Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
File: ESXJC-alxXrBYrVYE8_HZm7wg1o.mft (raw, json)
Hash identifier: FXqBN6hMIsXOVqc6m4IbxWoBpcSu/TtRIXR9E/phA/g=
Subject key identifier: 15:99:81:3A:CF:6C:14:6A:29:E1:89:A8:9B:BB:5D:7A:C7:8C:C2:C0
Authority key identifier: 11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
Certificate issuer: /CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Certificate serial: 0198D515967AB7519CF9059D4540051F3D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
Manifest number: 0461
Signing time: Sat 23 Aug 2025 04:00:18 +0000
Manifest this update: Sat 23 Aug 2025 04:00:18 +0000
Manifest next update: Sun 24 Aug 2025 04:00:18 +0000
Files and hashes: 1: ESXJC-alxXrBYrVYE8_HZm7wg1o.crl (hash: DkpKsCD5U7aZoPT2ceaRrlXOD4z3WsItLQxHNyGDo2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:96:7a:b7:51:9c:f9:05:9d:45:40:05:1f:3d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Validity
Not Before: Aug 23 04:00:18 2025 GMT
Not After : Aug 24 04:00:18 2025 GMT
Subject: CN=1599813acf6c146a29e189a89bbb5d7ac78cc2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:c4:e6:53:26:8c:dd:70:06:2b:7f:62:85:
38:48:7a:79:7f:38:79:66:e7:24:7a:58:04:76:e8:
9f:fd:4d:31:6b:75:bf:44:bc:f1:83:07:78:09:c5:
83:2c:c9:39:86:94:f8:10:96:42:b0:88:52:46:dd:
e4:a4:48:80:ab:a5:32:47:70:ef:81:1a:14:95:fe:
6c:28:c1:54:3a:67:96:29:5e:51:3e:1c:b0:b3:4a:
78:3c:72:32:05:f7:f7:c6:fd:27:9e:dd:c9:61:17:
c2:ec:d7:ec:4e:ca:6c:4d:8a:c8:2c:2d:78:db:3b:
aa:73:ab:90:e6:c8:6d:b7:bb:f4:cf:71:56:33:23:
fe:3b:e1:e5:b1:f2:73:8b:89:1a:be:27:ff:0e:c2:
74:8e:98:bf:b4:71:1e:e0:f0:c6:cb:97:8e:ca:97:
4f:c3:06:9d:31:29:d6:93:aa:2c:dc:c8:83:42:66:
ec:f7:df:3b:1b:c9:7b:54:19:29:71:09:ad:10:62:
c6:55:de:b6:af:6d:39:19:57:17:d5:be:b5:2c:58:
8a:20:6e:db:f3:53:16:c0:30:5e:94:9d:31:40:1f:
2b:0e:1b:26:01:92:11:66:96:af:c9:f9:79:82:35:
a0:cd:3e:e9:60:42:65:31:66:a8:35:14:24:62:0a:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:99:81:3A:CF:6C:14:6A:29:E1:89:A8:9B:BB:5D:7A:C7:8C:C2:C0
X509v3 Authority Key Identifier:
keyid:11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4f:9b:31:1c:e7:28:27:e4:3c:fd:a2:7d:25:96:6a:8f:19:
94:3e:19:aa:38:9e:49:0e:fd:0e:1c:59:c6:9d:03:98:a0:11:
7f:98:3d:52:25:59:2e:c6:37:f9:3b:b4:51:0d:bc:f9:1a:69:
7c:52:56:f6:57:05:c0:e5:92:22:72:0d:1f:42:4d:a4:20:bb:
d3:e9:40:d9:0c:5b:4d:04:67:91:7e:6a:ea:eb:ab:f4:c9:8d:
95:df:3c:b1:f6:14:7b:ba:f4:7f:40:ca:b3:83:ab:1e:93:ca:
af:83:72:9c:b1:75:ba:f8:1d:9b:35:e4:e1:76:f7:ee:27:58:
27:5f:51:3d:5e:d8:42:09:6d:42:eb:5b:39:b6:60:73:5e:35:
89:4d:e1:e5:f2:d2:f0:e2:5f:09:cd:89:8e:c0:67:61:fb:4c:
88:2e:8e:78:93:5b:c3:42:42:51:2d:28:a0:8e:eb:a5:6f:b8:
c2:10:f8:7b:ff:55:ca:ba:13:d4:45:ed:bc:a0:31:9d:bf:e9:
2f:74:ae:6a:ce:e8:42:62:0f:2f:fa:07:38:fd:bb:44:1f:e0:
03:ea:ad:5a:e6:30:4b:98:2a:55:eb:a9:b1:45:9c:20:a0:44:
da:7a:c7:fa:0f:20:b9:93:b1:1e:2d:08:4b:c0:c7:05:06:02:
ac:72:5e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:04 2025 by rpki-client