Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier: UcHy5+YPi6keSRCbRstNwNafFX8QPBksnGJK/JA9OLQ=
Subject key identifier: 08:30:CE:E3:0A:C0:EA:D0:53:2A:4B:B8:A3:99:FD:8F:B4:7D:67:6C
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial: 0198733DCE5362A3067F9581201A454F35EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number: 04EE
Signing time: Mon 04 Aug 2025 04:01:26 +0000
Manifest this update: Mon 04 Aug 2025 04:01:26 +0000
Manifest next update: Tue 05 Aug 2025 04:01:26 +0000
Files and hashes: 1: 1-WsRdLTfdTsVKrL2CIRMmrgbopM.roa (hash: /fbcJU0cKGryVcZvtSX4RD7kNCeOfa1xibBR/Nj3P7Q=)
2: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: mqsxc79AHmid4uewLikhbYP1ojLuPKeROPPHxfSsMro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:ce:53:62:a3:06:7f:95:81:20:1a:45:4f:35:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Validity
Not Before: Aug 4 04:01:26 2025 GMT
Not After : Aug 5 04:01:26 2025 GMT
Subject: CN=0830cee30ac0ead0532a4bb8a399fd8fb47d676c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:a1:b1:63:49:d9:cb:13:f0:70:e7:23:d3:
58:0d:00:a3:40:d9:50:4c:a2:aa:ec:28:84:c0:49:
7b:31:28:e5:44:71:29:97:f7:2e:cc:51:f4:f5:39:
70:39:9f:ba:1f:38:69:7d:bf:8a:a4:c4:5c:89:fb:
92:36:ef:ad:32:99:65:25:ca:4a:a7:6c:49:65:00:
d7:22:7b:ac:65:63:ff:b1:79:2f:88:20:3d:90:4b:
42:92:4c:c1:61:6b:c1:03:e3:dd:e2:b8:36:35:61:
d9:1f:40:f5:da:1a:fe:e8:49:36:f8:f2:89:91:00:
38:e8:50:5c:7a:d6:3b:bf:0e:7f:aa:a6:64:cd:d9:
23:5a:ed:34:e2:a3:5f:f2:75:c6:77:35:07:c8:0a:
d5:21:cf:fc:9c:d3:44:db:78:ea:28:ab:bd:08:3a:
fd:26:73:82:68:a9:97:0d:89:7b:d8:78:65:14:b4:
6a:4e:e6:65:30:d0:32:72:ad:99:17:7d:51:2f:57:
26:9a:37:65:d2:de:c0:ad:a9:15:7e:9b:ac:3e:1f:
96:18:16:c8:fc:72:82:b1:7c:9a:99:d7:74:ce:9f:
bc:3e:f4:69:54:e4:7f:ed:a4:e9:85:35:07:cd:7a:
45:b5:65:81:ac:9f:17:93:ec:0a:36:9d:32:7a:67:
35:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:30:CE:E3:0A:C0:EA:D0:53:2A:4B:B8:A3:99:FD:8F:B4:7D:67:6C
X509v3 Authority Key Identifier:
keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bc:3d:b9:c6:da:10:18:fe:4e:60:d8:6b:74:13:e5:07:48:
d4:36:a1:db:6d:8b:cb:20:87:25:7d:08:24:8f:8f:23:ff:69:
4d:36:00:08:cd:9a:9a:b2:74:74:68:f5:12:45:94:82:bd:0e:
28:62:f2:53:88:59:74:fd:af:eb:a6:c0:ac:8a:e3:83:f0:f5:
75:9b:18:43:a1:6d:a9:dd:05:6a:7b:8e:06:c8:ee:73:b5:49:
2b:cf:ef:0e:b0:a7:27:c9:9c:8b:cf:bc:96:69:af:d7:12:3f:
da:32:5a:13:a9:de:ac:96:58:ec:09:a6:5c:8f:53:70:9b:86:
d0:7d:ad:8f:3a:6e:1c:e9:e2:06:d9:fc:4c:1a:0b:6e:c9:9c:
69:a9:e9:1d:dc:00:0f:c0:b1:10:98:77:eb:1d:0e:62:66:47:
21:2e:e6:3c:ed:99:b5:22:8e:34:a4:4d:53:57:da:2d:c9:a8:
9f:96:fa:3e:ba:bd:73:84:b3:fc:d1:23:36:49:a3:c4:4c:84:
7e:b6:22:8c:20:9a:96:b2:54:76:5b:70:72:a4:04:d8:ef:c0:
28:d8:04:c8:f4:b9:49:8c:db:04:e5:6b:cd:cf:9c:db:36:2e:
41:2a:af:34:4b:2d:0c:be:c6:03:87:38:9d:f9:92:84:20:ca:
a2:58:29:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:25 2025 by rpki-client