Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
File: ESXJC-alxXrBYrVYE8_HZm7wg1o.mft (raw, json)
Hash identifier: Q7ifaJhywYLbZBJ/yZzS0MK52wtlmJgQVcEZgJ2YESA=
Subject key identifier: B8:2B:C0:5C:03:1B:C4:43:6D:9E:0C:FB:F6:9E:7A:88:3E:1F:FA:77
Authority key identifier: 11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
Certificate issuer: /CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Certificate serial: 0196824790EA2465598E3E205FC78D1440DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
Manifest number: 032D
Signing time: Tue 29 Apr 2025 16:00:50 +0000
Manifest this update: Tue 29 Apr 2025 16:00:50 +0000
Manifest next update: Wed 30 Apr 2025 16:00:50 +0000
Files and hashes: 1: ESXJC-alxXrBYrVYE8_HZm7wg1o.crl (hash: s2z6dz30nBvp/QmcxSeZgznpqofyvPmaql9pvXwhN3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:47:90:ea:24:65:59:8e:3e:20:5f:c7:8d:14:40:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Validity
Not Before: Apr 29 16:00:50 2025 GMT
Not After : Apr 30 16:00:50 2025 GMT
Subject: CN=b82bc05c031bc4436d9e0cfbf69e7a883e1ffa77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:e6:9d:d9:3b:d4:5c:54:5d:0b:d4:a8:c1:
92:23:ad:83:ad:3e:a1:7a:f9:e9:31:55:0e:fa:03:
4f:da:fb:b7:f4:a8:12:e2:d9:bd:d5:1d:e7:00:eb:
9d:75:2a:86:34:2a:7c:02:93:ea:02:0f:3a:de:7f:
a4:88:be:14:a1:5c:96:85:a1:46:15:76:ee:7b:94:
25:04:a1:72:ba:88:dc:5d:34:40:14:93:23:51:c2:
12:69:66:4b:03:2f:04:b8:94:05:8e:18:ea:6c:77:
c4:ab:f7:65:fe:d7:1c:04:28:43:fc:99:c6:ea:a5:
3b:ab:63:3c:9d:bd:33:63:15:22:fe:c8:de:78:06:
c0:1e:eb:38:20:9a:0d:76:c6:0f:44:f2:d5:66:54:
4d:59:cd:96:36:80:10:8c:ca:ac:eb:af:51:24:0e:
96:4f:82:36:84:b3:ec:57:7a:d7:62:ef:74:ff:36:
2c:d7:4a:1a:9a:a9:af:77:c8:68:19:a0:e4:6c:57:
18:a5:fa:a9:56:ca:90:0b:2c:53:45:40:e4:d2:50:
7e:1c:e6:a0:1e:17:04:c8:97:79:71:6e:10:f4:48:
e8:0e:6a:e7:95:c2:d7:de:f7:93:ff:6b:b5:7a:aa:
b3:9d:a3:4f:a6:ce:1a:44:43:19:02:db:6b:45:a9:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2B:C0:5C:03:1B:C4:43:6D:9E:0C:FB:F6:9E:7A:88:3E:1F:FA:77
X509v3 Authority Key Identifier:
keyid:11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:34:00:54:c5:4b:d1:10:ab:23:29:34:49:e8:44:ac:02:3f:
1e:ca:14:3f:27:eb:eb:8e:56:92:81:de:98:f8:9e:d2:ec:4c:
55:4f:c6:93:4b:35:d4:2f:94:96:ee:02:42:7d:ca:7a:77:bd:
35:28:c3:c8:ff:36:0f:f4:6f:82:47:6a:cd:da:8d:d7:f0:45:
c1:6a:a9:f9:c7:2d:c8:08:f6:5c:a7:eb:90:44:9a:6d:4a:31:
6a:ba:77:57:a7:05:bf:63:ed:7b:7e:af:7e:68:53:67:14:92:
12:f4:96:1f:65:95:e7:ce:1b:13:71:0f:0e:ac:18:ab:15:8b:
92:65:64:fe:bd:c3:a2:3b:34:5e:d9:67:16:c5:1e:d6:80:cc:
8f:c0:cc:48:4b:bc:0b:05:56:81:d7:cf:47:8f:36:52:65:50:
0c:ed:ef:3f:86:36:7c:44:5b:66:dc:df:2e:84:d2:60:d6:8e:
71:3d:85:cf:83:ef:6a:1e:f9:0a:5f:45:59:5a:09:6b:73:ec:
6a:bc:68:61:a7:4f:7f:bf:bf:0f:39:e6:8a:ea:91:1e:d1:a2:
a0:c8:1d:fa:cb:80:09:d2:49:a8:f3:dc:79:a9:5f:1b:43:0a:
67:09:02:71:48:ce:0e:d1:05:49:5f:0a:ea:af:32:0c:0c:31:
87:1e:60:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:20:53 2025 by rpki-client