Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
File: sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json)
Hash identifier: bRKZrADMp/AZcktrEjXng9LjEA7bRWO7Yv7aY/K6ogE=
Subject key identifier: 8E:3D:8F:A4:A6:CF:5A:C7:8E:C4:E4:3B:79:F2:61:19:DB:90:8E:9D
Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Certificate issuer: /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Certificate serial: 019A4EF5D91697A76CBD91C8AAC0759338F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
Manifest number: 1569
Signing time: Tue 04 Nov 2025 13:02:05 +0000
Manifest this update: Tue 04 Nov 2025 13:02:05 +0000
Manifest next update: Wed 05 Nov 2025 13:02:05 +0000
Files and hashes: 1: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: u1p9B4Ar2ZjJ5ZnnZwGxMHTUSKNy7PzxW+q0zGF7aPk=)
2: tUy7VKDDVboY2Qo-sNWljYmxPOI.roa (hash: nOufD9VcAARAPXFJN7YbCFA3vo77wDsfl0JVajaSTdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:d9:16:97:a7:6c:bd:91:c8:aa:c0:75:93:38:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Validity
Not Before: Nov 4 13:02:05 2025 GMT
Not After : Nov 5 13:02:05 2025 GMT
Subject: CN=8e3d8fa4a6cf5ac78ec4e43b79f26119db908e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:ff:67:a8:c2:88:76:b5:7b:94:9d:0d:7c:
73:a7:bd:de:13:6c:8b:80:4f:ac:d1:dd:1b:25:32:
f0:50:89:b3:49:dc:da:f8:6c:a7:86:c5:17:8d:42:
30:61:78:89:53:8a:bf:95:29:e9:44:bb:ae:28:cb:
79:e6:52:b0:a6:47:64:37:a3:04:ba:5a:c4:ec:6b:
6b:8c:1b:8d:9d:b8:55:5a:91:3b:84:e2:5b:54:8e:
88:35:43:ba:89:12:19:5b:37:e4:3f:48:5a:70:57:
4e:5a:af:d1:9d:66:f3:b8:21:e7:96:b8:ef:b6:a1:
eb:ee:87:b5:17:d2:d7:fc:0b:5a:c2:37:0d:76:4a:
9a:2c:0e:a3:81:4d:fb:7e:c1:21:43:af:e8:bb:8b:
8c:e5:c2:03:8f:1b:1e:e5:19:bc:38:95:97:65:fa:
86:6f:99:97:32:8a:61:de:3d:6d:26:f7:5b:7f:a4:
9d:19:c5:06:0f:d2:50:55:f3:1d:36:49:81:8d:ce:
8f:c5:eb:8a:a3:f2:29:ca:37:a7:34:1a:cc:ee:72:
c4:cd:52:f7:26:c5:78:2e:6d:06:5a:17:cb:4f:61:
79:87:81:de:85:88:8b:83:bc:fe:2f:bb:14:6b:1d:
5a:67:f4:53:c8:20:1a:28:35:6b:cd:15:1a:70:5b:
f5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3D:8F:A4:A6:CF:5A:C7:8E:C4:E4:3B:79:F2:61:19:DB:90:8E:9D
X509v3 Authority Key Identifier:
keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:43:9d:42:5f:bd:e0:32:52:61:6f:9d:48:cd:d1:8c:6e:90:
d7:db:f8:ec:4c:ee:49:71:aa:dd:ca:5c:a4:13:37:db:0b:e0:
55:9e:f9:7a:ae:62:4e:8c:4e:c4:54:69:c2:bd:ba:23:d9:5a:
de:03:36:cd:bd:68:40:87:f9:08:2b:96:e6:25:4b:95:a1:4f:
5f:27:0e:5e:26:7d:b7:6f:a2:4e:0c:e2:c8:cd:b1:3a:fd:37:
e4:0f:1a:46:86:81:70:d3:d6:3c:d9:72:46:c2:6a:dd:d9:6a:
65:30:2e:f9:33:6c:12:4f:10:c4:ca:c6:7c:cb:e8:9c:13:eb:
15:0a:99:a1:70:a5:ad:5c:42:2b:b6:a0:d2:9b:a9:5c:49:4d:
ca:cd:3a:f4:0b:e2:c6:1e:ba:3e:3f:8c:ab:d7:8d:a8:b3:b0:
ee:72:1e:d4:19:de:f9:62:b7:80:30:3b:cd:e6:83:df:e9:0a:
84:9a:b5:76:82:61:35:63:f8:a4:a0:83:59:7e:30:73:72:da:
b4:3a:1f:76:b6:37:5c:9f:fb:6e:66:c0:78:23:d7:c3:e7:06:
9e:de:3c:e4:64:1d:6a:e4:2f:9b:b0:93:3a:d5:d9:b2:1c:3d:
1c:fb:f6:34:c3:00:60:f9:c2:e8:0a:79:de:a0:ea:bb:76:98:
c7:94:04:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:24:30 2025 by rpki-client