Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
File: EsMFQE6AtaTXDSHauG_FtrgBqLg.mft (raw, json)
Hash identifier: dUP2ZQnboXoSht050dekHJIH+OT6xBkEKjxQo5D70A8=
Subject key identifier: 5C:33:87:E6:14:77:B3:F0:A3:E7:3E:BA:EB:D5:F5:08:50:31:50:39
Authority key identifier: 12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
Certificate issuer: /CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Certificate serial: 0199FD6AFE085780DA52FD3C0B2DAECCA47E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:11 +0000
Manifest this update: Sun 19 Oct 2025 17:01:11 +0000
Manifest next update: Mon 20 Oct 2025 17:01:11 +0000
Files and hashes: 1: EsMFQE6AtaTXDSHauG_FtrgBqLg.crl (hash: t305eOIAOw98oTK1rLGfr+KfkzCLQxI9BU8EdYKaTfY=)
2: UKIFbdEhJSvRJBhQ9UZ29Ixwxd8.roa (hash: djsrsXvlKMi85HEyAQmyat+QxO41fFJrWFnZ+KpDs6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:fe:08:57:80:da:52:fd:3c:0b:2d:ae:cc:a4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Validity
Not Before: Oct 19 17:01:11 2025 GMT
Not After : Oct 20 17:01:11 2025 GMT
Subject: CN=5c3387e61477b3f0a3e73ebaebd5f50850315039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:dc:51:32:25:e1:55:a1:3b:3e:9e:12:34:
bf:be:8e:ef:26:b6:7a:08:6d:7b:09:34:32:c1:b6:
0d:1f:01:e7:b9:55:a4:d7:90:c3:bb:59:24:c7:72:
37:f1:54:8b:27:5d:5a:bc:39:2c:27:2b:71:74:5e:
f4:e9:63:06:68:73:5f:37:e2:2d:31:7a:b9:53:69:
3d:cc:6a:58:5d:97:d5:f9:22:05:be:6a:38:74:90:
06:0b:79:33:00:33:68:8a:97:a9:3b:f6:0e:b8:c9:
3d:be:96:69:5b:df:66:49:e7:fc:3d:df:ee:bb:fb:
b1:5b:bf:fd:b0:2d:ca:b2:f3:b1:1f:68:bc:58:93:
d9:a1:1d:25:e9:86:ad:38:f9:45:ad:59:69:99:f6:
a4:bb:fd:ed:89:3b:d6:62:f8:54:86:cf:ea:50:bf:
e6:25:bb:23:fd:a4:41:3e:7a:f8:33:04:bb:3a:f0:
1d:80:b1:14:ba:1c:a6:2d:03:3e:fb:ef:98:2e:f7:
10:41:1c:ff:7c:33:e9:8d:1c:53:2f:15:fe:34:b2:
73:6a:af:46:27:a6:56:88:ee:54:9a:67:77:c8:66:
1f:bf:14:78:2e:68:f2:34:de:93:7e:fd:60:9a:b4:
e4:43:5e:97:41:a0:85:de:b3:0f:c1:d2:a3:f6:d5:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:33:87:E6:14:77:B3:F0:A3:E7:3E:BA:EB:D5:F5:08:50:31:50:39
X509v3 Authority Key Identifier:
keyid:12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ca:e6:95:bb:64:22:e7:09:a1:1c:78:6a:62:cc:de:2f:7f:
9c:e8:e1:02:4b:25:ea:e6:ee:f6:ab:cf:49:3e:7a:1c:21:45:
5f:c5:79:05:94:06:4f:54:f0:36:66:f9:a1:c4:eb:4e:18:fc:
0a:5a:7b:a1:2d:47:5d:72:30:91:b1:ba:9e:2e:01:51:2a:66:
7f:c3:b2:03:db:c6:e4:04:eb:f3:c8:8a:40:a3:32:ea:64:00:
3f:05:ae:3d:cb:63:4e:29:aa:d3:9a:f5:e4:40:22:c3:35:5b:
b5:42:ff:56:4d:e9:d5:9b:ef:86:02:1a:d5:b3:29:a8:6c:4a:
18:e0:a4:eb:ae:a2:bf:d0:e3:3d:2d:d3:ec:36:97:4b:0d:cf:
31:84:1c:98:b9:ae:51:e4:fe:d5:dd:9b:07:74:24:9f:1f:10:
0f:c7:b6:05:2d:38:ac:ab:39:34:34:ee:cc:d8:51:c5:6d:b7:
a4:31:1d:5c:7f:80:d4:c9:ef:7e:4e:dd:94:b4:f5:97:88:ba:
d4:cc:85:8e:1f:27:4a:f2:3b:06:17:12:26:bd:ec:81:35:9a:
41:95:51:59:03:b9:dc:5b:0f:4f:af:21:28:ea:d9:da:b1:ee:
b9:38:37:29:fb:89:bd:94:46:c0:e4:5c:25:a2:47:9e:f9:44:
75:ea:e6:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9av4IV4DaUv08Cy2uzKR+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzMwNTQwNGU4MGI1YTRkNzBkMjFkYWI4NmZjNWI2Yjgw
MWE4YjgwHhcNMjUxMDE5MTcwMTExWhcNMjUxMDIwMTcwMTExWjAzMTEwLwYDVQQD
Eyg1YzMzODdlNjE0NzdiM2YwYTNlNzNlYmFlYmQ1ZjUwODUwMzE1MDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4jcUTIl4VWhOz6eEjS/vo7vJrZ6
CG17CTQywbYNHwHnuVWk15DDu1kkx3I38VSLJ11avDksJytxdF706WMGaHNfN+It
MXq5U2k9zGpYXZfV+SIFvmo4dJAGC3kzADNoipepO/YOuMk9vpZpW99mSef8Pd/u
u/uxW7/9sC3KsvOxH2i8WJPZoR0l6YatOPlFrVlpmfaku/3tiTvWYvhUhs/qUL/m
Jbsj/aRBPnr4MwS7OvAdgLEUuhymLQM++++YLvcQQRz/fDPpjRxTLxX+NLJzaq9G
J6ZWiO5Ummd3yGYfvxR4LmjyNN6Tfv1gmrTkQ16XQaCF3rMPwdKj9tU2VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFwzh+YUd7Pwo+c+uuvV9QhQMVA5MB8GA1UdIwQY
MBaAFBLDBUBOgLWk1w0h2rhvxba4Aai4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83YzdlOTAtYzc4MS00MmFiLTk2OTEt
Y2U5MjNkMTk1MDhmLzEvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83YzdlOTAtYzc4MS00MmFiLTk2OTEtY2U5MjNkMTk1MDhm
LzEvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMrmlbtk
IucJoRx4amLM3i9/nOjhAksl6ubu9qvPST56HCFFX8V5BZQGT1TwNmb5ocTrThj8
Clp7oS1HXXIwkbG6ni4BUSpmf8OyA9vG5ATr88iKQKMy6mQAPwWuPctjTimq05r1
5EAiwzVbtUL/Vk3p1ZvvhgIa1bMpqGxKGOCk666iv9DjPS3T7DaXSw3PMYQcmLmu
UeT+1d2bB3Qknx8QD8e2BS04rKs5NDTuzNhRxW23pDEdXH+A1Mnvfk7dlLT1l4i6
1MyFjh8nSvI7BhcSJr3sgTWaQZVRWQO53FsPT68hKOrZ2rHuuTg3KfuJvZRGwORc
JaJHnvlEdermYA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:56 2025 by rpki-client