Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: kHH34fHrWJZ/ltzXhkndBxzDz5KwwsIz7nvbVtxVJ00=
Subject key identifier: 0B:E5:1E:28:8B:44:58:07:89:29:8A:8F:65:17:AA:12:C1:D5:75:47
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 0199FB0EECC9DC23C0B985FBA1BB7DA80F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 06:01:23 +0000
Manifest this update: Sun 19 Oct 2025 06:01:23 +0000
Manifest next update: Mon 20 Oct 2025 06:01:23 +0000
Files and hashes: 1: 0jsEpgPjnRorcdqt6c4SOI8vcXg.roa (hash: AO/58LruOTgEAy4nNakpvGYhSURuS28xd2Bs8Gr4IHY=)
2: BbnlwIhyrOC_wq9s3BdRg9fc6bM.roa (hash: oM0cwxxbDbi/Rv2GFMgcWwBaJUky6UMWTaWR/yxnVcw=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: iPmhR/CoRcUECtexkPkulqrqv+EE1V1vpASUbGPricg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:ec:c9:dc:23:c0:b9:85:fb:a1:bb:7d:a8:0f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Oct 19 06:01:23 2025 GMT
Not After : Oct 20 06:01:23 2025 GMT
Subject: CN=0be51e288b44580789298a8f6517aa12c1d57547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1c:86:5e:e6:f1:aa:1a:63:93:3c:f0:b6:da:
02:58:2a:35:67:ec:85:95:c2:9b:3a:70:81:20:b1:
9e:72:98:e9:5d:4c:19:3a:e2:ba:33:61:ce:f6:4c:
ab:a3:da:a4:db:c6:80:a0:3b:d8:06:89:f6:b0:37:
dd:32:61:fa:4e:91:fd:4b:3a:f8:92:f2:b5:05:2e:
0f:40:b2:9e:43:89:bb:c9:ad:ee:c7:e0:cc:a6:ea:
74:80:85:12:26:2c:cc:1b:95:43:1c:b7:8c:1f:8f:
4f:38:31:8c:62:30:63:65:b2:bb:fd:0f:ee:bd:59:
08:9e:86:a6:c6:fc:bb:72:a3:e8:c8:7d:4b:36:77:
44:0f:c1:44:94:fa:c2:d3:1f:6f:f4:2d:12:6e:9a:
30:a3:f7:e3:aa:89:68:58:e5:15:d9:81:1a:8c:0b:
e0:22:08:11:8f:0a:30:3e:27:18:76:49:e2:44:0c:
8f:0c:1b:2b:36:1f:95:4d:06:30:70:be:e4:33:f2:
44:ed:40:2b:f3:b1:fe:de:54:95:0b:0e:dd:5f:10:
27:c2:c6:0a:9f:dc:81:23:fe:b9:71:96:84:ea:24:
e7:24:ad:f6:48:47:df:e0:4f:1b:af:6b:9e:b3:db:
bb:33:7a:93:64:93:3f:9b:aa:da:2d:7f:06:28:37:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E5:1E:28:8B:44:58:07:89:29:8A:8F:65:17:AA:12:C1:D5:75:47
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:06:9f:29:fc:89:f6:81:b6:f6:c3:d4:ed:b9:b7:ec:84:ee:
28:d4:8c:e8:2d:0f:cb:17:f3:8e:7f:a0:6b:ad:f6:44:4d:56:
e6:e7:cb:f2:bc:db:50:3e:a3:78:d2:c2:02:b2:78:00:78:cf:
5c:fe:fc:f9:81:79:0a:05:70:91:fe:d0:68:ea:6b:56:4e:87:
da:c4:fb:a8:56:4a:58:f9:2f:db:e4:37:5a:3d:04:d3:ec:fa:
87:29:b6:6e:ef:4f:f7:6a:cd:07:11:48:f7:ad:1a:19:02:ec:
16:ff:61:dd:42:61:66:63:e5:dd:00:e4:a1:3a:b9:42:25:7c:
0f:d7:cb:c4:39:40:7e:f0:4e:36:dc:1a:55:d0:ed:e5:60:1f:
d4:a4:ec:fa:ec:fa:72:b9:f5:ea:fc:59:e4:94:e5:3e:f1:a6:
3b:74:7a:fd:95:65:dd:27:c1:da:09:fb:54:9c:4b:8f:88:cb:
17:cb:70:a1:45:d5:2c:32:55:85:40:d6:7b:75:4d:6c:1b:1b:
27:39:85:47:09:04:7c:0f:5b:d2:f2:6d:fb:df:ec:7c:a8:65:
23:88:4a:6a:a0:f5:ac:9b:b8:d3:38:73:91:21:98:77:37:fa:
98:ad:b7:07:c0:fb:38:96:a7:c2:b5:93:db:97:03:61:00:06:
af:33:dd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:19 2025 by rpki-client