Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: awXOAeEtWaf+Uzylz5ECtqhVpjUvJ66Zy0xePj+h6F8=
Subject key identifier: 1A:5F:F1:7B:9E:0B:2D:D8:66:B5:B5:DF:75:4B:01:F3:15:1D:00:89
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 0198D58382B05CB3D3F159DB483587AE655B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 06:00:22 +0000
Manifest this update: Sat 23 Aug 2025 06:00:22 +0000
Manifest next update: Sun 24 Aug 2025 06:00:22 +0000
Files and hashes: 1: 0jsEpgPjnRorcdqt6c4SOI8vcXg.roa (hash: AO/58LruOTgEAy4nNakpvGYhSURuS28xd2Bs8Gr4IHY=)
2: BbnlwIhyrOC_wq9s3BdRg9fc6bM.roa (hash: oM0cwxxbDbi/Rv2GFMgcWwBaJUky6UMWTaWR/yxnVcw=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: E8ORzK6KNLljoRKXYeTgnQwQ+DuDwZ+1nCbzfAsodbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:82:b0:5c:b3:d3:f1:59:db:48:35:87:ae:65:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: Aug 23 06:00:22 2025 GMT
Not After : Aug 24 06:00:22 2025 GMT
Subject: CN=1a5ff17b9e0b2dd866b5b5df754b01f3151d0089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4c:dc:56:b2:8b:a9:fd:73:13:64:6e:5d:c0:
9e:17:e1:24:92:33:33:fa:31:69:c4:2e:5f:c7:57:
9c:0f:01:63:32:e6:80:e1:17:31:a0:40:bd:59:78:
9f:7c:a5:37:f5:ab:d2:a9:c7:f5:07:d3:94:1e:c3:
b3:72:d7:5f:46:b1:0b:96:a6:a6:90:e7:a1:45:a6:
ae:75:22:ad:28:e7:e4:77:95:99:71:a5:88:9b:aa:
ec:fc:8b:90:66:83:08:a1:3e:32:ef:b1:f2:cc:dc:
4c:ea:fb:c6:db:9f:1f:9a:5c:03:ae:2c:63:1b:79:
cc:72:a7:e6:39:ef:39:dc:4f:85:55:25:cf:f8:59:
21:08:0c:8c:ca:1c:2d:3d:e2:ea:84:3c:8b:c0:52:
74:ce:44:09:a2:97:0e:d1:2e:14:0c:1a:e8:23:9d:
c9:64:eb:03:30:70:3c:4f:e7:ad:96:3b:c5:a2:90:
54:00:3b:67:41:54:84:72:20:f7:07:3a:5c:23:f9:
d8:0a:75:43:29:ee:1b:6d:15:0c:ef:ae:60:5e:8f:
2e:13:8e:c1:42:5d:4b:aa:90:82:ec:cf:86:b5:4d:
ff:5b:1d:4f:7c:98:85:c6:c6:8e:94:a2:0e:2d:da:
4b:62:e5:8e:7d:d2:c9:40:71:b4:00:70:66:09:5f:
11:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5F:F1:7B:9E:0B:2D:D8:66:B5:B5:DF:75:4B:01:F3:15:1D:00:89
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:48:10:ee:de:1c:e6:de:81:91:e2:e6:cf:9a:d9:2e:77:1f:
b8:b4:7e:ad:4b:34:ad:33:21:10:b6:5b:41:57:82:d6:d4:bd:
26:45:ab:78:55:f4:a1:9d:84:30:55:b1:bf:f3:46:e0:e9:be:
fc:59:df:dc:bd:ed:25:8d:c2:1c:fe:d2:30:9d:28:9e:e4:1e:
60:ab:5a:b2:12:ab:5a:49:25:66:18:d1:2e:ec:6b:5a:fc:82:
47:46:b8:c0:ec:e2:4c:96:31:a1:88:65:9d:b5:fd:ae:e2:ba:
6b:15:04:f9:ae:30:dd:63:56:dd:0a:db:e2:72:45:af:c4:c7:
26:ee:dc:24:44:29:97:58:1d:a2:80:7d:f5:4a:e6:65:21:e6:
52:66:65:78:7b:b6:a8:b0:4f:ea:a2:c4:5f:4d:ee:92:1b:6a:
ab:55:76:17:77:82:21:69:20:43:f6:2a:77:7e:85:13:5c:61:
1c:4d:67:eb:2f:29:db:3f:82:6c:66:2c:18:45:fb:bf:4f:96:
73:c6:73:2b:33:35:e3:e8:90:93:99:29:f8:9f:75:e5:18:f3:
20:5f:60:04:da:83:5b:2a:29:dd:f5:af:0d:be:d6:1a:15:88:
0f:8a:7e:fc:8f:7a:32:e9:e0:ca:10:3d:ff:f4:13:3e:28:d0:
65:af:2f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:11 2025 by rpki-client