Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
File: ES0MTxbciSISn_YFDiNVYjF1ZeU.mft (raw, json)
Hash identifier: mgzsttxXIXH1eVqAXRfolPLJQMlMZhREgsdvI1sLMjs=
Subject key identifier: 3B:75:29:C8:5B:CA:71:8E:5E:0A:85:5D:FC:D6:4C:4C:FD:C1:AC:AE
Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
Certificate issuer: /CN=112d0c4f16dc8922129ff6050e235562317565e5
Certificate serial: 0198D65FF679FF4EC4DB765DFDEE43486968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:09 +0000
Manifest this update: Sat 23 Aug 2025 10:01:09 +0000
Manifest next update: Sun 24 Aug 2025 10:01:09 +0000
Files and hashes: 1: ES0MTxbciSISn_YFDiNVYjF1ZeU.crl (hash: 3am8RpG7TzYJzrS1MidtTma40fPlFjZAserbdDMdG1E=)
2: o9kVSX3gj3H9ZN8cW0Ym-IVcV44.roa (hash: lKG8mtPIe7S1JAZc980NZt3SRdrgtpPphzv++UEyF4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:f6:79:ff:4e:c4:db:76:5d:fd:ee:43:48:69:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5
Validity
Not Before: Aug 23 10:01:09 2025 GMT
Not After : Aug 24 10:01:09 2025 GMT
Subject: CN=3b7529c85bca718e5e0a855dfcd64c4cfdc1acae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:16:a0:d6:87:32:7a:18:b2:02:b9:98:36:
c1:e4:9e:cc:1d:fd:61:10:66:c7:0b:e5:89:43:06:
98:90:d0:74:47:a7:db:12:c9:68:9b:33:15:8c:d1:
46:6d:f2:a2:10:df:88:2e:4b:8c:16:84:53:9e:c3:
dd:ff:7c:a3:6c:1b:12:71:a0:72:a8:6e:d9:30:44:
bc:86:14:c7:21:a6:af:1f:eb:9d:a1:0f:33:be:09:
c0:1c:be:87:ac:4e:76:99:d0:ad:6b:af:a8:2f:bb:
cc:0a:1c:53:aa:df:55:fd:13:0f:2a:d3:07:25:59:
c8:d1:7e:d3:0e:0d:db:ba:58:d6:00:44:00:3d:fc:
93:06:bf:58:64:af:e7:36:85:7f:73:f2:51:6b:81:
78:03:9a:6c:f4:f3:df:05:5f:f5:d5:6d:0c:6c:4a:
fd:fe:7b:23:e6:92:b8:05:d9:b4:a9:92:db:d3:cc:
b1:9a:8b:6d:51:9b:9d:ff:29:e3:aa:26:e3:e1:1b:
47:0d:4c:90:5a:68:ce:71:50:31:a0:64:16:17:ea:
6e:98:69:d7:59:31:28:a1:95:6f:b4:0e:48:6e:5d:
5b:63:f0:68:a5:ef:98:54:db:79:72:c8:27:24:51:
ce:54:fd:3b:09:8b:72:d3:4e:85:f0:3c:e3:50:6f:
36:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:75:29:C8:5B:CA:71:8E:5E:0A:85:5D:FC:D6:4C:4C:FD:C1:AC:AE
X509v3 Authority Key Identifier:
keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:79:b0:e8:fd:40:d4:88:36:7f:76:ee:fc:c3:8e:cf:1e:e5:
de:7f:fe:c5:05:26:ee:86:6c:ab:1c:c0:75:2b:c2:7c:b5:a7:
0e:e6:ae:ea:cf:2a:30:31:88:e8:d9:f5:e2:44:55:34:62:5d:
d3:1a:b2:be:97:9b:44:2c:37:91:46:13:d8:25:eb:3d:e1:c3:
ca:17:ae:e1:44:ef:3c:63:50:91:a5:06:6e:43:98:2b:8f:82:
be:26:18:c0:82:27:5e:33:4e:f4:17:79:b0:2c:24:4f:e3:33:
f2:8d:98:19:1e:52:d8:5c:db:5d:2b:bd:8c:8e:63:30:18:9c:
d8:28:7f:50:e6:54:cc:d0:2f:49:57:a7:ee:c3:1b:65:ec:8e:
6b:dc:84:22:9b:6c:2e:83:43:35:32:12:84:ff:83:a1:a1:1b:
1e:62:37:46:f7:72:a2:4d:5b:01:c0:3e:48:96:86:a7:4a:9e:
5d:8b:7e:f8:cf:e5:0d:c1:0c:14:72:75:90:47:6e:08:cb:e7:
83:81:60:85:34:30:33:13:7a:4a:6d:09:1a:56:dd:2f:e9:90:
57:42:aa:b4:cb:cc:44:35:f3:b6:b9:76:34:9f:47:0f:b0:1a:
13:d3:00:bb:ae:a0:2c:08:52:ed:f6:2b:f3:19:b4:87:fc:cd:
a5:5f:9d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:28 2025 by rpki-client