Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier: egCpEgHfO2+Sxj5p6GjsUASRoLyHE8EyaLDV770S1LU=
Subject key identifier: CF:95:E7:DD:C5:37:DF:69:87:48:C5:CB:BE:C8:82:FC:26:5C:CE:51
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial: 0199FC217A05E00CAB401A71FEA2382A2D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number: 1248
Signing time: Sun 19 Oct 2025 11:01:16 +0000
Manifest this update: Sun 19 Oct 2025 11:01:16 +0000
Manifest next update: Mon 20 Oct 2025 11:01:16 +0000
Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: leI+PEOo7b+9+snIGdcobft0bomUyCrzwGuon5ozlmQ=)
2: oKyfOldZLGuN5BcDb6Q-5dX2Wxw.roa (hash: k6gLX9MPlPqi07ed6OW+GaDRLIAiAFCmAJRimOBrPk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7a:05:e0:0c:ab:40:1a:71:fe:a2:38:2a:2d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Validity
Not Before: Oct 19 11:01:16 2025 GMT
Not After : Oct 20 11:01:16 2025 GMT
Subject: CN=cf95e7ddc537df698748c5cbbec882fc265cce51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:85:d8:98:83:86:eb:a9:a9:7b:da:57:76:
60:ba:07:81:2e:28:52:f8:d4:ac:6f:b4:98:c4:d7:
bd:49:83:a9:06:6f:2e:35:cf:78:cc:92:4a:20:c3:
3f:ec:ac:5f:40:aa:76:7e:4d:70:a7:c3:fb:20:b9:
87:94:bc:6a:b9:38:e5:ed:f5:00:1c:a6:bd:14:77:
07:a7:a1:5a:8d:40:64:08:f0:6c:93:50:74:f7:2f:
9d:89:22:e9:85:f1:ec:d0:e4:c8:d5:c1:2f:0c:1a:
7b:12:a2:29:d6:c3:0c:5c:2e:0a:71:5f:a2:a2:3f:
5e:bc:cf:67:17:1f:4c:24:3f:e1:c8:34:5b:6f:c0:
c8:e1:30:d1:a6:9a:ba:3e:f7:2f:25:c3:38:b7:80:
f5:91:aa:99:95:ba:80:d0:ed:84:7a:1e:a2:80:c9:
59:f0:21:b3:ed:a2:57:77:52:00:52:8b:90:d2:b1:
9b:ef:ed:04:d5:8e:1d:ac:eb:98:58:2b:a3:13:f0:
f2:47:b1:ff:18:ec:f1:f1:39:6c:df:c8:fc:b3:c6:
12:05:01:34:89:20:46:df:22:9d:d4:29:8f:91:0d:
c6:a0:10:16:e9:98:88:f2:16:19:5c:10:59:9b:66:
e7:8a:e5:49:ff:3e:2f:22:15:0e:f9:20:31:c6:44:
1d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:95:E7:DD:C5:37:DF:69:87:48:C5:CB:BE:C8:82:FC:26:5C:CE:51
X509v3 Authority Key Identifier:
keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:72:61:11:68:85:b7:30:a7:b7:e8:3f:77:30:4d:8b:79:21:
64:ec:0e:a3:b9:c0:bc:dd:a2:04:fa:14:d0:59:95:0e:0b:27:
a4:37:f6:c7:86:30:95:28:7e:94:51:6b:d2:2c:59:37:78:2a:
91:be:c8:03:ef:85:2a:a6:b1:a6:6b:16:89:f9:6f:de:82:28:
ff:f7:9e:23:07:e3:f6:69:f3:ee:1a:07:d2:2b:d0:eb:e1:ec:
f6:8e:af:cc:0b:08:2b:d5:b0:9d:d5:8a:cc:15:33:1d:d7:6c:
08:38:14:4c:03:94:bf:d6:e4:23:4e:84:ef:6b:16:54:df:c4:
27:3d:e2:ef:bb:d3:56:5b:7b:b5:6f:30:13:69:b4:20:6b:d5:
33:4d:16:92:f6:92:48:47:68:29:85:f2:36:73:d8:3b:bb:b3:
56:50:07:e6:4b:18:7d:84:fc:91:33:b0:f1:4a:da:14:e4:2d:
2f:92:ca:2f:b6:75:ff:48:a1:d8:d6:e4:65:5f:d1:a9:62:e5:
24:51:e1:b5:2c:7b:56:5f:94:37:c2:37:57:0a:23:34:3c:24:
ff:1d:80:2d:69:61:f6:28:a1:d1:b1:5b:99:70:30:dc:d8:08:
35:83:d4:0f:3a:3e:fe:4e:06:37:8d:fe:b8:2b:b9:63:0b:26:
d5:ff:da:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:26 2025 by rpki-client