
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
File: EsCzmbynzX_KI2gTkGefXMqVueE.mft (raw, json)
Hash identifier: Fy8lB4sA2I5N90v+7JMabwOq+WqP6fh4QKT/D0hitjI=
Subject key identifier: 78:CC:AD:8E:97:C8:28:22:C1:8C:32:18:BC:7D:51:60:C1:64:29:6A
Authority key identifier: 12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
Certificate issuer: /CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Certificate serial: 0199FC8F5BA36D47B36244D3D5BAE29353C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
Manifest number: 1450
Signing time: Sun 19 Oct 2025 13:01:17 +0000
Manifest this update: Sun 19 Oct 2025 13:01:17 +0000
Manifest next update: Mon 20 Oct 2025 13:01:17 +0000
Files and hashes: 1: EsCzmbynzX_KI2gTkGefXMqVueE.crl (hash: LFakKA6IZyLSYTP2JwRngiUE6csMQtXJRhjgBG11gSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5b:a3:6d:47:b3:62:44:d3:d5:ba:e2:93:53:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Validity
Not Before: Oct 19 13:01:17 2025 GMT
Not After : Oct 20 13:01:17 2025 GMT
Subject: CN=78ccad8e97c82822c18c3218bc7d5160c164296a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f7:d1:18:b7:a6:bd:7a:66:b3:65:43:60:c5:
53:bc:c8:a1:c2:17:d4:ab:e8:aa:08:21:f3:d8:cd:
96:e7:08:11:80:a9:65:cc:af:4e:5f:9f:96:68:08:
56:cb:32:ed:26:47:2b:1b:12:12:79:b8:f7:00:72:
e7:f6:5f:bd:45:4e:79:9b:3e:52:26:77:1f:6e:bc:
a0:89:ce:f4:1b:42:0e:d1:ea:05:d9:04:a1:af:92:
41:f0:98:86:15:a0:b2:5d:56:08:10:c7:2d:fa:4f:
de:ba:1b:ac:57:df:3d:dd:4c:77:1f:ef:82:45:de:
1d:a7:5f:c3:3a:36:39:10:be:55:bf:9a:98:10:b7:
93:48:3f:68:ac:a9:c6:d8:86:47:fd:25:31:db:a0:
10:33:8a:a5:57:5b:95:0c:b2:bf:ff:2d:c1:45:3a:
b5:56:67:47:81:30:f0:63:d9:9d:9a:50:0b:4c:2b:
5b:e2:58:53:1a:53:12:2c:3f:8b:37:42:6a:0e:8f:
4b:83:4a:60:ca:b2:b9:8d:4b:99:e6:7d:ae:9a:ca:
19:96:bd:16:d2:66:d6:45:b1:8e:c4:0b:ce:44:68:
45:cc:25:a6:3e:dd:60:ca:41:2e:63:f0:e3:ac:25:
59:30:71:17:51:01:c0:1f:eb:d9:0b:44:31:31:a9:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CC:AD:8E:97:C8:28:22:C1:8C:32:18:BC:7D:51:60:C1:64:29:6A
X509v3 Authority Key Identifier:
keyid:12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8c:c6:a3:9a:8d:b4:95:3f:49:59:a4:37:c2:3e:88:84:7e:
5b:ed:9a:d9:74:db:77:09:9b:6f:61:23:05:0c:7e:e8:c4:25:
ad:58:ac:8c:2f:73:c6:2e:26:c0:72:cb:ba:7c:c3:63:d7:58:
5d:0c:11:f1:f4:b4:e1:2b:21:61:60:a5:32:9a:47:ca:10:d4:
9d:c1:91:b9:bf:f6:a1:cc:0c:82:5b:f1:71:74:68:92:31:8a:
41:9a:7e:94:9f:73:ff:07:df:af:52:a3:9d:ec:cf:82:64:8b:
d8:c3:2b:27:2a:a4:80:a8:68:0d:54:4e:e9:bc:80:71:0c:33:
eb:e3:46:32:dd:6d:b5:bf:52:27:e2:6c:6e:60:f8:3d:3e:60:
0d:a0:de:7f:69:10:68:0f:33:24:c0:57:95:00:b8:c6:7c:25:
0d:32:f5:82:5b:56:9e:a9:44:8f:5d:50:b5:a5:f3:84:7d:93:
b9:26:7c:cb:9f:c8:23:a3:f6:c9:17:3d:6c:7e:a4:05:ae:6d:
8d:ec:4d:0c:7a:e3:b5:1d:6f:5f:54:30:75:0e:f4:f4:13:be:
6a:be:d9:7d:43:b9:35:b2:98:04:91:e8:57:58:98:cb:59:75:
9f:bc:b2:f2:5a:19:60:74:bc:59:e4:40:02:c9:f2:09:8d:a0:
ad:a6:5d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:46:28 2025 by rpki-client