Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
File: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft (raw, json)
Hash identifier: 4rjNEac/Nniko5XaeFy/1op7bgigZJW0Aj8pkXU+UKA=
Subject key identifier: 92:A9:0D:25:82:49:AC:1C:6E:3A:F1:49:B4:01:B1:43:CD:08:F6:95
Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209
Certificate serial: 0199FC58BB1BB4EFCD64E295963561396C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:37 +0000
Manifest this update: Sun 19 Oct 2025 12:01:37 +0000
Manifest next update: Mon 20 Oct 2025 12:01:37 +0000
Files and hashes: 1: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl (hash: f8Pt5xMv9RMgwJO+kHZaYQgVKLDzTGnioy8YlIyY8HA=)
2: Siq3LXChf-J1kOdJHhD69EXWg8I.roa (hash: lqCjq1rRDcc2EL/o5bsRWvZA2ja39pIDJxSTPY+sOJk=)
3: ecaHIJxcx1Mgp1auyXMniU5m_AU.roa (hash: nk96xRsdyKFZrxulWblmb/pOYCvYpvcjJToJzvaxa8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:bb:1b:b4:ef:cd:64:e2:95:96:35:61:39:6c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c603666719e979bef0921451a2ec264ed01209
Validity
Not Before: Oct 19 12:01:37 2025 GMT
Not After : Oct 20 12:01:37 2025 GMT
Subject: CN=92a90d258249ac1c6e3af149b401b143cd08f695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:92:86:61:3e:53:e7:a5:de:4a:ff:ec:ee:e4:
96:d5:11:5d:28:e5:ff:33:8d:03:3c:fa:c8:f9:39:
c4:8e:11:1e:05:ca:76:f4:e8:40:5c:d6:2c:67:d9:
0d:71:25:d6:e0:36:4b:85:f3:33:99:76:e1:75:36:
59:85:94:42:0d:06:2b:17:11:20:92:8c:c1:79:21:
be:b9:c5:b1:cc:09:3c:2d:7d:dd:3d:df:73:51:6e:
07:4d:a3:43:a3:83:16:cb:1a:70:f6:87:e8:95:b8:
f2:cf:17:1f:b5:86:14:e4:fc:6e:c0:0e:6a:fc:b6:
b0:c5:9a:4d:1f:2e:5d:a6:d4:76:05:36:92:1f:d9:
9f:a8:13:e3:d9:76:39:ef:1d:ad:75:48:74:43:ce:
83:6f:30:20:aa:e5:22:bf:2d:2f:4a:95:0f:3a:c6:
1a:b4:b8:4b:92:66:83:a3:1b:fe:b1:45:74:ed:6d:
1c:83:e5:4e:1b:c1:12:af:b1:b4:24:7f:6a:d5:02:
2f:4a:0e:3a:fb:7f:40:b0:f5:8c:b9:c9:52:a2:2f:
5c:7d:69:e2:81:3e:2a:4f:58:ac:a0:03:7d:7f:64:
83:88:b7:14:2d:bb:10:f7:86:44:a1:23:0c:0f:23:
7a:7f:80:ba:48:3d:d7:19:2a:c9:95:48:d5:60:85:
81:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A9:0D:25:82:49:AC:1C:6E:3A:F1:49:B4:01:B1:43:CD:08:F6:95
X509v3 Authority Key Identifier:
keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:94:a7:19:3a:1f:19:5c:fe:53:09:b1:56:1a:ff:30:7d:77:
21:67:c8:5a:c7:4f:64:0c:8f:31:04:32:96:59:cb:74:73:68:
cd:cf:b4:84:4c:ea:df:80:8e:33:9f:67:96:b4:17:7a:71:77:
3c:1e:37:90:d9:7d:22:40:74:d5:da:89:c8:d7:17:9c:f2:cc:
06:bc:ed:40:44:29:59:b9:db:df:a2:ee:20:97:fb:54:fc:95:
87:f0:9a:11:53:42:ac:9b:35:cf:44:d4:78:7e:09:c1:39:21:
e9:e1:8e:3d:f2:bf:cc:60:58:a6:ff:0b:6a:3c:2c:ba:7a:80:
ce:cf:96:c3:4c:13:4e:29:29:97:8c:18:48:1b:29:69:8b:d1:
54:7f:e6:3b:c9:e3:7c:ad:a8:05:4f:d6:62:c2:67:52:e7:78:
16:13:1e:a1:ce:4b:ab:d4:e8:09:2b:cb:4e:54:bd:a9:c4:0c:
ed:81:04:e5:f0:0c:68:74:8a:59:72:37:7d:01:68:83:54:1e:
b7:fa:3e:3c:db:1d:ae:9d:25:63:e0:ae:9a:c9:42:46:64:39:
40:61:10:df:66:b2:1e:8e:af:69:b5:e6:ca:37:b3:1b:db:d7:
8a:58:22:23:0c:14:23:7e:4a:94:ef:ff:2b:c6:31:05:b4:76:
3f:79:85:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WLsbtO/NZOKVljVhOWxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzYwMzY2NjcxOWU5NzliZWYwOTIxNDUxYTJlYzI2NGVk
MDEyMDkwHhcNMjUxMDE5MTIwMTM3WhcNMjUxMDIwMTIwMTM3WjAzMTEwLwYDVQQD
Eyg5MmE5MGQyNTgyNDlhYzFjNmUzYWYxNDliNDAxYjE0M2NkMDhmNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5KGYT5T56XeSv/s7uSW1RFdKOX/
M40DPPrI+TnEjhEeBcp29OhAXNYsZ9kNcSXW4DZLhfMzmXbhdTZZhZRCDQYrFxEg
kozBeSG+ucWxzAk8LX3dPd9zUW4HTaNDo4MWyxpw9ofolbjyzxcftYYU5PxuwA5q
/LawxZpNHy5dptR2BTaSH9mfqBPj2XY57x2tdUh0Q86DbzAgquUivy0vSpUPOsYa
tLhLkmaDoxv+sUV07W0cg+VOG8ESr7G0JH9q1QIvSg46+39AsPWMuclSoi9cfWni
gT4qT1isoAN9f2SDiLcULbsQ94ZEoSMMDyN6f4C6SD3XGSrJlUjVYIWBeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKpDSWCSawcbjrxSbQBsUPNCPaVMB8GA1UdIwQY
MBaAFBLGA2ZnGel5vvCSFFGi7CZO0BIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNZRFptY1o2WG0tOEpJVVVhTHNKazdRRWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jMmQzOTktNGFlOS00NDMxLTkxNjEt
NThlZmEwYmVlMDg0LzEvRXNZRFptY1o2WG0tOEpJVVVhTHNKazdRRWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jMmQzOTktNGFlOS00NDMxLTkxNjEtNThlZmEwYmVlMDg0
LzEvRXNZRFptY1o2WG0tOEpJVVVhTHNKazdRRWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZSnGTof
GVz+UwmxVhr/MH13IWfIWsdPZAyPMQQyllnLdHNozc+0hEzq34COM59nlrQXenF3
PB43kNl9IkB01dqJyNcXnPLMBrztQEQpWbnb36LuIJf7VPyVh/CaEVNCrJs1z0TU
eH4JwTkh6eGOPfK/zGBYpv8LajwsunqAzs+Ww0wTTikpl4wYSBspaYvRVH/mO8nj
fK2oBU/WYsJnUud4FhMeoc5Lq9ToCSvLTlS9qcQM7YEE5fAMaHSKWXI3fQFog1Qe
t/o+PNsdrp0lY+CumslCRmQ5QGEQ32ayHo6vabXmyjezG9vXilgiIwwUI35KlO//
K8YxBbR2P3mFhg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:42 2025 by rpki-client