Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
File: EsCzmbynzX_KI2gTkGefXMqVueE.mft (raw, json)
Hash identifier: Sjo8EHKYZXnyLnWsoqKNhjqzDklWP/sw2Sqdxt9xvno=
Subject key identifier: 8D:C9:39:30:26:A4:B9:7E:A2:BA:1F:A5:39:92:DB:72:A4:08:A3:66
Authority key identifier: 12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
Certificate issuer: /CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Certificate serial: 0197B7452C8730E376FE4DF0B3E835B7E5BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
Manifest number: 1323
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: EsCzmbynzX_KI2gTkGefXMqVueE.crl (hash: 28DGer9+BAVLbvxgAJ3f7yqtdluO5CD8O8Zt6pXKIkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2c:87:30:e3:76:fe:4d:f0:b3:e8:35:b7:e5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=8dc9393026a4b97ea2ba1fa53992db72a408a366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:32:d6:c2:5c:b7:13:9d:4f:ed:21:44:2f:
06:e3:f4:de:b9:5d:41:ec:81:3f:d0:b0:07:8e:05:
8f:fc:78:92:ea:86:cb:b6:43:64:e2:49:bf:4b:e4:
58:13:12:30:23:1a:be:84:bd:9c:01:4e:bd:8a:f5:
1a:fa:c4:e0:40:a3:03:2b:9f:8b:4c:a3:32:50:d5:
2f:f9:e0:89:f8:3e:2c:9d:f9:a2:9c:d8:91:21:3f:
51:c1:e5:d3:cb:ad:2a:50:4f:69:ed:07:27:d1:11:
27:d8:b4:08:9b:99:bf:1b:2f:49:fa:64:a8:85:95:
41:bf:07:f1:72:d8:10:db:cd:0e:33:88:98:fe:a0:
0b:70:46:b5:af:cd:b8:6b:95:a8:fc:02:63:24:19:
1c:16:ae:fc:35:26:43:34:1b:ad:53:87:a9:9c:a3:
df:3a:08:6f:62:b7:ef:0a:bf:82:68:cf:2d:dd:ff:
9a:46:e4:b3:56:fd:96:72:79:51:a1:f4:19:13:12:
a9:73:2d:01:2e:88:14:a0:71:01:48:a6:2d:0f:9a:
7d:2d:3e:18:7d:68:b9:ed:37:c6:38:19:99:03:02:
c9:4e:8c:3b:33:f6:60:22:49:5d:be:47:26:2d:5c:
1f:bf:53:a0:fc:4a:69:dc:88:c7:df:e5:e1:ad:fd:
84:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C9:39:30:26:A4:B9:7E:A2:BA:1F:A5:39:92:DB:72:A4:08:A3:66
X509v3 Authority Key Identifier:
keyid:12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:f3:92:86:e4:ed:1d:72:f3:30:e4:28:c2:ba:51:f3:bb:38:
fb:e3:65:f4:c9:42:0a:84:16:b6:5f:69:f1:77:a9:a2:ef:b3:
5c:ba:cc:14:64:e3:d0:44:a4:0a:a0:ce:3d:0e:ad:2d:b6:4a:
fe:d0:c4:b9:cc:d0:00:c0:4a:76:43:81:58:58:ad:1b:b0:fd:
b1:dc:2a:50:ff:27:27:91:81:f2:24:52:2c:52:52:cc:c5:a3:
aa:dd:d7:91:ca:da:45:c5:84:40:82:3c:c2:e2:24:2a:d0:54:
dd:82:d4:54:6e:cf:a3:0e:c0:1c:cf:ce:98:a6:06:97:09:ed:
7e:8a:13:ba:83:73:df:a0:8b:68:1c:ed:9f:e1:ad:15:82:00:
57:95:28:aa:07:39:53:61:14:18:48:40:a6:07:fd:c1:da:ea:
86:3a:3b:7d:14:e8:0a:c7:6c:d8:3f:81:f5:74:58:75:9c:cd:
65:55:79:38:e4:aa:59:41:6c:aa:d1:3f:e0:b8:14:53:9b:a1:
77:95:7a:3b:49:bf:9c:12:89:ec:11:59:2c:33:09:1f:f6:5d:
40:f2:90:3b:45:19:be:66:08:68:60:03:cc:70:db:80:58:94:
91:b5:5e:d6:57:37:7e:19:96:c5:62:c7:a4:44:76:11:9a:e4:
45:a9:a7:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RSyHMON2/k3ws+g1t+W6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzBiMzk5YmNhN2NkN2ZjYTIzNjgxMzkwNjc5ZjVjY2E5
NWI5ZTEwHhcNMjUwNjI4MTYwMDUzWhcNMjUwNjI5MTYwMDUzWjAzMTEwLwYDVQQD
Eyg4ZGM5MzkzMDI2YTRiOTdlYTJiYTFmYTUzOTkyZGI3MmE0MDhhMzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1ky1sJctxOdT+0hRC8G4/TeuV1B
7IE/0LAHjgWP/HiS6obLtkNk4km/S+RYExIwIxq+hL2cAU69ivUa+sTgQKMDK5+L
TKMyUNUv+eCJ+D4snfminNiRIT9RweXTy60qUE9p7Qcn0REn2LQIm5m/Gy9J+mSo
hZVBvwfxctgQ280OM4iY/qALcEa1r824a5Wo/AJjJBkcFq78NSZDNButU4epnKPf
OghvYrfvCr+CaM8t3f+aRuSzVv2WcnlRofQZExKpcy0BLogUoHEBSKYtD5p9LT4Y
fWi57TfGOBmZAwLJTow7M/ZgIkldvkcmLVwfv1Og/Epp3IjH3+Xhrf2EcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3JOTAmpLl+orofpTmS23KkCKNmMB8GA1UdIwQY
MBaAFBLAs5m8p81/yiNoE5Bnn1zKlbnhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNDem1ieW56WF9LSTJnVGtHZWZYTXFWdWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMGNhOWUtN2NjNi00YWRjLThiZTQt
ZjRlZDI2ZTQ0Yzk3LzEvRXNDem1ieW56WF9LSTJnVGtHZWZYTXFWdWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9iMGNhOWUtN2NjNi00YWRjLThiZTQtZjRlZDI2ZTQ0Yzk3
LzEvRXNDem1ieW56WF9LSTJnVGtHZWZYTXFWdWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfOShuTt
HXLzMOQowrpR87s4++Nl9MlCCoQWtl9p8Xepou+zXLrMFGTj0ESkCqDOPQ6tLbZK
/tDEuczQAMBKdkOBWFitG7D9sdwqUP8nJ5GB8iRSLFJSzMWjqt3XkcraRcWEQII8
wuIkKtBU3YLUVG7Pow7AHM/OmKYGlwntfooTuoNz36CLaBztn+GtFYIAV5Uoqgc5
U2EUGEhApgf9wdrqhjo7fRToCsds2D+B9XRYdZzNZVV5OOSqWUFsqtE/4LgUU5uh
d5V6O0m/nBKJ7BFZLDMJH/ZdQPKQO0UZvmYIaGADzHDbgFiUkbVe1lc3fhmWxWLH
pER2EZrkRamn9Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:01:16 2025 by rpki-client