Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
File: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft (raw, json)
Hash identifier: p2MPJZu8naqch4+1iOjyp5D0fqR4YGF/3ldTnKG6C/0=
Subject key identifier: EE:76:AB:0C:66:D6:AF:0D:E4:D1:44:91:01:2D:E9:03:8E:71:47:28
Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209
Certificate serial: 0198D6CD95156169F8983AA9A45DFD83AFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 12:00:53 +0000
Manifest this update: Sat 23 Aug 2025 12:00:53 +0000
Manifest next update: Sun 24 Aug 2025 12:00:53 +0000
Files and hashes: 1: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl (hash: YXNO/8C2PUAsJRveSlxzdGxQ791k5+jD6aXYGPnB85k=)
2: Siq3LXChf-J1kOdJHhD69EXWg8I.roa (hash: lqCjq1rRDcc2EL/o5bsRWvZA2ja39pIDJxSTPY+sOJk=)
3: ecaHIJxcx1Mgp1auyXMniU5m_AU.roa (hash: nk96xRsdyKFZrxulWblmb/pOYCvYpvcjJToJzvaxa8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:95:15:61:69:f8:98:3a:a9:a4:5d:fd:83:af:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c603666719e979bef0921451a2ec264ed01209
Validity
Not Before: Aug 23 12:00:53 2025 GMT
Not After : Aug 24 12:00:53 2025 GMT
Subject: CN=ee76ab0c66d6af0de4d14491012de9038e714728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bb:f1:89:9d:ae:a4:fa:da:96:fb:22:17:26:
72:86:08:f1:3e:98:9b:b9:95:43:b8:bf:f5:68:9a:
04:d4:a5:88:bf:f9:00:02:d0:13:a3:30:6f:bf:8a:
aa:99:f7:59:27:3d:e0:6b:a4:c0:b3:9b:5a:2f:fa:
08:00:69:8d:83:39:79:4f:81:4d:2c:32:e8:fb:11:
c7:8d:d7:17:3c:e6:34:d8:6a:59:f5:e7:da:51:9a:
a7:a3:0c:39:c7:c7:c6:2a:aa:2d:eb:6b:e1:ae:14:
2b:84:83:25:84:78:13:61:f7:d9:0b:5a:72:b3:f8:
04:03:ea:7e:d7:15:47:f5:77:a9:58:9b:38:85:71:
6a:12:4e:ec:48:8b:7b:0a:05:f6:29:c9:b4:ce:37:
d8:af:c8:b8:c9:25:f9:8e:a4:46:88:11:6c:84:94:
b8:46:b9:2a:26:a4:4b:54:7d:ce:fd:05:d9:70:2d:
40:74:23:3a:87:03:e4:33:f7:da:fe:dc:13:38:83:
a7:90:4c:ad:bf:cc:a6:40:4f:c5:76:0c:5f:36:45:
5b:79:98:53:3b:bd:76:7a:ab:76:5e:ac:51:a6:f7:
ce:35:65:0f:7f:13:0a:11:bc:f9:46:dd:6c:6c:68:
e3:74:dc:58:39:37:00:5c:bb:07:ba:00:c4:eb:34:
e2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:76:AB:0C:66:D6:AF:0D:E4:D1:44:91:01:2D:E9:03:8E:71:47:28
X509v3 Authority Key Identifier:
keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d9:b6:31:a6:13:47:ef:b5:ba:de:15:16:17:ab:07:37:89:
52:b6:bb:16:f9:c9:2c:b1:ee:e8:8a:3d:67:b9:33:7e:48:51:
2b:26:0b:2c:05:eb:3a:b6:53:13:ab:24:80:30:a9:77:06:d7:
19:95:b1:fb:2b:b9:59:3a:ee:0f:19:8e:9b:e7:0f:f4:26:79:
b8:31:16:6a:e1:12:8b:d2:35:dc:82:92:3f:79:a8:4c:50:03:
65:d9:55:cd:7e:e9:23:fe:43:4c:32:f2:85:4d:e5:39:f4:2b:
11:4b:a7:c7:86:43:f5:11:65:49:60:50:d6:49:e1:34:ad:02:
6e:8a:74:1c:ac:23:67:b9:4c:69:4d:f6:f1:4e:21:b7:0e:65:
28:d7:ca:8c:8c:d7:eb:e5:ca:8e:b7:3e:4a:55:58:90:d7:64:
1f:c5:6f:09:3b:3e:74:e4:76:b3:d1:09:99:55:c1:31:cb:83:
3b:13:88:36:e6:d6:59:0e:3a:8d:96:28:ef:cf:e4:ee:ac:f1:
93:06:83:61:b0:ab:12:96:f1:33:94:65:33:0f:82:66:56:47:
13:3c:27:ca:63:2d:47:b0:4e:1f:06:86:76:b4:6e:70:c8:55:
b2:20:19:0e:00:70:95:6a:d8:b6:56:93:3b:ac:87:f0:a7:1d:
13:41:a4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:27:00 2025 by rpki-client