Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: lF6GroYkOH0YxnwNgmrL2hAHguVkMLYCipoQ+3UPn9I=
Subject key identifier: EC:6D:88:25:E1:D7:B1:3B:F2:9A:86:03:8F:11:AA:F3:F8:2A:16:A2
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 0198D54EC574C1BD8C694B184B8350853517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:45 +0000
Manifest this update: Sat 23 Aug 2025 05:02:45 +0000
Manifest next update: Sun 24 Aug 2025 05:02:45 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: R6i/5BUFYlRIXLePii626MKljSGuUGq2t/EJgqlhjQg=)
2: giZEtebKwrV_K5a1acLqZif6N-k.roa (hash: lzFFffl4lpHRD7ZMSU5Ky5FbKZMuom72Ko9x5UDmCAY=)
3: r2MDM9YmqLIjylrH2WoKfJ8F-hk.roa (hash: 5oJl1RSDkKpv/NrAOtgSj/GjDfrDxGm50iGVTH3ViuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:c5:74:c1:bd:8c:69:4b:18:4b:83:50:85:35:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Aug 23 05:02:45 2025 GMT
Not After : Aug 24 05:02:45 2025 GMT
Subject: CN=ec6d8825e1d7b13bf29a86038f11aaf3f82a16a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:95:06:21:f1:f6:10:a3:f7:2b:f0:53:41:
9c:1e:dc:fc:70:9e:e4:f5:05:45:0f:47:9e:2b:94:
d1:02:d2:c3:a1:e4:a0:ea:92:67:c1:17:39:28:73:
bc:62:22:98:a7:1a:e6:ec:9d:a6:67:db:f7:95:83:
b3:c5:2b:56:02:fa:c0:89:57:1a:d4:de:06:2a:0a:
61:87:88:d0:df:25:21:33:26:c8:3e:0e:48:4d:1e:
44:4b:23:39:b4:f1:45:8e:25:a0:6b:16:02:8b:4e:
cd:ef:14:bb:52:c0:a4:8a:b9:0e:fd:70:b9:73:18:
5f:d1:e9:70:9c:7a:c9:dd:fd:4c:45:05:8d:b8:ac:
e6:4d:b6:44:e4:80:7a:1a:f6:a2:36:bc:7f:cd:07:
81:bc:a8:09:fa:a8:eb:e5:f2:6b:ec:c5:77:05:2b:
aa:ca:fe:17:94:be:3e:dd:a0:04:96:f9:37:96:1e:
91:fe:f5:88:57:7d:3e:c5:e1:3a:0d:f8:07:a2:d3:
66:ab:25:66:f2:71:ad:e1:69:81:f1:d2:93:fc:53:
70:84:d2:28:1b:4f:fd:ed:6b:38:77:90:61:5f:ce:
e0:d3:ac:59:86:ad:49:af:4a:55:01:d2:56:cd:d2:
08:42:d0:34:ee:21:bc:bd:43:17:fa:68:b2:82:54:
a5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6D:88:25:E1:D7:B1:3B:F2:9A:86:03:8F:11:AA:F3:F8:2A:16:A2
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7c:0d:48:f7:af:9b:a6:b6:86:34:46:01:f3:40:23:af:25:
21:da:e2:b6:cb:de:5d:fe:10:e8:d1:9f:76:a4:38:05:6a:bd:
3a:b8:66:c3:f3:93:d6:a1:f6:35:78:24:0c:1a:4d:4f:84:5f:
e1:84:d9:cc:09:9d:64:15:5e:95:c3:ad:f9:75:01:cd:1d:10:
e9:8f:5b:ca:17:43:c4:e9:39:c4:59:eb:ea:79:0d:75:5e:ce:
74:43:ad:06:ea:be:22:29:08:ae:99:00:54:80:a4:eb:55:a2:
82:41:ef:a9:c3:a7:b1:17:1f:fe:7f:54:d1:f0:a2:0f:09:db:
48:df:24:a4:e0:21:e1:e9:4f:e3:0f:75:3b:b8:7c:1c:47:62:
b0:c2:76:3d:54:32:42:f6:ef:36:76:ec:d9:e4:ea:33:eb:9b:
f8:5a:60:57:bb:65:ae:ae:a0:95:c7:20:ec:93:ee:60:2c:b3:
1c:9c:91:21:66:bd:4b:b2:8d:12:fc:7d:06:52:f9:e3:34:d1:
c4:3b:dc:c3:69:15:3e:03:56:8e:c4:98:19:2f:89:eb:00:f8:
61:f9:57:60:d9:b2:1a:df:84:91:08:42:4c:fa:71:fa:fb:1a:
21:e2:84:95:9e:a9:1b:0a:52:1f:79:91:38:1a:ee:b5:a3:e4:
96:82:43:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTsV0wb2MaUsYS4NQhTUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2UxNzZhNjljY2M5Yzk5NmUxNjEwOTI1YzBiNmJkZjc2
YjIwN2MwHhcNMjUwODIzMDUwMjQ1WhcNMjUwODI0MDUwMjQ1WjAzMTEwLwYDVQQD
EyhlYzZkODgyNWUxZDdiMTNiZjI5YTg2MDM4ZjExYWFmM2Y4MmExNmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztCVBiHx9hCj9yvwU0GcHtz8cJ7k
9QVFD0eeK5TRAtLDoeSg6pJnwRc5KHO8YiKYpxrm7J2mZ9v3lYOzxStWAvrAiVca
1N4GKgphh4jQ3yUhMybIPg5ITR5ESyM5tPFFjiWgaxYCi07N7xS7UsCkirkO/XC5
cxhf0elwnHrJ3f1MRQWNuKzmTbZE5IB6GvaiNrx/zQeBvKgJ+qjr5fJr7MV3BSuq
yv4XlL4+3aAElvk3lh6R/vWIV30+xeE6DfgHotNmqyVm8nGt4WmB8dKT/FNwhNIo
G0/97Ws4d5BhX87g06xZhq1Jr0pVAdJWzdIIQtA07iG8vUMX+miyglSl6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxtiCXh17E78pqGA48RqvP4KhaiMB8GA1UdIwQY
MBaAFHrOF2ppzMnJluFhCSXAtr33ayB8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82YWZjYmUtNmRmMC00Zjc3LWFmMzQt
YzYxODAzYzM0NjU3LzEvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82YWZjYmUtNmRmMC00Zjc3LWFmMzQtYzYxODAzYzM0NjU3
LzEvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHwNSPev
m6a2hjRGAfNAI68lIdritsveXf4Q6NGfdqQ4BWq9Orhmw/OT1qH2NXgkDBpNT4Rf
4YTZzAmdZBVelcOt+XUBzR0Q6Y9byhdDxOk5xFnr6nkNdV7OdEOtBuq+IikIrpkA
VICk61WigkHvqcOnsRcf/n9U0fCiDwnbSN8kpOAh4elP4w91O7h8HEdisMJ2PVQy
QvbvNnbs2eTqM+ub+FpgV7tlrq6glccg7JPuYCyzHJyRIWa9S7KNEvx9BlL54zTR
xDvcw2kVPgNWjsSYGS+J6wD4YflXYNmyGt+EkQhCTPpx+vsaIeKElZ6pGwpSH3mR
OBrutaPkloJDNg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:54:30 2025 by rpki-client