Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: OL6FxVdvHpku5UAv+GoeiIdvBxcTZx0ZiodnIe/7I88=
Subject key identifier: 2D:7C:8A:74:23:E7:C2:9E:A9:6E:1D:15:3E:1F:B2:7C:29:36:6B:DC
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 0199FC8F2C205CB02254D993B32EC93D54D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: BqSB0LzUkxCMxhYs85DFlClbIiLSdNg2krMJfuhbfdY=)
2: giZEtebKwrV_K5a1acLqZif6N-k.roa (hash: lzFFffl4lpHRD7ZMSU5Ky5FbKZMuom72Ko9x5UDmCAY=)
3: r2MDM9YmqLIjylrH2WoKfJ8F-hk.roa (hash: 5oJl1RSDkKpv/NrAOtgSj/GjDfrDxGm50iGVTH3ViuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2c:20:5c:b0:22:54:d9:93:b3:2e:c9:3d:54:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=2d7c8a7423e7c29ea96e1d153e1fb27c29366bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:ee:40:a2:5f:c3:f2:a8:d9:9e:43:bb:87:
76:e9:f6:1f:51:e5:af:a4:f0:03:20:a6:9c:a9:26:
ba:88:1a:51:8e:d9:c0:92:f3:53:87:b9:a1:67:76:
b0:c7:fe:a9:cb:18:7c:59:4f:5f:a5:13:f6:43:08:
02:32:c6:e7:d5:22:64:c7:7e:37:26:57:24:0f:bb:
52:e0:ee:6f:d7:3b:ec:79:31:c7:fa:88:c1:b9:e6:
e7:90:84:76:5e:10:9e:90:f0:64:28:6e:06:da:95:
28:3c:e6:d0:03:0b:5e:d6:a6:61:9c:d1:7f:c5:ab:
c8:7c:b9:ed:fb:6f:97:4c:5a:1f:d2:c3:7c:27:2d:
54:c3:0f:e0:df:c5:d5:57:91:5a:68:59:85:0c:aa:
c0:c0:a7:90:cd:73:fa:e9:f4:b1:48:0d:45:89:92:
dd:7d:3f:5e:71:ca:01:e8:f2:dd:76:c6:f1:8a:fb:
63:53:98:72:3b:7b:42:fb:09:bf:4f:16:13:ea:08:
1e:5c:a8:85:5a:f4:19:12:fb:8e:4a:b4:49:61:bb:
61:6d:f8:b9:c4:9a:7e:ce:0b:80:6f:8e:b4:e1:df:
00:b0:ba:18:82:e9:13:ae:c9:87:6b:6d:ee:79:00:
86:ce:29:a7:aa:b8:10:b1:93:48:52:b4:02:dc:4d:
6f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7C:8A:74:23:E7:C2:9E:A9:6E:1D:15:3E:1F:B2:7C:29:36:6B:DC
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b2:96:81:d7:47:50:1c:98:a7:04:d1:d3:75:29:51:b7:85:
7b:c2:01:04:6d:9b:00:ab:6e:58:80:82:06:f5:df:1a:26:87:
db:bd:6e:e6:2b:bf:39:33:2c:a8:f5:27:32:f3:55:b0:0f:ce:
02:e4:ad:97:40:78:f4:19:52:4d:87:77:d8:37:0c:45:af:34:
fd:22:6f:61:30:f7:23:5e:7a:bf:05:3e:d4:57:a6:92:11:7e:
22:81:d7:ec:23:57:53:6b:9f:34:ea:87:5c:df:70:a6:bd:68:
ad:e0:41:10:c4:d1:58:83:1a:f8:e8:33:eb:2a:a5:93:9d:6d:
e7:ca:5c:c2:3a:90:42:30:d7:78:c5:57:87:8d:c7:3e:3b:d7:
da:c5:07:d1:fc:2f:b0:14:99:77:41:ca:b9:b7:d9:e7:48:8f:
92:f4:6f:f0:bd:7f:97:0b:44:b6:08:38:5f:70:81:19:dd:29:
5b:8d:d2:48:b8:9d:7b:00:b1:53:57:01:c2:dd:72:0a:a4:de:
a3:a2:20:f2:f7:2d:72:49:1f:24:b4:f0:bc:0d:d4:0b:73:0c:
40:32:cb:2c:95:5f:f5:8a:ed:50:f9:48:a0:8f:e7:40:a4:25:
2e:0d:9e:d6:77:ea:72:66:05:46:ae:99:d0:28:7b:26:e2:1e:
e5:90:78:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:44 2025 by rpki-client