Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
File: ESXJC-alxXrBYrVYE8_HZm7wg1o.mft (raw, json)
Hash identifier: rj5fPFmQm+QlpP+Ddj4fIaFN+uNvS4sUofqUrmoqWIw=
Subject key identifier: 30:70:9A:0C:9E:78:13:FB:02:75:AF:02:18:4E:A3:6D:FC:F5:97:6F
Authority key identifier: 11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
Certificate issuer: /CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Certificate serial: 019D29612B37355D91611C0E3F1820BF0420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
Manifest number: 069F
Signing time: Thu 26 Mar 2026 09:02:07 +0000
Manifest this update: Thu 26 Mar 2026 09:02:07 +0000
Manifest next update: Fri 27 Mar 2026 09:02:07 +0000
Files and hashes: 1: ESXJC-alxXrBYrVYE8_HZm7wg1o.crl (hash: BJ8TnwsfOaBJHEWKbA+V4GcmAky80L2zqVrMJGIM4js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:2b:37:35:5d:91:61:1c:0e:3f:18:20:bf:04:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Validity
Not Before: Mar 26 09:02:07 2026 GMT
Not After : Mar 27 09:02:07 2026 GMT
Subject: CN=30709a0c9e7813fb0275af02184ea36dfcf5976f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a0:2e:52:ec:c4:e7:0d:a9:eb:75:b5:b4:12:
bb:4d:4e:00:84:67:20:d0:a6:c0:3b:0c:a8:60:24:
62:0a:20:17:5a:a7:f6:de:bd:16:85:fb:94:09:e1:
78:00:77:9b:1a:96:67:c9:45:9d:d1:44:c6:c7:b5:
ab:4a:98:df:5b:5b:29:b7:39:bc:34:73:b3:b4:4a:
6c:80:c3:bc:67:40:f0:6c:23:9a:bb:cd:54:0a:be:
be:b9:67:83:fd:25:84:ba:ad:89:bc:ee:1e:4a:7c:
1a:e7:23:40:c0:d5:39:bc:18:e6:da:6c:bc:71:a8:
6b:fe:00:16:2c:11:fb:20:7d:79:1a:40:a7:c8:36:
05:7a:3a:a8:65:c5:bd:41:62:c9:51:58:b5:b6:f3:
ec:80:ab:2c:0e:44:87:7d:50:18:0e:da:be:99:75:
b2:32:75:8d:8d:b4:9c:32:fb:23:9c:c9:5d:69:e4:
25:07:d4:88:ed:6b:c2:d9:6d:5a:2a:04:7b:64:a6:
12:92:79:6b:64:51:57:5f:dc:21:44:ec:57:7b:f9:
74:01:b6:38:cb:4f:eb:81:75:6b:13:70:21:85:02:
a4:69:85:16:85:ba:34:44:fe:b3:27:05:56:0b:46:
fa:06:4d:ae:70:84:b3:1c:82:1c:14:6e:04:00:68:
3d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:70:9A:0C:9E:78:13:FB:02:75:AF:02:18:4E:A3:6D:FC:F5:97:6F
X509v3 Authority Key Identifier:
keyid:11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:08:86:64:c6:1e:34:df:11:06:76:d4:7a:8d:13:19:87:73:
32:76:4a:ce:68:e8:34:63:a8:60:37:a5:0e:ca:df:c1:a0:90:
2d:8f:29:f4:e2:0c:5b:02:55:cb:93:c3:5f:21:a0:af:0d:9c:
a9:2d:fa:b0:73:02:b6:09:2c:ee:9b:ae:fa:ac:f3:84:85:d0:
90:c2:4c:33:53:d6:7e:b9:e3:3e:f1:ae:a0:f7:66:c3:b8:55:
8e:8f:b9:c4:ed:e0:43:7a:6a:09:76:1a:2a:62:99:15:82:5e:
bb:c7:59:be:5d:25:52:4b:b0:46:f9:d3:86:ae:7d:2f:4c:0d:
1c:c0:39:d8:33:47:b4:3f:52:c6:6e:99:5c:2d:f8:14:68:7e:
5f:9a:8d:2d:5b:08:ac:5a:ec:86:13:51:5a:86:2e:17:b9:a5:
12:ed:39:26:e3:e3:7e:f5:6b:87:a6:ea:ea:85:31:d3:87:1d:
a4:c0:a4:3d:17:7a:48:0c:90:41:6b:40:c9:04:54:8f:87:ea:
26:e2:77:77:97:1e:ac:a3:40:f3:93:a3:78:91:60:9c:e9:95:
64:09:7e:a4:b3:b4:f4:e5:db:ca:d7:66:e8:e5:3b:fc:d8:32:
41:90:8e:0c:d9:48:02:34:2f:7d:99:ef:0e:2e:5f:f2:dd:a8:
d7:b3:62:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:26 2026 by rpki-client