Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File: EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier: 6797bjgBNNftqAygSp9fau6XNIz6Jh24DM2C8QCPHas=
Subject key identifier: 98:C2:C6:DF:CB:C4:C9:57:49:D7:9B:39:5A:CC:0B:D0:8C:22:5F:03
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 0197D4E1F73045760AB486B78699F6A68151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number: 15CA
Signing time: Fri 04 Jul 2025 10:01:08 +0000
Manifest this update: Fri 04 Jul 2025 10:01:08 +0000
Manifest next update: Sat 05 Jul 2025 10:01:08 +0000
Files and hashes: 1: 1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa (hash: 7OUkteLe8nHwqeQk9zlC7/yoJRlbZiYexJ0JFvbqk0Y=)
2: 9N77sGkqVPgPzl64HnlAQCAiJiI.roa (hash: 8rr1/h/HEPqZmQ/y+1jYrrv0fcfQ6nqe4NWrJHpDdT8=)
3: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: iCEWtA976Vvs6QMjD/2sxa5Uz6EYhXFGNpMGLmcpTNU=)
4: GxKilLVepL5t_pYKZrftFkg3OVM.roa (hash: XTTU+F0aFJFtKQUVRMP8YL9IwYldi2UmnMmIwVJ9a0s=)
5: Iav_qyY5ImtZ4ANKY_BlD16EiB4.roa (hash: o26HJXNrKDGMVRomgVXRlnZ79f/49jllECyaOAkuhL8=)
6: LTvU0JWVsSQgu0MVSG_VtxZcgMA.roa (hash: xmPZIz9nJEAlB3NELOSNPxxAUtJ8mR0ajbEAHYuN+DA=)
7: prOvIV94SipWj181Foj7X04Xy-c.roa (hash: fEs9h6WUn0wA3/zm4fis57AzqK3n8+IhBDsb2ZxLQfw=)
8: yTPU9KBT_yF9oFmQNNIcb5x-2m4.roa (hash: 4gwBmGsupWB21IC5fpENG4yVPsL+VM2s0DNtBND4taM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d4:e1:f7:30:45:76:0a:b4:86:b7:86:99:f6:a6:81:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Jul 4 10:01:08 2025 GMT
Not After : Jul 5 10:01:08 2025 GMT
Subject: CN=98c2c6dfcbc4c95749d79b395acc0bd08c225f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ce:8a:dc:61:6b:ed:c9:c6:76:76:d5:84:33:
cd:d9:59:a0:fc:3d:56:5b:b2:05:86:b7:d1:4d:c5:
6a:8d:a7:a5:45:fb:94:b7:6b:57:c6:1b:2e:15:26:
96:89:85:be:6b:ae:fc:36:46:2c:91:c8:d0:1f:95:
0b:8c:28:ec:9b:a8:74:ff:64:99:97:40:4d:34:ce:
37:e3:be:b4:e2:d6:7b:2d:c0:b7:d4:4a:b6:e0:9a:
88:e9:2d:4f:04:8b:af:1f:d5:93:64:d4:a7:c7:d5:
30:62:4b:0e:4d:18:f5:ea:ff:46:de:21:38:0d:c5:
71:f3:d4:cf:90:a3:d9:c3:6b:15:d9:df:7e:b6:80:
74:95:30:45:60:98:ef:c4:07:1b:b9:8a:02:77:af:
4f:92:b1:96:e9:e1:22:1f:ce:7f:3b:66:8c:f2:d9:
b1:af:c5:89:3a:0a:cd:0e:bb:a6:68:48:31:0d:b9:
5d:0e:20:26:35:f0:ef:f1:ce:74:c2:87:04:e9:0c:
bf:ba:d5:c2:bc:a4:5a:4b:f1:d2:e3:b4:91:29:78:
4e:5e:c3:95:bb:09:e1:24:ce:08:69:c5:e5:03:64:
73:e8:04:cb:d1:96:86:e2:df:17:41:a1:d6:a6:cf:
df:d8:bd:1b:dd:73:cb:cf:86:c2:e3:03:c6:02:75:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C2:C6:DF:CB:C4:C9:57:49:D7:9B:39:5A:CC:0B:D0:8C:22:5F:03
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:75:a7:9d:f0:38:f3:02:52:01:20:06:e6:a6:51:c5:6d:3a:
39:b0:e6:7f:fd:17:c7:30:90:22:77:97:dc:99:08:ed:a9:4f:
18:a3:ce:0a:ff:32:73:82:a6:b9:f7:04:e8:62:df:b1:a2:bf:
8b:a7:3c:35:3c:08:02:39:db:3d:2e:6a:6b:48:ed:54:43:4e:
46:08:83:a2:64:df:96:ae:d7:30:e2:3b:a8:ce:ca:c9:4f:f9:
ce:71:6c:66:a7:14:35:af:eb:08:9a:cd:a4:03:10:41:71:82:
e8:5b:09:b5:6b:06:6a:90:13:2c:10:d9:eb:57:07:cf:69:be:
28:98:03:24:79:9c:8a:fb:49:c7:c1:15:7b:aa:f5:82:bc:1d:
1a:d0:70:1e:db:57:f0:24:e3:c1:ac:be:dd:65:b3:20:b6:72:
e4:2e:ed:bc:78:d7:88:61:11:9a:c8:32:15:c9:d2:fb:5e:43:
c5:d8:96:98:95:53:96:06:29:c3:85:bf:76:e7:ca:ac:0f:cf:
88:03:b3:5f:a8:b8:a7:b7:54:b4:49:0c:5a:af:f1:d7:42:80:
72:bc:00:32:f8:4a:43:b2:4e:4c:32:bd:70:ed:d6:fa:9a:d3:
23:2e:52:79:f7:f0:3b:0c:7c:87:10:30:44:07:80:4d:4e:20:
85:29:0f:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfU4fcwRXYKtIa3hpn2poFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzg4OTk2NGIzNWI1MWJhOGU1ZTY3OWExNWIxOWEzMWYx
MzM1NzgwHhcNMjUwNzA0MTAwMTA4WhcNMjUwNzA1MTAwMTA4WjAzMTEwLwYDVQQD
Eyg5OGMyYzZkZmNiYzRjOTU3NDlkNzliMzk1YWNjMGJkMDhjMjI1ZjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M6K3GFr7cnGdnbVhDPN2Vmg/D1W
W7IFhrfRTcVqjaelRfuUt2tXxhsuFSaWiYW+a678NkYskcjQH5ULjCjsm6h0/2SZ
l0BNNM4347604tZ7LcC31Eq24JqI6S1PBIuvH9WTZNSnx9UwYksOTRj16v9G3iE4
DcVx89TPkKPZw2sV2d9+toB0lTBFYJjvxAcbuYoCd69PkrGW6eEiH85/O2aM8tmx
r8WJOgrNDrumaEgxDbldDiAmNfDv8c50wocE6Qy/utXCvKRaS/HS47SRKXhOXsOV
uwnhJM4IacXlA2Rz6ATL0ZaG4t8XQaHWps/f2L0b3XPLz4bC4wPGAnVD5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJjCxt/LxMlXSdebOVrMC9CMIl8DMB8GA1UdIwQY
MBaAFBLIiZZLNbUbqOXmeaFbGaMfEzV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYt
YWQ2ZjBiZjg4NDM4LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xNmIwMmMtODMzYS00OGYwLWJhNTYtYWQ2ZjBiZjg4NDM4
LzEvRXNpSmxrczF0UnVvNWVaNW9Wc1pveDhUTlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXWnnfA4
8wJSASAG5qZRxW06ObDmf/0XxzCQIneX3JkI7alPGKPOCv8yc4KmufcE6GLfsaK/
i6c8NTwIAjnbPS5qa0jtVENORgiDomTflq7XMOI7qM7KyU/5znFsZqcUNa/rCJrN
pAMQQXGC6FsJtWsGapATLBDZ61cHz2m+KJgDJHmcivtJx8EVe6r1grwdGtBwHttX
8CTjway+3WWzILZy5C7tvHjXiGERmsgyFcnS+15DxdiWmJVTlgYpw4W/dufKrA/P
iAOzX6i4p7dUtEkMWq/x10KAcrwAMvhKQ7JOTDK9cO3W+prTIy5SeffwOwx8hxAw
RAeATU4ghSkP6w==
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:27:17 2025 by rpki-client