Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
File: EsCzmbynzX_KI2gTkGefXMqVueE.mft (raw, json)
Hash identifier: mD4NJai8wuuFMCwdj6lK7WC4poCER5uDO1HqiWc/6B0=
Subject key identifier: 43:4E:51:2D:92:13:FC:F0:39:70:8A:9A:2A:85:64:0D:A7:E6:5E:1A
Authority key identifier: 12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
Certificate issuer: /CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Certificate serial: 0198D515E1B973421E3D4D9D476716397C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
Manifest number: 13B7
Signing time: Sat 23 Aug 2025 04:00:37 +0000
Manifest this update: Sat 23 Aug 2025 04:00:37 +0000
Manifest next update: Sun 24 Aug 2025 04:00:37 +0000
Files and hashes: 1: EsCzmbynzX_KI2gTkGefXMqVueE.crl (hash: HbceCSg+WxF996xXKnl0/mtyokuOw5Xi/1i8DCIsvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:e1:b9:73:42:1e:3d:4d:9d:47:67:16:39:7c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Validity
Not Before: Aug 23 04:00:37 2025 GMT
Not After : Aug 24 04:00:37 2025 GMT
Subject: CN=434e512d9213fcf039708a9a2a85640da7e65e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:63:00:0d:90:ee:39:df:a0:84:98:c7:0f:29:
49:9f:60:84:d8:32:f6:97:ac:4b:41:1a:7b:72:e0:
ae:2b:64:00:e7:a5:66:16:48:08:3a:43:7f:a8:21:
ba:08:41:2a:9d:2d:76:fe:7e:83:2e:ce:61:e4:80:
de:af:8c:71:4e:30:c6:ef:07:a4:3d:b9:74:a1:2e:
bd:ab:da:b8:b7:6c:99:ab:23:7b:be:a9:98:4d:72:
6d:6c:1e:a4:04:16:8a:0d:ec:89:96:48:73:75:64:
5d:4a:5b:7d:a5:5e:fa:12:8d:f1:fe:99:a6:16:ec:
5a:e9:a0:6f:8f:9e:ee:ab:60:1d:aa:58:6b:f3:1a:
b0:75:ad:b5:c2:34:b4:89:da:68:f4:e8:41:28:b8:
41:50:8e:11:25:eb:9d:9f:3d:55:5b:5c:45:8b:b8:
a7:a8:d8:13:23:3e:93:8f:57:54:01:a3:84:d2:e8:
1c:3e:41:36:ce:ea:91:a5:98:e3:e1:78:82:47:d9:
6d:55:55:89:8f:f1:f7:0d:01:54:79:87:1c:7f:ba:
4a:8d:bd:a0:b5:a9:c9:79:d6:da:00:f6:27:af:1a:
21:ce:6a:44:bd:91:11:8d:37:e9:69:91:c1:9a:51:
66:f5:86:32:09:9b:57:7f:89:a8:b8:ba:ac:26:40:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4E:51:2D:92:13:FC:F0:39:70:8A:9A:2A:85:64:0D:A7:E6:5E:1A
X509v3 Authority Key Identifier:
keyid:12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b0:b7:a0:0a:72:f2:70:d8:dc:d8:68:2f:7a:1b:57:5e:93:
5a:e1:c2:92:00:91:21:15:77:15:7e:ba:3e:fe:c9:f6:fa:bf:
d6:f3:29:e5:55:25:33:6d:be:a6:15:c5:82:03:99:3f:c2:24:
3c:9f:1c:d4:90:00:3b:43:65:86:14:a0:33:32:5d:60:c6:18:
38:a1:c0:59:c8:72:5c:1e:d7:70:65:97:d7:be:d1:32:d8:12:
98:e6:c8:46:29:be:e3:a6:1f:90:af:9b:37:7e:f1:c3:bd:bf:
0a:49:80:0f:09:6d:75:b7:36:cc:99:12:8f:e6:31:33:c2:27:
4e:23:bd:13:03:51:8b:27:5a:e4:5f:61:82:22:89:ed:13:de:
47:b6:8e:72:e5:cd:29:d8:13:90:61:87:98:7c:d0:41:e2:44:
ef:a1:59:96:7e:65:ee:be:a2:63:32:54:f6:b7:cd:ce:91:f4:
f3:37:06:28:aa:3b:4f:e7:a8:34:29:2f:39:25:f1:46:2f:bf:
90:c2:83:af:dc:0e:05:24:7b:ba:0a:44:9c:ab:29:58:36:1a:
bd:c2:48:c8:42:fb:62:20:d4:d5:0c:57:e6:19:83:86:fd:de:
40:d2:b8:01:25:d4:7c:ed:e5:71:cd:da:10:3d:b3:8f:3a:ac:
e9:bd:bb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:02 2025 by rpki-client