33:33:ec:d3:4a:
bf:de:45:a0:52:7d:e5:67:02:47:30:e1:1b:fb:f2:
44:3e:5a:1d:be:6e:2c:20:50:13:ff:57:cf:64:b5:
b6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:68:23:BA:39:DF:5A:11:E4:91:CE:90:6C:88:D5:42:CF:27:F4:60
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c6:43:47:41:7c:35:5a:9b:e0:49:40:c5:4d:1c:10:7c:5b:
c8:b2:8f:2e:ad:b1:af:88:e0:22:88:39:c1:49:1f:ed:32:a4:
1b:23:c0:12:f4:aa:56:2b:74:b0:b0:88:46:4b:91:da:65:6f:
45:91:6e:6e:6c:55:97:ed:a1:6a:fd:49:bd:29:98:ce:3f:b2:
38:05:fd:de:9f:b1:a4:c2:1c:3d:f5:6d:9b:cb:65:c4:4c:55:
00:03:ef:0a:9f:8b:79:e1:36:09:ca:42:58:84:54:4d:b7:46:
1a:0b:b8:ce:d7:c4:d1:93:8f:75:f2:8d:58:f8:7a:c5:6f:2b:
e9:45:21:54:c0:8c:d6:f9:0c:b1:e1:fe:86:19:eb:90:b3:79:
16:95:5a:db:b4:d4:87:8f:5e:cf:e4:7f:f8:cd:81:80:68:3a:
9e:6b:63:ae:c1:78:ba:73:ce:4a:25:99:96:f3:af:b4:19:af:
1a:e5:9d:f8:4c:36:cf:57:cc:2c:22:df:bd:42:8b:1d:9b:a3:
38:d1:12:d1:d5:d3:63:d1:f5:9a:8a:91:8d:f8:77:5e:46:14:
e0:2a:c6:59:36:55:3a:89:bb:13:86:96:ce:8c:bd:44:8e:c9:
27:1c:46:74:86:9e:0c:86:a9:b6:92:5d:66:c1:b7:53:64:7a:
7b:00:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:56:48 2025 by rpki-client