Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
File: Es2a3RYTfourmNeOKjNgvIvW8PE.mft (raw, json)
Hash identifier: HJEKz/zsmSoYC9851RXcrWBSdJYlrBp0lEzBZeYvf58=
Subject key identifier: 40:CE:3B:C9:A4:E2:66:C0:CA:FE:E1:75:D0:6D:7F:14:B6:BD:F2:93
Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
Certificate issuer: /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Certificate serial: 0198D7059C24F598C648B603B01D1E7BFF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 13:02:05 +0000
Manifest this update: Sat 23 Aug 2025 13:02:05 +0000
Manifest next update: Sun 24 Aug 2025 13:02:05 +0000
Files and hashes: 1: Es2a3RYTfourmNeOKjNgvIvW8PE.crl (hash: 0RiX8KDmuNMHkwR6eB13x+1RibGvWGxeQuH83Uqffd8=)
2: l3o0cPreMKkY6Zin7N9ceMUABWg.roa (hash: IkZ3DQrsK1OPin+reh8WbUesG/v7qTfWkg1bNypSLzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:9c:24:f5:98:c6:48:b6:03:b0:1d:1e:7b:ff:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Validity
Not Before: Aug 23 13:02:05 2025 GMT
Not After : Aug 24 13:02:05 2025 GMT
Subject: CN=40ce3bc9a4e266c0cafee175d06d7f14b6bdf293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a7:8a:e2:20:5b:44:8d:09:05:c2:df:ae:44:
58:b5:a1:da:b0:2d:0f:e4:fb:3a:a5:8b:b4:90:ab:
f4:b1:3a:6d:f1:d2:05:34:7f:c2:27:a2:3c:4f:1d:
f3:d0:ed:60:37:59:af:c4:18:4b:6b:3d:c2:ea:19:
85:71:f6:79:15:4d:c8:ef:85:2f:e8:8b:32:c1:f3:
98:64:bf:6a:9d:b4:f3:5c:92:2c:50:c3:21:3d:c8:
3c:26:eb:e1:be:5a:5a:ed:55:99:43:49:c0:48:98:
b9:eb:d1:f1:4b:52:fc:e5:93:1d:0b:46:7d:07:f2:
c6:d9:51:3d:de:db:c0:b8:ef:f3:87:16:54:c2:91:
89:08:14:68:88:92:15:d9:3a:69:65:f8:62:0f:c3:
d6:67:b7:e7:17:8d:5d:40:d9:75:81:85:03:e7:23:
93:ad:6a:57:89:ec:08:88:b9:36:01:55:25:e3:bd:
3e:d8:a5:50:d8:a9:8b:3f:8f:e6:4d:29:c0:87:04:
6e:4f:1c:37:eb:35:4c:2a:65:26:42:f7:21:f3:5b:
ca:18:0b:c3:95:8d:c9:6d:5c:26:4a:3d:ee:5c:64:
34:f7:3d:05:34:54:34:86:eb:22:67:c1:b1:dd:65:
09:dc:44:0e:c5:2e:74:66:c3:ac:3b:43:ad:61:f5:
46:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CE:3B:C9:A4:E2:66:C0:CA:FE:E1:75:D0:6D:7F:14:B6:BD:F2:93
X509v3 Authority Key Identifier:
keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:79:9c:a8:05:fc:7f:ab:06:b5:3c:ac:4f:eb:ba:b3:bf:3d:
4e:ff:d4:de:75:62:14:c4:df:12:98:64:e8:a1:4b:f4:5c:e7:
25:59:2f:3a:97:ae:8b:b5:55:33:a9:05:3f:56:05:06:9c:c7:
a9:bd:77:11:ab:c1:79:35:7c:6c:e1:cc:88:9e:d2:78:32:d2:
f3:a5:b4:a2:e7:8e:0c:8d:8c:4c:ec:bf:b5:75:87:31:72:26:
91:97:9d:bd:fe:1e:18:ad:fd:13:12:08:0a:d2:65:49:2f:18:
fb:1f:f8:f7:39:18:bc:fc:9f:88:a0:c6:1d:58:6b:db:8f:24:
16:de:82:73:d6:3b:10:cd:71:b9:a7:dd:b7:e7:54:2f:bc:63:
3f:ef:6a:0d:fd:9e:c7:c8:ae:00:09:4f:fe:c2:15:30:ce:6d:
bb:ec:44:96:39:ed:c2:d1:ce:bb:21:f1:e8:ec:d0:18:8a:18:
ee:12:dc:d4:40:ed:72:fd:34:f6:2d:fd:04:c0:bc:06:83:92:
c8:0d:ce:e7:f9:96:4f:26:69:d5:10:61:1a:8a:31:49:2e:76:
e6:ac:0c:fa:32:45:b5:d1:31:4b:68:47:37:02:38:b4:97:fd:
ce:80:ea:12:c7:24:4f:98:84:4a:80:dc:21:35:c7:a9:a6:71:
03:94:fe:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:55:08 2025 by rpki-client