Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier: DYQ9rYLLamw7a6m52oqG83KaSpU0lRWgYc3koABSvHY=
Subject key identifier: 04:B9:8C:90:1F:8B:4A:E4:39:49:4D:C9:38:2A:AE:BB:DC:0B:94:87
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial: 0198D5BC19DB9C701F064044628C4D361F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number: 0521
Signing time: Sat 23 Aug 2025 07:02:11 +0000
Manifest this update: Sat 23 Aug 2025 07:02:11 +0000
Manifest next update: Sun 24 Aug 2025 07:02:11 +0000
Files and hashes: 1: 1-WsRdLTfdTsVKrL2CIRMmrgbopM.roa (hash: /fbcJU0cKGryVcZvtSX4RD7kNCeOfa1xibBR/Nj3P7Q=)
2: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: TtRhum+18ykU7aTa79mDCBTWMqRhjq6kMNJxRy2guFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:19:db:9c:70:1f:06:40:44:62:8c:4d:36:1f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Validity
Not Before: Aug 23 07:02:11 2025 GMT
Not After : Aug 24 07:02:11 2025 GMT
Subject: CN=04b98c901f8b4ae439494dc9382aaebbdc0b9487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ca:9d:17:8e:2d:b8:3c:f2:65:16:ef:8f:e0:
df:5a:ef:b9:ae:c7:60:ff:15:06:7d:fe:f0:eb:15:
11:a1:e9:d1:d8:d9:07:68:5b:da:1e:64:56:b8:83:
07:a0:94:6b:b5:69:25:03:b8:fc:38:cd:16:94:3e:
8e:03:1b:db:39:b8:89:09:ba:82:92:d1:5d:4f:16:
27:81:5e:07:d6:89:91:46:c1:e8:b5:06:5d:13:f0:
be:40:2b:71:19:a7:6a:85:eb:1c:bf:fb:7e:83:f7:
10:45:77:d6:08:7d:69:d7:e6:bf:1d:eb:d6:a3:cb:
09:0c:17:32:eb:0a:9b:a4:d7:1a:28:e9:73:db:20:
d5:5a:e4:48:cd:bd:2f:89:51:80:82:39:18:8e:3d:
c7:48:9c:fc:0c:27:db:1a:7e:27:22:7a:b1:dc:11:
fe:14:1d:56:d8:d6:37:43:61:9c:3a:10:73:ad:5c:
3f:5a:a3:2b:a8:05:c4:ff:0f:d4:7e:4f:8b:f8:0a:
c6:df:8d:d2:0f:3a:71:ba:93:2d:aa:63:24:43:ea:
3b:10:c3:ac:49:5a:59:f6:b2:78:09:1e:ab:e4:e0:
a3:f9:36:6f:f7:f1:4e:ee:80:ae:d6:3e:56:f5:09:
04:2d:6e:1a:df:24:a8:81:43:1f:40:a8:e1:b9:74:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B9:8C:90:1F:8B:4A:E4:39:49:4D:C9:38:2A:AE:BB:DC:0B:94:87
X509v3 Authority Key Identifier:
keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:f3:a7:7b:58:bd:91:4b:4a:d4:ac:07:5a:8d:0a:c1:41:6c:
66:0c:3c:07:09:8a:fd:6c:d7:10:13:8d:9c:83:b9:09:0c:8e:
fa:88:c4:44:0b:0b:fe:78:77:dc:d4:43:ce:aa:7d:9a:9f:2f:
36:2f:be:56:fb:41:3e:d4:39:be:fb:59:13:a1:42:9c:7f:1d:
ce:be:8d:80:d3:49:8e:8a:74:7f:52:ad:45:fb:97:c6:10:23:
6b:c9:2f:1f:86:83:0a:e2:77:fd:f7:d7:b9:b9:ef:84:f5:cd:
66:95:98:10:c8:c8:96:1d:24:92:7f:28:0f:23:4e:aa:56:b6:
34:71:07:af:e8:dd:72:ac:52:9f:ec:46:26:54:94:ec:cf:f4:
11:7d:e0:0a:84:bc:76:2d:e3:9b:6b:ed:61:46:15:a7:43:b5:
ae:82:8b:d9:46:0b:d6:51:fb:2d:1b:4c:24:46:3b:ec:5a:5d:
31:4d:2f:00:c9:d5:0f:bf:47:e8:9c:80:92:ef:47:d2:eb:4f:
b2:46:d1:bc:42:17:f3:a3:9a:5d:24:1d:df:33:4c:54:0e:98:
13:06:b3:a7:c4:14:6f:81:c8:69:29:d6:55:36:dc:61:77:13:
21:92:a0:52:8e:5a:d4:d4:94:3d:86:0c:07:78:08:42:c7:b6:
da:19:7e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:01:08 2025 by rpki-client