Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
File: ESXJC-alxXrBYrVYE8_HZm7wg1o.mft (raw, json)
Hash identifier: 25nwQjeB+k+hTHI0FpG/lJCv36LZNVajerFEXG3SWsk=
Subject key identifier: 7D:FD:F1:B1:D2:48:4B:01:DD:8B:23:17:C6:80:48:D0:C2:13:37:20
Authority key identifier: 11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
Certificate issuer: /CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Certificate serial: 0196D174E546E8431DCC332FAD66A9C65A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
Manifest number: 0356
Signing time: Thu 15 May 2025 01:00:21 +0000
Manifest this update: Thu 15 May 2025 01:00:21 +0000
Manifest next update: Fri 16 May 2025 01:00:21 +0000
Files and hashes: 1: ESXJC-alxXrBYrVYE8_HZm7wg1o.crl (hash: bu8QLJZVB5kgYdCAm73lV+VS04qpnnLAdNieaRMeDcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:74:e5:46:e8:43:1d:cc:33:2f:ad:66:a9:c6:5a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Validity
Not Before: May 15 01:00:21 2025 GMT
Not After : May 16 01:00:21 2025 GMT
Subject: CN=7dfdf1b1d2484b01dd8b2317c68048d0c2133720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f7:97:92:15:68:9e:5b:84:ef:63:ce:fe:8f:
76:21:4b:77:84:cd:2e:bf:14:bd:ac:1f:ab:6d:48:
c0:24:fa:ea:39:c9:60:e1:b3:15:3e:b1:da:97:7d:
b8:d9:6c:81:cb:c0:63:f0:9a:31:9a:97:3d:5d:f2:
5e:35:07:9a:59:f0:0e:c6:f9:89:12:f0:85:9c:ce:
b1:f1:a7:e2:06:73:8a:ae:ae:a8:48:26:fa:f6:3f:
91:4d:4d:5e:96:ef:64:1f:10:03:9d:74:40:2b:1b:
c2:5a:b4:c0:13:bc:b3:fc:93:ba:70:40:a3:2d:50:
aa:b8:e4:82:b3:31:54:f4:56:4c:9a:e5:b7:82:ab:
b2:14:a8:7d:b6:f7:27:fb:4c:9a:ab:75:52:e4:b9:
12:5e:f3:e2:22:63:e2:1e:34:ba:cd:8c:76:8a:32:
53:a9:4b:79:4f:ca:2b:32:32:b0:e6:8f:74:21:2b:
1a:b7:e7:a9:d8:2f:6f:43:10:ea:ca:09:9d:d2:fc:
ac:b1:24:58:51:7f:db:37:00:34:4a:2d:fd:20:27:
21:77:df:b7:32:0f:56:c2:e9:31:66:41:80:49:56:
55:b7:92:6e:a1:57:3a:a3:2c:d6:f2:88:c7:5f:27:
27:e1:b4:cd:1c:4b:6b:2a:06:f5:18:3d:a9:a7:b9:
56:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FD:F1:B1:D2:48:4B:01:DD:8B:23:17:C6:80:48:D0:C2:13:37:20
X509v3 Authority Key Identifier:
keyid:11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:10:5a:18:05:24:81:78:c2:25:61:9a:16:f5:ef:f2:c9:69:
2f:6c:e9:b3:6f:07:62:67:40:dc:d1:65:dd:ec:de:7b:d1:30:
ce:4b:3e:9e:4b:c1:dd:41:07:07:bc:95:c0:f0:41:ad:56:89:
d5:71:6f:ad:5e:5a:37:fd:31:9e:b4:c2:2d:9f:c7:ed:4d:f7:
37:58:06:50:ff:5c:37:39:f0:91:f4:b3:69:a9:cb:b7:86:b2:
75:db:ec:52:9a:37:18:29:01:08:fe:bf:15:7b:05:4e:e8:19:
35:78:ae:01:a0:ea:87:7d:01:fa:7f:b8:46:19:dd:19:cf:1d:
f4:49:07:7b:c2:14:76:f1:72:d9:d6:9e:09:50:c0:80:64:5e:
88:3d:86:8f:21:ba:03:df:01:87:43:b5:a0:4b:3f:98:b8:f1:
57:98:17:51:3e:46:2a:bd:e5:f6:dc:07:c3:33:16:b9:85:ab:
3a:9d:00:09:49:9e:1f:a8:a0:05:3a:69:82:9c:bd:5d:44:e0:
7e:f6:aa:33:6e:54:5c:d6:37:16:03:40:da:b9:e2:a2:a6:ca:
68:ff:2a:53:24:53:04:b7:d4:e4:c4:54:e7:a9:2d:69:01:5c:
ce:4b:d3:39:aa:70:b1:96:07:88:b8:0c:a9:47:29:d1:69:dc:
da:9e:aa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:03:15 2025 by rpki-client