Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
File: ESXJC-alxXrBYrVYE8_HZm7wg1o.mft (raw, json)
Hash identifier: 3e1KhR3emiWcGxG/ok73K9RdFf7D5ru6vC5PeqQGImg=
Subject key identifier: 15:71:2F:CC:5B:50:9F:04:7F:41:3C:DC:2C:C0:68:3B:2C:5A:00:CA
Authority key identifier: 11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
Certificate issuer: /CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Certificate serial: 019897499ABEED5665E06003BF9AFA680DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
Manifest number: 0441
Signing time: Mon 11 Aug 2025 04:00:39 +0000
Manifest this update: Mon 11 Aug 2025 04:00:39 +0000
Manifest next update: Tue 12 Aug 2025 04:00:39 +0000
Files and hashes: 1: ESXJC-alxXrBYrVYE8_HZm7wg1o.crl (hash: J90V4cnIBUKL7dFVIOjqqpXZcq6O3HB3axqdz8gdUFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:9a:be:ed:56:65:e0:60:03:bf:9a:fa:68:0d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Validity
Not Before: Aug 11 04:00:39 2025 GMT
Not After : Aug 12 04:00:39 2025 GMT
Subject: CN=15712fcc5b509f047f413cdc2cc0683b2c5a00ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:04:ac:a3:b2:2c:34:9f:f5:b9:fd:f6:a8:
28:ab:ae:ae:c7:b3:7e:da:98:de:49:58:c3:8d:4e:
30:85:4f:3b:93:53:ba:c3:7c:98:18:04:91:e5:4e:
84:df:d8:c7:73:d8:21:a9:8d:00:c7:cd:fc:b3:1f:
9f:59:3c:7e:bc:00:42:19:db:d8:8d:1d:2a:7b:b4:
d9:84:80:d6:f7:ab:a2:f6:59:96:14:ca:62:4f:ff:
43:6f:ff:52:f0:dc:b3:dc:24:de:c1:ae:8a:81:67:
86:6f:73:0f:a2:7e:c9:c8:74:19:22:19:31:f2:3e:
2a:7a:a2:e5:d8:90:ab:77:58:41:72:53:37:83:cc:
ed:22:95:3c:63:ad:9e:e5:40:0d:74:fd:f0:a0:d0:
f3:4a:cf:8b:d9:f0:a6:1c:a7:77:63:76:03:b1:11:
66:d3:cb:18:bb:4b:5c:fd:4e:b8:5b:c6:b8:fa:a8:
03:cc:db:13:15:a8:f2:4b:0e:6d:b0:8b:04:b8:d9:
3b:61:47:64:b8:6d:ff:a3:e1:b1:f8:ec:3b:33:13:
92:77:05:2d:c8:22:bc:63:56:d9:62:25:5f:ff:52:
30:16:ab:d4:0f:c9:fa:c3:27:a8:fe:ff:32:d4:ff:
c9:a4:e5:36:d0:2a:04:48:3e:6d:ff:3d:41:e5:b1:
ae:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:71:2F:CC:5B:50:9F:04:7F:41:3C:DC:2C:C0:68:3B:2C:5A:00:CA
X509v3 Authority Key Identifier:
keyid:11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d8:bd:0f:e3:d2:c4:a5:5a:8a:8e:19:33:0e:8c:6d:94:10:
a2:19:ae:4e:eb:54:95:0a:ec:0a:a8:8c:7e:9c:fc:ed:2e:7a:
fa:56:5a:e7:26:a7:e6:90:b7:c7:9b:ea:43:8b:59:4c:f7:53:
de:f2:2a:a3:17:3f:c2:25:16:aa:15:12:17:4e:0c:61:ca:41:
fe:b1:ee:0d:d4:1e:d8:ca:68:b1:8b:4a:79:ed:65:48:e5:5f:
12:88:b8:1b:82:68:fb:c6:e4:79:49:f7:09:9b:1c:2c:0f:bb:
91:9a:8b:57:71:10:b3:6c:d9:08:ee:49:68:ed:96:d0:9d:0a:
4d:3c:92:6f:57:68:6a:64:1f:68:1b:c6:e4:e7:a7:60:d7:66:
3f:f6:58:8b:58:28:9c:15:a2:49:e5:5e:0f:79:71:6d:6f:d5:
a1:65:8a:6f:08:c3:55:3b:bc:54:96:db:a3:36:87:87:a4:5b:
88:b0:7b:5d:68:79:33:0e:13:7b:06:8b:eb:0a:5e:70:8f:4e:
1a:15:a0:17:7d:81:4d:d6:bc:8a:57:28:e1:21:bc:80:0d:63:
b6:6e:a3:02:d3:ce:d2:1b:ff:0a:41:2a:31:0f:c9:ec:e9:0f:
ec:d3:d5:e0:9d:8b:82:80:6c:44:88:28:45:ea:c9:a8:04:f4:
5c:7f:f6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:35 2025 by rpki-client