Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier: PXAmZmBtofEYCGuSC/OHz50V7YZLsM6w6Icog5R6vnk=
Subject key identifier: C9:10:F1:CD:61:5A:DB:2A:62:AB:6B:AE:1D:7B:4D:16:1C:90:E7:12
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial: 0199FB462D1D93C04ACA88887C8644E2497F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number: 05B9
Signing time: Sun 19 Oct 2025 07:01:44 +0000
Manifest this update: Sun 19 Oct 2025 07:01:44 +0000
Manifest next update: Mon 20 Oct 2025 07:01:44 +0000
Files and hashes: 1: 1-WsRdLTfdTsVKrL2CIRMmrgbopM.roa (hash: /fbcJU0cKGryVcZvtSX4RD7kNCeOfa1xibBR/Nj3P7Q=)
2: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: I3avx8GyestQrZMVULCFwW5OK7+kAd+iv2NVskHV91o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:2d:1d:93:c0:4a:ca:88:88:7c:86:44:e2:49:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Validity
Not Before: Oct 19 07:01:44 2025 GMT
Not After : Oct 20 07:01:44 2025 GMT
Subject: CN=c910f1cd615adb2a62ab6bae1d7b4d161c90e712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:cc:f8:89:43:6c:f4:ce:43:4d:cf:65:7a:
d1:c6:76:9f:07:6d:b9:48:c9:a0:48:9d:70:f4:6e:
46:e7:fd:c8:75:9c:65:f7:32:61:ea:95:99:37:d4:
62:f0:94:46:b5:19:57:12:fa:36:ac:c8:ff:fa:ea:
79:d6:3f:21:86:30:55:c7:3c:93:e1:cb:76:58:a0:
ca:cc:2a:ee:d4:a1:3c:b2:b7:a2:c3:ea:2a:1e:0a:
68:6f:23:6e:bd:58:b8:2f:52:f5:9c:99:49:62:e9:
9d:9b:0a:15:e5:67:0f:c5:a4:2b:40:30:5e:12:d2:
17:60:4e:fe:29:cd:48:fa:2b:b2:7e:4a:d4:81:e0:
2c:2a:da:5a:3d:39:21:44:5e:1f:74:16:9f:8f:87:
03:8c:4a:83:85:6c:0f:5c:b0:a3:93:06:3c:1f:36:
57:47:0d:3d:53:8c:48:b8:37:1e:69:5b:60:45:9b:
dc:dc:61:dc:cc:34:ea:e7:fd:f7:41:5b:20:b4:73:
ff:8d:27:46:09:68:de:71:f4:b3:b1:36:1a:d5:8b:
1f:89:e8:10:a5:d7:2a:a5:dd:85:dc:67:8b:76:8a:
ca:10:01:3a:d5:0b:30:6d:d4:da:31:dd:dd:72:af:
32:10:43:df:83:54:da:f7:b6:e7:40:07:f0:24:f6:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:10:F1:CD:61:5A:DB:2A:62:AB:6B:AE:1D:7B:4D:16:1C:90:E7:12
X509v3 Authority Key Identifier:
keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6b:54:b1:26:d6:f2:8e:aa:1d:91:b1:53:35:68:9e:a5:3d:
2b:ae:69:fa:a8:e1:93:43:1c:3c:cd:4c:01:92:86:7d:fd:5c:
83:37:c2:39:03:23:41:a9:43:e7:fc:e4:66:2d:a7:04:3f:64:
33:5c:e0:ad:b3:61:35:73:0f:83:cf:e9:b7:3b:d9:04:c0:27:
a5:a1:68:2e:21:74:aa:62:72:4b:37:2d:cb:af:5f:ce:e5:fb:
ce:e1:ec:5b:8f:ff:1a:94:bc:2d:3f:42:fd:75:fb:30:ab:e8:
88:a7:d6:ff:1f:45:f6:8b:1b:99:0d:80:0f:e8:1d:43:3e:d5:
34:30:be:92:63:99:7f:6e:a9:f9:13:d7:9d:4c:ac:91:38:dd:
b8:4e:51:3d:6c:cb:9c:5f:de:89:55:02:16:67:b9:af:85:37:
86:b1:05:51:a0:71:da:c1:83:20:71:61:bb:eb:0d:65:37:7f:
e3:64:29:da:f2:0f:81:0a:a8:d3:db:1c:20:20:52:92:57:38:
ff:2a:a8:6b:d6:d6:ba:63:7a:07:d4:4b:9d:f2:24:cf:64:98:
27:42:5b:23:cf:bc:0a:03:22:ab:c1:96:a2:cd:26:14:30:3c:
de:6e:ec:36:1a:d7:dd:51:d0:1a:c2:3b:84:06:fb:16:9e:7b:
11:3e:08:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:19 2025 by rpki-client