Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
File: Es2a3RYTfourmNeOKjNgvIvW8PE.mft (raw, json)
Hash identifier: Lz0RLPypWZYimPuuCrG2xqcHDFvyNeUvGSSVVQFOB80=
Subject key identifier: 89:99:F8:25:D7:97:83:0D:47:BC:4C:F6:91:D7:FF:03:32:CF:3F:9B
Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
Certificate issuer: /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Certificate serial: 0199FC8F4C30F0D86C96B49BC198BE0383A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:13 +0000
Manifest this update: Sun 19 Oct 2025 13:01:13 +0000
Manifest next update: Mon 20 Oct 2025 13:01:13 +0000
Files and hashes: 1: Es2a3RYTfourmNeOKjNgvIvW8PE.crl (hash: Mj9szE6bGws81w+mmqC01vBTJ0VguZ+uMprzwND0480=)
2: l3o0cPreMKkY6Zin7N9ceMUABWg.roa (hash: IkZ3DQrsK1OPin+reh8WbUesG/v7qTfWkg1bNypSLzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4c:30:f0:d8:6c:96:b4:9b:c1:98:be:03:83:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Validity
Not Before: Oct 19 13:01:13 2025 GMT
Not After : Oct 20 13:01:13 2025 GMT
Subject: CN=8999f825d797830d47bc4cf691d7ff0332cf3f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:37:9c:88:7c:62:76:bc:c0:09:45:0f:dc:
21:18:42:c2:9b:89:d7:23:0f:47:16:43:cb:92:9f:
e0:d7:e8:34:de:05:cc:72:05:7e:ea:3c:31:98:21:
68:d5:7a:8d:db:0f:db:99:2c:d1:a8:bd:61:bc:42:
1e:29:20:78:c5:70:ca:6c:7b:fc:c6:2e:b6:4b:0e:
6a:80:28:d6:f7:d1:73:e4:99:0e:a5:b9:55:43:a9:
ee:33:ac:b7:d5:c3:9a:65:22:39:3d:01:f9:00:c4:
fe:ec:b5:85:13:af:3a:9e:ab:46:72:df:82:5b:93:
d8:14:8e:17:5e:d6:be:31:c5:bf:00:98:ed:d2:49:
e2:31:84:e7:ad:bb:4e:76:15:89:c5:14:fa:8b:1a:
a4:62:14:c9:e8:12:96:a6:29:25:5f:53:e2:48:c1:
44:6f:ff:97:d4:3f:1e:dd:ac:2f:de:79:12:02:60:
df:ea:84:65:1c:3d:1b:85:9f:1e:da:b4:18:1d:b2:
ae:1f:af:8d:22:45:6e:ed:dc:8d:89:cf:1f:9b:56:
b3:4f:16:e6:4c:7b:4d:48:6f:ed:f3:37:e1:e6:34:
0a:0d:fd:82:81:66:ef:52:49:68:d5:01:26:db:62:
1b:ee:eb:f5:e3:3e:3f:51:0a:88:b8:c3:32:2f:fe:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:99:F8:25:D7:97:83:0D:47:BC:4C:F6:91:D7:FF:03:32:CF:3F:9B
X509v3 Authority Key Identifier:
keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:69:64:f4:5e:30:99:51:b1:6e:d7:76:d8:3c:02:87:f3:8a:
1c:cc:cb:1b:a3:55:7c:d5:ca:d0:57:6b:26:a4:e2:ec:c3:02:
ea:bd:c6:fa:91:75:b7:54:a8:3d:07:ef:63:e2:2a:5b:ec:35:
01:1e:bc:85:29:e3:79:a8:d5:03:8e:ff:49:76:09:b8:02:f8:
5e:ed:fd:82:8f:23:cc:2e:26:32:6e:63:77:07:f7:b4:c6:d4:
ca:93:cc:0c:04:97:10:2c:09:fc:65:6c:2c:a9:36:28:4d:f5:
d8:74:21:86:25:33:f9:d5:bd:b1:ef:93:d8:63:5a:a2:43:5e:
43:48:36:bb:ca:1a:77:f5:24:75:b7:a3:fb:f3:1d:90:b9:45:
68:3e:dc:83:ad:e9:01:bc:dc:bf:57:d3:41:90:ef:2c:85:5f:
a7:d4:3d:fa:c0:f0:cf:c7:93:3f:1b:0c:e6:23:56:72:d9:11:
74:23:93:06:47:d3:6e:d4:bd:9e:0a:35:d7:7c:d8:fc:1d:46:
c2:14:9d:20:44:8d:ab:75:35:d9:2a:94:84:0c:08:41:28:d7:
a0:6b:ad:d1:6c:0e:4b:a0:05:fc:3d:63:8e:0e:d4:1e:f5:81:
c2:36:c2:aa:76:2f:2b:59:e9:b8:d9:8f:1f:19:2b:a1:a4:8c:
70:51:19:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:18 2025 by rpki-client