Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: Pdougga05GqFRu0D6hSK857UtEIxGtD/mn6T7PNx6Ow=
Subject key identifier: F2:F8:85:E3:F3:2D:AC:C2:72:84:F5:2E:30:0B:C6:FB:21:89:F3:EA
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 0197B9A1B019471CF8F6D8FC902E52C4ABFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 15B5
Signing time: Sun 29 Jun 2025 03:01:10 +0000
Manifest this update: Sun 29 Jun 2025 03:01:10 +0000
Manifest next update: Mon 30 Jun 2025 03:01:10 +0000
Files and hashes: 1: 0jsEpgPjnRorcdqt6c4SOI8vcXg.roa (hash: AO/58LruOTgEAy4nNakpvGYhSURuS28xd2Bs8Gr4IHY=)
2: BbnlwIhyrOC_wq9s3BdRg9fc6bM.roa (hash: oM0cwxxbDbi/Rv2GFMgcWwBaJUky6UMWTaWR/yxnVcw=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: z+AzRBEYO4hMgzi8Vw/CsxGRffCwdu90WOYVNQJCCvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:b0:19:47:1c:f8:f6:d8:fc:90:2e:52:c4:ab:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Jun 29 03:01:10 2025 GMT
Not After : Jun 30 03:01:10 2025 GMT
Subject: CN=f2f885e3f32dacc27284f52e300bc6fb2189f3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:ba:11:cc:81:db:af:33:89:9c:8a:3c:c5:
22:fa:b3:df:1a:c8:c8:90:87:05:85:06:90:57:7b:
ac:b0:ac:6a:53:06:62:3c:06:5a:b8:1f:58:7e:0c:
83:63:2a:f0:5d:23:30:4c:65:0f:63:b2:07:19:7c:
a0:d5:ed:ec:14:8e:22:ae:64:36:c9:fc:58:2a:33:
69:8f:4c:a1:4a:72:cc:a7:9f:6d:0d:a2:73:ff:7d:
24:32:9c:db:91:5c:c6:7e:8f:48:8f:4b:c2:4f:b2:
af:68:e7:da:46:d9:be:4e:e5:5c:cd:c7:49:f0:3f:
c0:cf:92:0e:34:1b:9d:9e:87:c9:62:51:72:92:33:
0e:9c:16:7e:2b:7f:1c:de:64:fd:47:c8:cf:df:6b:
4a:06:ab:a0:2d:c6:3e:58:55:a0:79:c2:54:17:b0:
85:f4:43:1c:b2:9f:11:6b:cc:94:2f:c9:33:f6:1a:
85:f6:05:e2:73:04:8e:9b:2e:70:47:b0:c4:d9:7f:
77:52:45:9e:d2:fd:a3:71:7e:1a:8e:2d:aa:d6:42:
20:7c:76:57:02:9d:c3:58:f4:34:71:ec:c7:bc:52:
a2:df:83:df:fc:48:70:6b:6f:8b:58:d9:51:f8:e7:
25:14:de:91:03:e1:a9:2c:83:af:0a:eb:6b:00:93:
0f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F8:85:E3:F3:2D:AC:C2:72:84:F5:2E:30:0B:C6:FB:21:89:F3:EA
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:02:66:87:04:87:0d:c9:3b:0d:d2:b1:24:fd:48:31:50:de:
f5:5f:12:6f:cd:6e:5e:96:c4:ee:38:5b:16:f5:14:c9:6a:68:
36:2f:19:28:82:21:59:79:99:46:54:05:da:1e:86:30:82:37:
ee:1b:fb:ed:03:b1:8f:6b:5a:08:0d:e8:0a:cc:b1:c0:77:6c:
6d:47:01:78:ab:76:c0:7c:a6:2d:61:d8:df:43:ff:fa:9c:26:
4e:67:53:cd:ec:5b:ac:69:ac:bd:62:3f:0e:a1:fd:ba:7c:4d:
4f:6d:41:59:5b:b0:b9:98:8a:c1:91:b6:4c:67:cc:d8:21:dc:
c8:19:e8:22:63:49:d0:65:79:ce:ff:61:38:b8:51:e5:cd:0d:
04:9b:07:3b:37:2b:47:9e:3a:e5:fc:0e:17:f8:c8:c5:b4:f0:
f4:5c:73:54:ca:f5:53:35:29:28:84:6f:66:0e:b0:b2:ad:d6:
a7:12:41:42:f1:8d:1b:07:fd:9a:e7:fb:4a:88:7a:ce:ad:2d:
76:f6:b9:08:b8:80:13:43:07:df:31:83:51:9e:ab:f0:34:39:
82:06:e2:6f:eb:aa:ea:53:9a:b0:33:71:ee:78:b0:f6:45:9c:
67:96:47:08:1e:7e:9c:d4:92:c6:cd:3f:27:50:51:46:2a:b3:
f8:f6:8d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:27:22 2025 by rpki-client