Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File: EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier: f3yZneqVbVokvXNH9U1PTGDbL3y6L6jJuPgc2YGJh8U=
Subject key identifier: 34:B8:EB:51:97:3D:29:3A:F9:D3:AF:4C:64:CA:8D:BF:29:0B:5A:9D
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 0198D7A8FBF1CBF82BB9FFE61C4F51E91A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 16:00:32 +0000
Manifest this update: Sat 23 Aug 2025 16:00:32 +0000
Manifest next update: Sun 24 Aug 2025 16:00:32 +0000
Files and hashes: 1: 1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa (hash: 7OUkteLe8nHwqeQk9zlC7/yoJRlbZiYexJ0JFvbqk0Y=)
2: 9N77sGkqVPgPzl64HnlAQCAiJiI.roa (hash: 8rr1/h/HEPqZmQ/y+1jYrrv0fcfQ6nqe4NWrJHpDdT8=)
3: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: aITzYLPvHimLZ9ejxlGDglFl6afTv4nvsWTvy18/nVw=)
4: GxKilLVepL5t_pYKZrftFkg3OVM.roa (hash: XTTU+F0aFJFtKQUVRMP8YL9IwYldi2UmnMmIwVJ9a0s=)
5: Iav_qyY5ImtZ4ANKY_BlD16EiB4.roa (hash: o26HJXNrKDGMVRomgVXRlnZ79f/49jllECyaOAkuhL8=)
6: LTvU0JWVsSQgu0MVSG_VtxZcgMA.roa (hash: xmPZIz9nJEAlB3NELOSNPxxAUtJ8mR0ajbEAHYuN+DA=)
7: prOvIV94SipWj181Foj7X04Xy-c.roa (hash: fEs9h6WUn0wA3/zm4fis57AzqK3n8+IhBDsb2ZxLQfw=)
8: yTPU9KBT_yF9oFmQNNIcb5x-2m4.roa (hash: 4gwBmGsupWB21IC5fpENG4yVPsL+VM2s0DNtBND4taM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:fb:f1:cb:f8:2b:b9:ff:e6:1c:4f:51:e9:1a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Aug 23 16:00:32 2025 GMT
Not After : Aug 24 16:00:32 2025 GMT
Subject: CN=34b8eb51973d293af9d3af4c64ca8dbf290b5a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:7c:31:d7:0f:95:ff:75:1b:da:e6:21:51:
5d:27:e0:81:b2:88:75:11:f5:4a:4c:88:49:17:93:
d5:05:13:86:80:b4:06:9b:6d:36:51:f4:8f:0c:f0:
d6:d7:76:48:b0:9c:10:7a:d7:f7:9a:f4:4d:a8:5d:
d3:12:c6:10:fd:af:98:73:69:c5:3d:e7:35:d1:34:
d4:28:6b:5d:eb:dd:76:b6:74:80:e1:d1:34:e4:cb:
4a:53:c1:f2:1b:3e:9e:6e:6a:dd:5a:26:8f:48:3c:
6a:09:eb:6f:76:ba:40:d3:9b:77:5c:80:d6:cd:fb:
d2:08:4a:e7:6f:2e:3e:0c:ee:71:43:b2:a7:da:1b:
75:8e:85:07:fd:02:10:18:32:46:d8:45:ae:a8:6f:
e5:1e:31:55:38:8b:a4:bd:2e:86:8e:ca:7b:9e:9e:
85:97:35:7c:d9:fb:a8:7a:4f:8b:f7:ee:2e:9e:6e:
35:d1:b0:07:37:1d:28:b3:1c:29:e5:63:07:24:18:
f0:90:e5:e4:36:b1:99:1d:d7:fa:a8:9e:7a:21:26:
a5:94:5e:78:c4:0e:09:30:64:30:ff:71:f9:13:ec:
44:3b:bc:7e:86:17:71:b1:a0:c8:79:b4:50:fd:85:
f3:d3:1a:7c:4c:1b:4b:59:a5:cb:55:31:05:a9:4e:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B8:EB:51:97:3D:29:3A:F9:D3:AF:4C:64:CA:8D:BF:29:0B:5A:9D
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:9f:88:d6:ba:2a:d8:17:1e:d2:63:c1:00:5c:7f:a4:6b:83:
5d:8f:c7:f9:87:d9:30:b8:4f:85:8c:49:f1:5a:67:6c:69:b5:
a0:d1:1c:5f:1d:ff:82:93:d8:f6:b8:39:23:82:42:e3:a4:56:
98:63:dd:e8:bd:47:3f:57:0c:08:28:2f:80:0f:1a:78:8b:bd:
e1:c3:94:11:88:3d:ad:7d:58:c2:73:84:0e:cd:00:17:50:d6:
6c:f7:c4:3a:5d:25:70:bd:56:db:c9:29:75:94:e8:3b:85:e2:
03:90:2e:9e:04:e2:b8:47:77:07:fb:02:82:9b:e5:3a:98:54:
60:01:2a:a1:14:4d:c8:86:42:28:bf:a0:4f:a4:96:72:71:6f:
28:ea:22:b9:ba:3e:0c:fd:81:64:7f:3f:15:2c:b1:46:76:37:
b3:bf:bd:05:8a:97:5c:f6:9b:ad:7e:56:8d:05:cb:1a:08:56:
8b:bc:42:62:3e:a9:b2:56:06:b5:fc:31:d3:1a:c1:8d:19:8b:
05:13:8d:3b:7c:d1:41:4a:24:68:82:ce:9d:c6:de:7a:75:0b:
e9:0d:53:f7:31:98:16:15:78:99:03:cc:97:91:f3:21:6d:3d:
51:0a:ea:45:20:7e:db:3e:45:70:4f:2a:56:4d:4a:31:5b:2c:
77:1e:88:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:33:56 2025 by rpki-client