Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
File: EsMFQE6AtaTXDSHauG_FtrgBqLg.mft (raw, json)
Hash identifier: KdZmmm2oxtEbrcxnmeMSyrQL/Ez6ScIWoTesR6EaxyM=
Subject key identifier: 08:8E:33:00:BF:04:7E:52:B5:AC:6A:EC:C5:5B:33:FA:96:62:44:C5
Authority key identifier: 12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
Certificate issuer: /CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Certificate serial: 0198D5F15B4DF77E13909CE00CDAB6AD1D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:21 +0000
Manifest this update: Sat 23 Aug 2025 08:00:21 +0000
Manifest next update: Sun 24 Aug 2025 08:00:21 +0000
Files and hashes: 1: EsMFQE6AtaTXDSHauG_FtrgBqLg.crl (hash: miuVYR5VZJ4Zvey+dKJEApN6s/2E5eo/zuzgEoz2Zfs=)
2: UKIFbdEhJSvRJBhQ9UZ29Ixwxd8.roa (hash: djsrsXvlKMi85HEyAQmyat+QxO41fFJrWFnZ+KpDs6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:5b:4d:f7:7e:13:90:9c:e0:0c:da:b6:ad:1d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Validity
Not Before: Aug 23 08:00:21 2025 GMT
Not After : Aug 24 08:00:21 2025 GMT
Subject: CN=088e3300bf047e52b5ac6aecc55b33fa966244c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:1e:d2:55:82:a9:89:49:ea:c9:b2:95:20:
05:ea:cb:af:8d:5f:81:b5:5d:5f:19:0e:15:48:a3:
93:a1:0e:09:e6:5f:6c:2f:df:d5:d2:3c:74:4f:e6:
97:6a:5d:e9:ae:86:b8:aa:f2:80:6b:a2:44:3d:82:
ed:b0:0a:6c:6e:44:c4:e1:f9:63:74:70:f7:aa:8a:
6f:00:33:83:12:0c:ca:d8:7e:dc:5c:65:b4:d0:f2:
3d:74:a1:7a:bf:b2:d9:f3:91:f6:a8:81:55:dd:94:
1f:b3:2e:87:46:46:04:ac:d9:d2:d0:71:52:e3:8d:
79:69:f0:bd:ae:3a:b7:20:b8:9c:b6:e6:4c:ba:0d:
56:3b:85:eb:b8:b9:3b:ad:43:99:ce:48:6c:e0:7e:
f2:7f:65:ef:66:d7:43:6f:ad:2f:98:e2:ee:fb:b5:
7f:9c:8e:e7:8a:fc:30:e0:6a:2b:65:f8:ea:8a:cc:
73:fe:d2:11:dd:cb:89:9e:7d:dc:25:71:bc:94:3d:
49:bd:d2:f3:3c:21:0f:6d:1e:f1:91:f7:7a:e6:f1:
52:0c:c6:59:66:6b:ec:71:a2:f5:48:f4:5d:14:20:
3e:bf:41:2e:16:b7:85:9b:7d:24:ba:24:64:65:e9:
45:d5:5a:7b:d1:95:f1:64:cb:10:13:2a:27:66:4f:
e6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8E:33:00:BF:04:7E:52:B5:AC:6A:EC:C5:5B:33:FA:96:62:44:C5
X509v3 Authority Key Identifier:
keyid:12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9d:6c:c8:3a:18:71:81:e1:3a:79:6d:01:35:0d:a3:a1:bf:
73:c8:72:e1:e1:a7:f7:17:6e:0e:f5:05:c8:5f:38:dc:0a:06:
54:a7:0e:25:4f:c1:45:53:b2:8f:3b:40:54:6e:b8:10:bd:84:
40:9e:bd:d3:df:6f:7c:70:e8:5f:8e:8d:8a:17:ff:5f:9c:6e:
56:63:dc:33:be:0f:ec:d2:2d:b6:e9:a9:bd:55:0d:f8:fb:6c:
6e:d7:bf:3a:4a:97:d6:84:8b:0a:44:1e:0e:56:a6:40:88:4e:
20:1e:03:5c:8f:82:fa:11:e1:86:3d:18:06:7a:0c:d6:c7:eb:
39:a8:96:49:e0:43:0a:70:fd:69:62:e8:d4:0a:5a:68:e2:e0:
fb:b1:12:94:44:92:83:25:c8:8c:97:f7:35:45:f6:67:c5:14:
ba:fd:e5:17:05:ff:45:b9:b0:05:c9:5d:47:06:44:35:78:cd:
b3:d9:23:f9:56:6d:1b:e0:e9:e0:a4:07:ca:94:45:c0:ee:3b:
0e:10:62:74:d3:c3:e0:74:7a:10:68:c1:f3:cd:2c:6d:3a:12:
8d:af:b8:85:43:fc:be:bd:9f:b9:93:28:9a:4e:39:d2:e7:36:
6c:1d:b9:f8:fe:3f:5f:ea:08:68:5a:ad:6e:a1:2e:dd:af:f0:
e4:6a:5b:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8VtN934TkJzgDNq2rR1pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzMwNTQwNGU4MGI1YTRkNzBkMjFkYWI4NmZjNWI2Yjgw
MWE4YjgwHhcNMjUwODIzMDgwMDIxWhcNMjUwODI0MDgwMDIxWjAzMTEwLwYDVQQD
EygwODhlMzMwMGJmMDQ3ZTUyYjVhYzZhZWNjNTViMzNmYTk2NjI0NGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5Ye0lWCqYlJ6smylSAF6suvjV+B
tV1fGQ4VSKOToQ4J5l9sL9/V0jx0T+aXal3proa4qvKAa6JEPYLtsApsbkTE4flj
dHD3qopvADODEgzK2H7cXGW00PI9dKF6v7LZ85H2qIFV3ZQfsy6HRkYErNnS0HFS
4415afC9rjq3ILictuZMug1WO4XruLk7rUOZzkhs4H7yf2XvZtdDb60vmOLu+7V/
nI7nivww4GorZfjqisxz/tIR3cuJnn3cJXG8lD1JvdLzPCEPbR7xkfd65vFSDMZZ
ZmvscaL1SPRdFCA+v0EuFreFm30kuiRkZelF1Vp70ZXxZMsQEyonZk/mUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAiOMwC/BH5Staxq7MVbM/qWYkTFMB8GA1UdIwQY
MBaAFBLDBUBOgLWk1w0h2rhvxba4Aai4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83YzdlOTAtYzc4MS00MmFiLTk2OTEt
Y2U5MjNkMTk1MDhmLzEvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83YzdlOTAtYzc4MS00MmFiLTk2OTEtY2U5MjNkMTk1MDhm
LzEvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi51syDoY
cYHhOnltATUNo6G/c8hy4eGn9xduDvUFyF843AoGVKcOJU/BRVOyjztAVG64EL2E
QJ69099vfHDoX46Nihf/X5xuVmPcM74P7NIttumpvVUN+Ptsbte/OkqX1oSLCkQe
DlamQIhOIB4DXI+C+hHhhj0YBnoM1sfrOaiWSeBDCnD9aWLo1ApaaOLg+7ESlESS
gyXIjJf3NUX2Z8UUuv3lFwX/RbmwBcldRwZENXjNs9kj+VZtG+Dp4KQHypRFwO47
DhBidNPD4HR6EGjB880sbToSja+4hUP8vr2fuZMomk450uc2bB25+P4/X+oIaFqt
bqEu3a/w5GpbBQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:25:45 2025 by rpki-client