Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
File: EsShfSBma32NKx_-GKRoevkmIY8.mft (raw, json)
Hash identifier: k7213Y4k9dit2ugwn0etgF+xMaRxweGu6HnnNJjJ6dQ=
Subject key identifier: 17:BD:EC:5C:41:7E:95:9B:26:FB:50:DC:D5:6D:99:7F:42:48:76:8E
Authority key identifier: 12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
Certificate issuer: /CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Certificate serial: 0198D7E14ABC52B416E277514FAE3FD5F748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 17:02:02 +0000
Manifest this update: Sat 23 Aug 2025 17:02:02 +0000
Manifest next update: Sun 24 Aug 2025 17:02:02 +0000
Files and hashes: 1: EsShfSBma32NKx_-GKRoevkmIY8.crl (hash: JwQ6AwA6rqOa6PNCn3YEO0E8fkRlmXmaaet2AS/EZls=)
2: nfi8L76Q0CcXdXMuyopjIwMNN1s.roa (hash: yyBzF5vSH0UZ1Eb70mzyyMArzuUjMy9cXtif0oEgNm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:4a:bc:52:b4:16:e2:77:51:4f:ae:3f:d5:f7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Validity
Not Before: Aug 23 17:02:02 2025 GMT
Not After : Aug 24 17:02:02 2025 GMT
Subject: CN=17bdec5c417e959b26fb50dcd56d997f4248768e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:fb:1c:b2:60:ed:4c:52:5c:aa:ec:17:96:
e6:aa:8f:a7:c8:b0:81:25:1a:15:11:79:9c:16:83:
62:be:29:db:5c:5e:c9:ea:97:01:44:c1:7d:54:a5:
d0:83:96:59:e8:5d:fd:c7:cd:91:89:1d:bc:8f:da:
7f:47:41:c0:3b:c9:73:79:3e:4b:4c:bf:c8:88:39:
d8:8a:5a:6d:94:78:fc:2e:4d:72:cb:56:ed:6b:57:
77:96:67:fc:b2:1c:a3:42:8f:f6:9f:93:6c:52:88:
1d:df:c4:2c:07:db:7b:f0:1f:7a:5f:54:29:c4:3f:
7e:38:30:7e:98:89:44:78:7b:27:d6:b2:46:9e:ee:
02:c7:d2:15:7c:cb:e1:cc:58:4c:78:25:09:24:ac:
e0:b9:36:ad:16:5b:35:7c:a6:d3:f8:99:95:5c:7f:
34:97:01:b6:cc:5b:d7:d0:a4:17:37:ba:ee:73:26:
a6:1a:12:33:da:0d:64:e2:96:8d:05:c3:6e:33:1f:
95:3a:23:ba:58:a4:12:c7:af:49:d0:8d:41:35:d2:
8c:63:dd:c4:bd:60:1c:60:d5:4f:81:7d:5c:0e:25:
93:33:f2:87:f4:b7:ab:be:bd:53:da:50:11:2c:91:
95:15:de:4d:2a:81:68:b2:b9:25:d0:dc:14:78:f8:
27:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BD:EC:5C:41:7E:95:9B:26:FB:50:DC:D5:6D:99:7F:42:48:76:8E
X509v3 Authority Key Identifier:
keyid:12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:43:0a:b5:72:02:a5:37:bb:6b:2e:db:08:1d:7b:62:07:88:
4f:ef:20:ac:19:19:38:d8:c9:b5:c9:33:b0:49:a5:40:00:03:
15:38:1e:ac:dd:12:ba:d8:fb:34:38:eb:14:b0:49:d5:02:40:
81:38:bc:f5:2b:dc:e1:7c:99:aa:5e:f8:0e:c3:5b:c7:b4:2f:
53:8d:1b:5b:df:12:0b:1a:71:a1:b8:28:6d:14:ab:ca:7b:a6:
8d:58:8d:4f:70:73:a0:9d:49:2d:59:df:4a:c9:9e:a4:75:ae:
5a:71:0d:07:55:22:d8:3f:b0:5f:51:af:2d:7f:9c:ba:cc:86:
07:68:70:bf:4e:9f:eb:e7:4e:74:13:be:bc:30:21:83:07:b3:
bb:07:26:c7:dc:97:84:65:c6:d4:56:12:ee:d1:3d:50:1e:f5:
69:88:50:8f:73:4f:ae:9e:6c:91:1d:03:6d:09:ee:d7:96:06:
17:05:d2:37:55:a6:bb:5c:85:18:d1:f0:d3:96:04:a0:4e:79:
ec:94:47:6e:e4:0b:44:e3:2d:9b:aa:ed:e3:c6:b5:80:12:2f:
a8:00:86:d8:30:15:c0:e5:a7:21:13:75:67:0c:36:c2:20:b6:
21:da:2e:c4:83:ce:7b:85:de:a2:1d:00:97:7b:c2:67:39:f9:
96:72:1e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:30:10 2025 by rpki-client