Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
File: ESmtAUBy3mYXQ4-xr75BotvcgRw.mft (raw, json)
Hash identifier: tAm2gor7bhZqFkjMQexMUDRKE0p2RTrWI0m1OX7UYVA=
Subject key identifier: CC:07:AC:8C:F0:4A:63:F0:2D:E3:19:A4:98:E8:D5:FF:11:76:E2:23
Authority key identifier: 11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
Certificate issuer: /CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Certificate serial: 0199FC58FA34646FBFECEC8DEF45227BAE2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
Manifest number: 0E8F
Signing time: Sun 19 Oct 2025 12:01:53 +0000
Manifest this update: Sun 19 Oct 2025 12:01:53 +0000
Manifest next update: Mon 20 Oct 2025 12:01:53 +0000
Files and hashes: 1: ESmtAUBy3mYXQ4-xr75BotvcgRw.crl (hash: 1/1swBI2xMhyNQ12lit5xs6tMaPNY/RCkOLi/nYc1Bw=)
2: lTwE90XrCNGA5eJTFjnSjOK1bSM.roa (hash: /sO0aTlcuRH7YD2SVxbEfIzYX6MelmZ8Ycirgk+wG1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:fa:34:64:6f:bf:ec:ec:8d:ef:45:22:7b:ae:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1129ad014072de6617438fb1afbe41a2dbdc811c
Validity
Not Before: Oct 19 12:01:53 2025 GMT
Not After : Oct 20 12:01:53 2025 GMT
Subject: CN=cc07ac8cf04a63f02de319a498e8d5ff1176e223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3d:a0:53:6a:5b:39:2a:6d:93:04:4d:87:0c:
9b:74:8a:e6:07:c6:ec:89:f3:22:24:b9:de:65:ef:
fa:cd:91:90:9a:54:0c:dd:26:02:c1:91:be:ba:8c:
5d:d2:76:9c:f6:d4:83:71:e6:a2:ad:75:a5:2f:62:
b5:07:d2:b3:b3:70:61:6f:95:3c:ea:fa:7b:5f:42:
9a:61:6f:21:d5:04:e3:59:a4:ba:f9:fe:a1:d1:0b:
7d:38:4e:3a:75:8e:16:2c:a9:5e:2d:83:ea:d6:82:
10:52:3d:bd:ed:1f:1a:fd:3d:11:27:39:80:f8:49:
93:68:db:c2:95:d6:3b:d4:6c:6c:60:46:e9:f1:19:
49:19:f4:36:02:ea:d2:96:e1:bb:7d:68:10:97:22:
42:88:51:74:e8:25:49:28:03:49:fa:f4:2b:da:f4:
09:c7:ae:f6:85:8f:1b:22:9c:cd:25:fb:75:e5:e5:
58:07:75:9c:c8:a0:08:eb:50:d0:4c:0b:37:44:51:
90:8f:e4:c9:09:50:36:1a:c0:3e:49:88:7a:ae:8d:
55:3c:ca:6c:06:ca:a3:04:c2:af:0f:92:75:39:56:
11:e0:0e:9b:66:a1:c2:10:63:c8:27:68:b5:68:ad:
c8:61:50:5f:ab:14:ad:97:1e:ca:0a:22:19:e4:fa:
ef:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:07:AC:8C:F0:4A:63:F0:2D:E3:19:A4:98:E8:D5:FF:11:76:E2:23
X509v3 Authority Key Identifier:
keyid:11:29:AD:01:40:72:DE:66:17:43:8F:B1:AF:BE:41:A2:DB:DC:81:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESmtAUBy3mYXQ4-xr75BotvcgRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/ESmtAUBy3mYXQ4-xr75BotvcgRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:6e:10:74:24:4f:d6:6c:38:1e:bb:3e:84:9f:32:ec:a9:2c:
88:34:9e:26:1e:9a:a3:89:54:bf:f3:fe:07:09:b2:14:39:03:
28:1a:57:2e:d7:6e:33:a6:92:22:60:1e:8f:c0:07:90:ed:69:
a5:17:16:d1:50:28:4d:aa:e6:0b:72:f3:a4:0f:57:73:55:00:
3d:54:13:d5:1c:53:93:27:9e:48:e0:21:c9:fd:85:ce:14:1a:
b7:45:48:a2:08:f4:b4:78:b8:30:7f:51:d7:60:c7:aa:1c:52:
4d:13:5d:6f:36:94:fb:e0:45:4e:02:3d:62:22:c5:88:ee:4c:
b9:21:f8:30:3e:35:8e:f4:b0:09:ea:c0:d2:14:7d:25:75:23:
28:8a:45:ef:6f:a0:08:91:36:9e:8e:ec:84:32:d4:d0:ea:bf:
e7:3e:8b:6f:ea:9c:89:dc:04:c1:18:18:28:d6:c2:14:1d:21:
cd:6f:d5:17:14:eb:e7:ba:cd:61:0e:37:a8:2e:d9:78:e4:5d:
83:21:75:03:2d:cf:4f:2a:68:a1:a7:89:3e:e4:ef:8a:a5:b0:
0c:1e:cb:95:b9:95:71:93:dc:a9:96:2f:fd:19:58:d5:0f:96:
99:b9:2f:fb:7d:05:63:df:7f:b4:6a:08:5b:5f:c8:ab:7c:74:
9a:d8:cd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:58 2025 by rpki-client