Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File: EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier: KS6k9x0hFvv9q6zfH/SgFzMczeRNUdZ+2rcBJOGTBpA=
Subject key identifier: 9D:0D:02:CF:D6:32:FF:F1:29:92:F3:0A:C4:44:C6:F6:AA:DD:D8:F3
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 0199FCFD6971A45B5F69EB61D762ABB4DA45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 15:01:30 +0000
Manifest this update: Sun 19 Oct 2025 15:01:30 +0000
Manifest next update: Mon 20 Oct 2025 15:01:30 +0000
Files and hashes: 1: 1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa (hash: 7OUkteLe8nHwqeQk9zlC7/yoJRlbZiYexJ0JFvbqk0Y=)
2: 9N77sGkqVPgPzl64HnlAQCAiJiI.roa (hash: 8rr1/h/HEPqZmQ/y+1jYrrv0fcfQ6nqe4NWrJHpDdT8=)
3: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: tUCRYuz6gRmBKBwuwaHbgO+CL1dZyBFKGsFgcgeYSWM=)
4: GxKilLVepL5t_pYKZrftFkg3OVM.roa (hash: XTTU+F0aFJFtKQUVRMP8YL9IwYldi2UmnMmIwVJ9a0s=)
5: Iav_qyY5ImtZ4ANKY_BlD16EiB4.roa (hash: o26HJXNrKDGMVRomgVXRlnZ79f/49jllECyaOAkuhL8=)
6: LTvU0JWVsSQgu0MVSG_VtxZcgMA.roa (hash: xmPZIz9nJEAlB3NELOSNPxxAUtJ8mR0ajbEAHYuN+DA=)
7: prOvIV94SipWj181Foj7X04Xy-c.roa (hash: fEs9h6WUn0wA3/zm4fis57AzqK3n8+IhBDsb2ZxLQfw=)
8: yTPU9KBT_yF9oFmQNNIcb5x-2m4.roa (hash: 4gwBmGsupWB21IC5fpENG4yVPsL+VM2s0DNtBND4taM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:69:71:a4:5b:5f:69:eb:61:d7:62:ab:b4:da:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Oct 19 15:01:30 2025 GMT
Not After : Oct 20 15:01:30 2025 GMT
Subject: CN=9d0d02cfd632fff12992f30ac444c6f6aaddd8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:56:92:cf:46:d7:e8:3d:f6:c4:34:db:39:
e6:7e:11:f6:d6:e0:82:a2:60:fa:8f:47:fa:48:f4:
e3:60:f8:0e:0d:59:3d:1c:08:10:2c:5e:ee:35:15:
7a:57:2b:08:62:31:2c:3f:e6:9d:89:c1:24:54:c5:
4c:6c:c1:e3:46:e6:30:da:f3:07:aa:74:1e:0c:4e:
9d:6a:49:7c:b6:8e:0b:3f:ad:81:b6:9d:7f:a0:71:
60:88:1b:52:b4:96:9d:b3:44:b3:b5:15:60:39:1b:
8c:d2:5e:a6:e4:42:c8:9d:65:c7:67:7c:3f:6e:d5:
cf:89:27:36:74:da:c2:6a:74:66:ad:5c:5b:79:88:
ad:47:44:d1:cb:79:03:44:a6:05:8a:04:be:ed:ff:
39:89:8f:ae:71:42:09:f9:0b:7d:58:36:98:be:42:
97:bd:7b:aa:08:58:33:21:b7:00:be:60:4c:98:8f:
2f:2b:d7:fd:10:2a:ef:a6:41:82:4c:3b:50:70:65:
d6:0e:47:26:85:a9:1b:3f:81:48:8f:c0:cc:d6:67:
82:c2:8f:30:7c:0b:52:07:b7:cd:af:d6:6d:e8:f8:
ef:56:2f:4c:ab:95:be:8e:6b:b4:0f:cb:38:2f:b2:
33:e8:29:d1:f3:6e:5a:69:03:1a:0c:e7:a2:8c:47:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0D:02:CF:D6:32:FF:F1:29:92:F3:0A:C4:44:C6:F6:AA:DD:D8:F3
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fd:b3:05:85:4b:ab:d4:cb:ea:74:f4:08:98:23:c4:37:f7:
43:f6:19:41:30:4a:79:62:d9:fd:af:fa:50:1b:8b:a9:ee:4e:
28:dd:75:a8:41:90:e5:a2:06:38:97:20:b9:4d:fe:26:c7:15:
c4:72:22:d1:91:3c:2d:f0:93:42:21:3a:67:1a:9a:5a:1b:9a:
27:48:56:f7:45:e1:9b:5c:43:ed:5b:f5:26:fe:d4:fe:22:f3:
69:a4:1a:61:5e:a0:ea:5a:54:f7:9a:26:d5:02:13:71:8e:fa:
f3:d8:3f:79:fd:46:d8:af:89:d7:62:92:59:c7:f0:4f:08:2a:
58:6a:1c:bc:c5:27:ef:22:fe:fd:54:c6:52:f4:9b:6d:2c:7b:
99:b4:dc:9f:26:a2:b4:72:3d:53:18:4c:29:e2:b7:b2:45:84:
7d:6a:ba:50:52:f4:bb:84:69:18:7d:3a:dc:70:aa:b9:f0:f4:
8e:74:9d:23:7a:a0:61:f1:d1:e3:be:89:4c:23:98:fb:29:95:
86:e9:20:b2:20:21:bb:30:24:02:0f:43:b6:e0:ca:ed:6d:2f:
21:63:f8:ab:1c:3f:51:b6:a0:d5:05:79:c0:1a:ee:99:8c:d4:
c4:15:df:e8:fd:45:1b:3a:4c:f6:8c:26:9f:cb:59:7e:eb:99:
72:e9:43:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/WlxpFtfaeth12KrtNpFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzg4OTk2NGIzNWI1MWJhOGU1ZTY3OWExNWIxOWEzMWYx
MzM1NzgwHhcNMjUxMDE5MTUwMTMwWhcNMjUxMDIwMTUwMTMwWjAzMTEwLwYDVQQD
Eyg5ZDBkMDJjZmQ2MzJmZmYxMjk5MmYzMGFjNDQ0YzZmNmFhZGRkOGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszNWks9G1+g99sQ02znmfhH21uCC
omD6j0f6SPTjYPgODVk9HAgQLF7uNRV6VysIYjEsP+adicEkVMVMbMHjRuYw2vMH
qnQeDE6dakl8to4LP62Btp1/oHFgiBtStJads0SztRVgORuM0l6m5ELInWXHZ3w/
btXPiSc2dNrCanRmrVxbeYitR0TRy3kDRKYFigS+7f85iY+ucUIJ+Qt9WDaYvkKX
vXuqCFgzIbcAvmBMmI8vK9f9ECrvpkGCTDtQcGXWDkcmhakbP4FIj8DM1meCwo8w
fAtSB7fNr9Zt6PjvVi9Mq5W+jmu0D8s4L7Iz6CnR825aaQMaDOeijEc1MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0NAs/WMv/xKZLzCsRExvaq3djzMB8GA1UdIwQY
MBaAFBLIiZZLNbUbqOXmeaFbGaMfEzV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYt
YWQ2ZjBiZjg4NDM4LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYtYWQ2ZjBiZjg4NDM4
LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/2zBYVL
q9TL6nT0CJgjxDf3Q/YZQTBKeWLZ/a/6UBuLqe5OKN11qEGQ5aIGOJcguU3+JscV
xHIi0ZE8LfCTQiE6ZxqaWhuaJ0hW90Xhm1xD7Vv1Jv7U/iLzaaQaYV6g6lpU95om
1QITcY7689g/ef1G2K+J12KSWcfwTwgqWGocvMUn7yL+/VTGUvSbbSx7mbTcnyai
tHI9UxhMKeK3skWEfWq6UFL0u4RpGH063HCqufD0jnSdI3qgYfHR476JTCOY+ymV
hukgsiAhuzAkAg9DtuDK7W0vIWP4qxw/Ubag1QV5wBrumYzUxBXf6P1FGzpM9owm
n8tZfuuZculD9g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:44:58 2025 by rpki-client