Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
File: zESRVYzSSHXbUkJzQQUC_a46Z4I.mft (raw, json)
Hash identifier: v40lpo09VOBIialQsuMsZx3n8g8YdVHSfeVX7w0jrOM=
Subject key identifier: C7:56:BF:C2:BB:34:F6:7C:45:EA:D1:C6:A1:0A:C5:58:4A:AA:F4:CA
Authority key identifier: CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
Certificate issuer: /CN=cc4491558cd24875db524273410502fdae3a6782
Certificate serial: 0196A954C1A24A918DB54ACFBB9B4AE0B0C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
Manifest number: 1528
Signing time: Wed 07 May 2025 06:00:26 +0000
Manifest this update: Wed 07 May 2025 06:00:26 +0000
Manifest next update: Thu 08 May 2025 06:00:26 +0000
Files and hashes: 1: 0jsEpgPjnRorcdqt6c4SOI8vcXg.roa (hash: AO/58LruOTgEAy4nNakpvGYhSURuS28xd2Bs8Gr4IHY=)
2: BbnlwIhyrOC_wq9s3BdRg9fc6bM.roa (hash: oM0cwxxbDbi/Rv2GFMgcWwBaJUky6UMWTaWR/yxnVcw=)
3: zESRVYzSSHXbUkJzQQUC_a46Z4I.crl (hash: ljrEWc6t1gBbOddftWjtBCTiAJa9xQYYDer8yI6xcek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:54:c1:a2:4a:91:8d:b5:4a:cf:bb:9b:4a:e0:b0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc4491558cd24875db524273410502fdae3a6782
Validity
Not Before: May 7 06:00:26 2025 GMT
Not After : May 8 06:00:26 2025 GMT
Subject: CN=c756bfc2bb34f67c45ead1c6a10ac5584aaaf4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:a8:e7:30:57:1c:18:62:a3:1d:e3:71:38:
9e:75:89:b0:f8:b6:8c:44:29:13:b4:cb:ea:82:5b:
35:95:03:48:8e:c2:50:93:c2:58:7f:91:b0:91:6a:
49:e2:57:96:77:3d:cd:10:28:be:8e:88:b6:5a:b0:
90:60:c4:8d:ce:d2:39:90:5f:3b:26:dd:2a:78:db:
bc:16:74:09:44:fc:15:bf:2e:10:e5:b5:52:78:ba:
f1:cb:17:c0:d4:1f:04:1f:85:3d:de:f1:62:e6:9b:
cb:54:12:01:4d:b5:17:f1:69:1c:91:82:18:c8:4a:
df:a4:a4:73:68:b7:f9:f5:72:98:40:db:f3:99:be:
9f:71:56:1d:46:0c:2d:24:0f:b5:a1:03:88:26:82:
30:22:5d:43:69:b8:55:b8:e9:94:32:5d:05:29:70:
99:02:db:31:46:b2:8f:bb:e1:7f:72:97:9b:77:83:
aa:ea:ee:78:61:33:bb:09:7f:d1:a2:6f:69:5b:e2:
34:4c:ca:fd:a3:90:e1:83:fc:6b:63:ec:f2:b9:14:
22:eb:e5:d2:6b:34:5b:66:aa:35:eb:7b:e5:2d:d2:
d3:4d:4a:00:af:34:60:66:b7:45:02:84:c1:2f:8d:
83:69:42:ef:60:1f:9d:1f:99:55:3c:21:d0:a8:60:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:56:BF:C2:BB:34:F6:7C:45:EA:D1:C6:A1:0A:C5:58:4A:AA:F4:CA
X509v3 Authority Key Identifier:
keyid:CC:44:91:55:8C:D2:48:75:DB:52:42:73:41:05:02:FD:AE:3A:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zESRVYzSSHXbUkJzQQUC_a46Z4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/439efe-f130-4931-931c-c8d5c04e3d43/1/zESRVYzSSHXbUkJzQQUC_a46Z4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b2:6c:00:34:4b:71:e9:e9:4a:c0:07:e0:16:b4:89:dd:d1:
aa:7e:e9:72:29:65:40:78:14:e7:3f:21:76:97:61:c2:07:52:
a0:ba:e9:c6:aa:1a:36:93:8b:6c:81:0e:5d:20:9d:e9:5c:1f:
1d:9d:ab:91:02:9e:a5:a2:6f:fb:95:62:cd:b7:e0:15:68:a8:
d1:2a:76:55:71:8b:81:2b:b5:af:13:52:f8:66:9b:91:0a:c1:
eb:f9:71:22:f3:4b:01:3e:70:b9:2c:23:a2:73:b2:28:9a:19:
2d:cf:64:19:e3:41:81:c1:1a:15:ca:77:cf:75:72:21:09:60:
e4:24:a8:bf:02:bc:76:f3:77:23:35:01:87:d3:8b:65:87:4a:
69:2c:3c:d5:d9:7b:13:91:db:9e:4f:ce:02:c8:2b:49:9f:18:
a2:22:84:f2:bc:0d:10:fc:df:2e:c6:fb:d2:6e:f3:09:8c:94:
c1:67:92:4c:e5:66:5f:ba:07:e2:c1:c8:13:5f:fe:56:c6:20:
c5:06:82:07:86:85:f0:85:ba:9c:87:d6:b0:5a:35:92:43:0d:
30:1d:29:c6:7a:71:fb:3e:f9:2a:e5:4c:40:0e:ca:39:e3:fb:
4a:01:b9:cf:b7:f2:93:77:e0:35:c4:6e:9c:6d:f9:9d:6a:87:
76:68:7e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:01:05 2025 by rpki-client