Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
File: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json)
Hash identifier: acr6qHu7ngiLOjS6vepDEyNu/0gd4lePRY+Pf31QH4s=
Subject key identifier: FB:20:F1:6D:59:8F:97:6A:47:D0:90:A3:27:99:0C:AF:E0:EB:3C:10
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Certificate issuer: /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial: 0199FCC666E8902D8350A237D8E003F2F764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:24 +0000
Manifest this update: Sun 19 Oct 2025 14:01:24 +0000
Manifest next update: Mon 20 Oct 2025 14:01:24 +0000
Files and hashes: 1: PLgTSJDM8uR1juxDHza74Z8KK_I.roa (hash: /HOZXmmTK+cwdAQ1MraVBMBWJRzaxZ+R5OdqeyYD36Q=)
2: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: 2S4IPz6hrmLRUap/5iqn0z8D5zTIK/JBjVDGPG1+F0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:66:e8:90:2d:83:50:a2:37:d8:e0:03:f2:f7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Validity
Not Before: Oct 19 14:01:24 2025 GMT
Not After : Oct 20 14:01:24 2025 GMT
Subject: CN=fb20f16d598f976a47d090a327990cafe0eb3c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3b:79:c2:6b:fa:b0:15:e5:e9:0f:0d:2f:3a:
09:4d:f0:cc:26:a1:f9:96:0c:3a:74:3d:fe:f2:14:
a8:62:80:67:b8:64:00:f2:17:d4:53:93:8d:41:06:
9e:ef:2a:e4:40:10:bc:0b:b1:6b:27:df:fc:73:33:
08:30:76:4b:99:e9:03:41:98:fc:e2:ac:39:97:61:
65:b7:dc:5d:a4:34:e5:4e:76:da:55:48:e8:e3:cb:
e9:da:7d:b3:62:fd:37:6f:45:65:f2:ba:8c:c1:33:
58:9f:5a:41:8c:aa:f5:0f:8f:9e:a5:db:bf:59:8b:
1a:f5:9a:57:a1:34:4f:59:26:8b:11:60:ad:c9:6a:
04:a3:6b:aa:2b:e5:91:c8:99:08:88:9b:72:0a:aa:
2c:1f:12:b0:72:0a:fa:f1:30:41:1d:ae:27:37:6c:
36:f6:43:5b:10:77:5e:4d:1b:0a:1e:f5:9a:02:84:
01:cc:de:b1:6d:0c:ec:57:48:36:e5:ad:c0:2e:fd:
c5:2d:1a:16:c4:e9:2b:ee:5a:f8:6e:ec:67:a5:c8:
38:e3:a1:04:34:29:4f:47:e8:d1:33:15:06:62:03:
33:4d:75:c0:27:c7:b3:ea:6a:d3:62:83:7d:4e:98:
a9:28:bd:6e:75:91:69:94:fb:2c:18:82:79:9a:08:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:20:F1:6D:59:8F:97:6A:47:D0:90:A3:27:99:0C:AF:E0:EB:3C:10
X509v3 Authority Key Identifier:
keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:06:f9:33:26:fd:5b:ee:06:7e:9b:1d:b4:96:b5:6d:4c:c2:
f2:d1:83:0c:51:55:17:65:39:92:1b:5f:fa:d0:9a:41:2e:d8:
30:00:dd:11:23:b7:75:66:ca:09:0e:bc:c7:81:e8:ca:a7:47:
9d:93:ac:20:5e:52:60:0c:76:a6:f5:24:f6:e0:27:19:4b:d1:
39:a5:dc:56:e5:12:fd:35:4f:67:f4:86:79:93:f3:2d:d9:d6:
76:ea:a6:df:49:a3:fa:96:1e:ae:52:82:d7:43:5b:b3:ad:8e:
5d:9b:26:fc:d9:a7:e7:24:e7:44:ff:10:05:c6:4b:d2:03:39:
20:c7:19:df:1e:52:0c:2c:50:10:92:00:76:66:94:ab:ee:aa:
95:bd:fd:30:4f:d8:76:6a:47:57:b2:e4:da:71:fa:c5:6f:97:
e0:86:c2:36:16:27:c3:e6:3a:ee:8f:47:81:56:83:d3:b2:b6:
3c:8c:fb:eb:98:f0:45:f9:05:e3:e6:88:d7:40:cd:85:c5:be:
1f:e3:b8:85:57:aa:f3:8e:2f:ba:fd:27:1f:de:b7:3f:16:d9:
ab:51:0a:c5:0a:05:55:66:9a:5b:af:98:a2:68:d1:65:a7:ce:
e3:09:70:d8:50:11:f9:e2:55:10:30:2b:f2:5b:13:07:9e:2f:
a2:ec:2d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:24 2025 by rpki-client