Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
File: EsShfSBma32NKx_-GKRoevkmIY8.mft (raw, json)
Hash identifier: Uns8r1RKQHkK4TWP6F7qdbacYJmn5g8+znZ70nKnoVw=
Subject key identifier: D1:D5:BD:B3:78:D6:68:53:6C:A5:F6:40:0A:70:4C:F7:81:B6:12:C0
Authority key identifier: 12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
Certificate issuer: /CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Certificate serial: 0199FF599DCAFA5388F24556A84C4A3C46A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 02:01:27 +0000
Manifest this update: Mon 20 Oct 2025 02:01:27 +0000
Manifest next update: Tue 21 Oct 2025 02:01:27 +0000
Files and hashes: 1: EsShfSBma32NKx_-GKRoevkmIY8.crl (hash: K1WTvg0y9PCm/x0goM64V/tGXyq0aZzElgYoYxHrZfc=)
2: nfi8L76Q0CcXdXMuyopjIwMNN1s.roa (hash: yyBzF5vSH0UZ1Eb70mzyyMArzuUjMy9cXtif0oEgNm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:9d:ca:fa:53:88:f2:45:56:a8:4c:4a:3c:46:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Validity
Not Before: Oct 20 02:01:27 2025 GMT
Not After : Oct 21 02:01:27 2025 GMT
Subject: CN=d1d5bdb378d668536ca5f6400a704cf781b612c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:84:85:dc:f6:35:fb:44:8a:96:fe:75:97:b0:
08:38:a0:0c:7a:8e:ab:bc:32:d4:0d:fe:ed:44:98:
aa:da:55:df:d9:f6:55:6e:0a:aa:88:9b:08:0d:28:
ae:d1:3c:54:c8:6d:84:b3:ed:f7:0f:7f:ee:e5:ad:
e1:24:5f:89:19:85:d2:f9:4d:9b:b3:68:7b:a3:2d:
d3:b6:e4:fe:1e:a6:2f:59:0f:bd:ec:3b:e9:20:f2:
13:35:10:1e:ef:b4:9d:4e:e1:8d:8c:6f:95:54:19:
29:06:33:4a:9c:38:8d:e6:14:9a:04:d9:01:24:ec:
d7:43:e1:f2:ea:8e:c9:4e:51:31:22:ab:6a:5e:9f:
a6:db:39:1d:82:d0:57:fc:af:d7:b4:53:88:a7:48:
4d:6b:79:95:e4:09:32:af:99:b8:c8:9c:c6:22:5e:
fc:00:69:e3:a8:bc:7e:41:3a:6c:4d:37:80:d4:58:
36:6e:96:df:d9:a6:08:24:bb:b6:48:35:3f:00:76:
db:f8:df:bc:c5:df:f8:80:5e:66:7f:7c:d5:5b:83:
8d:7f:e5:d8:7b:ff:dd:54:e9:6a:e2:16:88:f3:a5:
84:7c:7c:3d:98:59:f5:7a:e8:62:1d:1d:64:7d:ed:
9e:4b:64:37:46:ab:a8:e2:6f:cd:43:e4:7b:02:08:
e2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D5:BD:B3:78:D6:68:53:6C:A5:F6:40:0A:70:4C:F7:81:B6:12:C0
X509v3 Authority Key Identifier:
keyid:12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c0:91:c2:be:e8:87:74:84:d5:21:3e:aa:64:a8:af:06:83:
13:a7:6e:1c:8e:4f:d5:20:8e:91:a1:b2:58:30:68:d7:12:c7:
0b:c4:02:5f:b5:02:4f:43:98:43:76:3d:60:b2:37:23:75:01:
e0:e6:35:5a:f8:5b:9c:75:74:85:d9:43:d6:89:e7:0b:30:fe:
27:5d:ef:72:02:f8:26:9f:90:ca:e8:3e:26:3f:4c:2a:21:fb:
16:5a:8b:d5:d6:eb:6b:e5:10:40:4b:7a:19:52:5d:75:5d:d7:
50:80:04:24:60:c8:83:45:81:ab:2a:9c:2b:21:f6:12:f8:5b:
d9:13:da:4d:30:2e:a5:36:b3:e6:c2:ad:4b:24:b1:78:19:a7:
5f:cb:28:02:41:df:80:68:53:1e:26:80:01:0d:db:f4:40:1b:
3c:66:14:90:a2:e4:ee:32:4b:43:61:79:67:a9:d4:aa:b3:c7:
8e:53:cf:c8:da:b6:28:39:18:01:59:61:77:64:0a:da:04:0a:
82:05:cb:84:48:54:72:45:c2:fb:15:71:16:e0:06:db:f0:34:
2b:61:2e:78:01:85:c2:f3:a6:c2:f6:2f:fa:31:03:50:22:7b:
ab:af:e8:b6:d9:24:93:e3:48:d7:63:d6:15:51:ec:ad:30:c4:
9c:89:01:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:03:24 2025 by rpki-client