Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
File: ESXJC-alxXrBYrVYE8_HZm7wg1o.mft (raw, json)
Hash identifier: U27VJkvNxheVu/f09RXk8O+znGbD7JFnJ+PpffzbZ9s=
Subject key identifier: 4B:00:5F:C1:38:3F:D2:F1:CC:22:5B:B2:B5:AB:0F:27:85:3F:74:0C
Authority key identifier: 11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
Certificate issuer: /CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Certificate serial: 0197778A90A7972A9EBD572A439F56E3321D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
Manifest number: 03AC
Signing time: Mon 16 Jun 2025 07:00:59 +0000
Manifest this update: Mon 16 Jun 2025 07:00:59 +0000
Manifest next update: Tue 17 Jun 2025 07:00:59 +0000
Files and hashes: 1: ESXJC-alxXrBYrVYE8_HZm7wg1o.crl (hash: kVpFOrJy3eSZfYN8ZZ+tvP37/JETlSdx1icN2HoE1aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:90:a7:97:2a:9e:bd:57:2a:43:9f:56:e3:32:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Validity
Not Before: Jun 16 07:00:59 2025 GMT
Not After : Jun 17 07:00:59 2025 GMT
Subject: CN=4b005fc1383fd2f1cc225bb2b5ab0f27853f740c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:c8:8f:38:83:9c:bc:d6:38:eb:f1:61:18:
ec:70:db:2c:48:9f:69:24:97:2c:ed:46:9e:f2:fc:
b1:4e:1c:ef:08:ea:6b:1f:ff:92:18:85:93:eb:c8:
e6:fc:98:28:4f:cc:f0:59:58:5f:5e:87:5c:7f:5b:
0a:99:51:fd:57:99:52:a0:83:59:7e:f6:d4:de:52:
e5:30:f5:d9:16:79:c1:f6:9e:39:ea:4a:2e:eb:b2:
fb:c7:f8:1c:05:f9:cb:48:77:78:1f:f0:3e:c0:22:
25:4c:af:d7:2d:7e:fe:10:ab:b6:a6:d8:4d:b6:50:
3c:42:da:f4:db:39:bc:22:fd:cd:78:e7:47:d9:d0:
ef:87:51:46:6d:e1:df:de:9f:77:9b:93:67:53:2c:
c0:fe:44:2f:4f:cd:36:33:0e:ec:31:99:b0:af:f9:
c1:ff:ac:9c:bb:b4:55:03:d7:f8:d5:0d:73:97:44:
a6:aa:76:b0:ba:6e:20:82:2a:9d:1f:9b:71:39:58:
da:22:0b:a8:bf:08:2d:e0:84:45:13:44:6b:36:b4:
b8:54:ca:7b:2a:8a:24:bd:5d:40:72:27:fe:fc:dc:
8e:aa:b9:22:b5:87:90:2f:07:07:83:63:73:9f:77:
56:74:f2:f7:2e:96:11:92:1e:d4:80:1e:2d:85:c3:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:00:5F:C1:38:3F:D2:F1:CC:22:5B:B2:B5:AB:0F:27:85:3F:74:0C
X509v3 Authority Key Identifier:
keyid:11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e4:23:4a:db:36:b9:4f:95:16:40:fe:e8:8a:e0:10:78:49:
b8:3b:1d:a7:6c:81:0a:32:d5:65:3c:39:72:77:e7:77:56:1d:
9c:a1:52:a9:af:12:bd:a0:74:59:94:f4:1f:aa:77:d2:78:ed:
52:45:9c:be:fd:8e:dd:0d:c5:2c:b3:04:e5:29:3d:30:10:f7:
ad:0b:63:da:16:55:07:f7:86:3a:24:5d:ad:37:06:f3:20:5b:
e0:fc:60:0e:0a:92:f9:1d:e7:6b:fa:cf:9d:80:aa:b0:91:62:
06:cb:ac:54:37:fe:5a:02:00:35:64:ea:52:52:37:76:c1:17:
3a:25:60:d7:b3:45:c3:8c:d1:c6:fd:57:e8:06:c6:45:5f:7b:
50:32:fd:b4:1f:62:1e:3c:05:7c:0a:cf:86:52:69:74:b1:5a:
85:46:8c:55:4d:e6:a4:91:eb:56:6d:50:45:e5:76:87:e2:c8:
f9:41:56:1b:26:a8:29:7c:4f:ca:b4:81:9a:42:5c:7e:3b:a1:
5e:22:ec:3e:42:17:b6:e2:e1:89:51:a2:1f:ef:61:10:c5:8a:
ac:86:55:e9:0a:e9:90:dd:06:d8:97:c5:4e:74:9d:4c:68:34:
65:1e:af:6c:04:2e:0b:11:be:51:a0:4c:76:c4:3a:bd:75:b8:
b3:bc:6e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:25:18 2025 by rpki-client