Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File: ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier: U2X2th+XqPfGuURSbecEyE1bHR7FYWpzT4J8w7d1rKQ=
Subject key identifier: 57:D1:A6:2A:D8:6A:5A:BF:D6:16:48:D7:78:42:64:F2:97:C1:23:96
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer: /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial: 019A503E55B359589BBFD20313EBD85E2510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number: 05E5
Signing time: Tue 04 Nov 2025 19:00:53 +0000
Manifest this update: Tue 04 Nov 2025 19:00:53 +0000
Manifest next update: Wed 05 Nov 2025 19:00:53 +0000
Files and hashes: 1: 1-WsRdLTfdTsVKrL2CIRMmrgbopM.roa (hash: /fbcJU0cKGryVcZvtSX4RD7kNCeOfa1xibBR/Nj3P7Q=)
2: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: qNsBHUM/nER98VDtoTTa6YP4L7JMuBhaWUW4ZrKZxTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:55:b3:59:58:9b:bf:d2:03:13:eb:d8:5e:25:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Validity
Not Before: Nov 4 19:00:53 2025 GMT
Not After : Nov 5 19:00:53 2025 GMT
Subject: CN=57d1a62ad86a5abfd61648d7784264f297c12396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:d8:0a:1e:81:b2:cf:bb:0c:ce:91:2d:2d:
a3:3c:73:cc:0c:cf:a7:4e:2e:e1:4a:ce:7b:d3:51:
db:da:2e:17:0c:22:29:ee:d9:fd:4d:28:6e:67:f7:
62:e8:e3:09:2c:78:11:bc:63:cb:d1:02:a6:50:8b:
9d:00:52:c5:61:9d:08:a6:50:0a:1a:ea:bd:e4:ed:
76:61:6a:7a:d8:06:35:fb:42:80:24:60:a3:c8:9b:
01:b5:8e:3e:54:3f:f4:5c:d2:ec:7b:9b:02:7d:14:
ac:9e:b1:95:18:b7:55:a7:bd:e8:81:54:be:ee:59:
cf:e3:af:94:50:26:83:28:be:68:39:de:ec:62:89:
6f:9a:9a:75:f7:66:03:c5:31:13:1f:2b:4b:9c:21:
ef:35:60:cc:fa:12:0f:bf:6c:29:65:2c:1c:54:85:
30:ed:bb:51:dc:6e:39:da:aa:b6:29:8b:f3:db:a2:
39:f8:f1:f0:e2:5e:0d:67:c3:84:5f:90:5f:b6:73:
d4:e8:05:40:c1:f7:d5:74:e8:ed:fb:44:60:b1:f5:
72:81:a8:9f:cf:d3:09:4c:af:a1:61:a2:37:7d:54:
8d:42:be:c4:42:8f:82:9f:76:c8:5c:ce:a3:ec:b9:
4d:87:e9:51:2b:e2:87:42:d2:50:3a:26:7b:1d:3b:
39:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D1:A6:2A:D8:6A:5A:BF:D6:16:48:D7:78:42:64:F2:97:C1:23:96
X509v3 Authority Key Identifier:
keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:57:48:3d:cc:09:d4:c9:7e:73:10:e3:b0:9a:cd:aa:6e:de:
a5:f7:ad:19:49:de:f7:7d:42:3d:bb:25:80:dc:94:b3:c6:d5:
6c:85:4f:2b:24:c2:a9:ec:91:49:90:f6:8c:ae:ec:51:94:60:
98:8a:40:58:4b:cf:7e:d0:d4:3d:bc:34:d3:13:15:f8:cb:03:
74:1b:f4:a2:e2:58:db:d5:61:5d:cd:7c:83:68:e5:70:58:5a:
0c:09:30:e8:51:97:5f:41:92:fd:a6:ff:fa:97:23:99:80:04:
38:ff:6f:71:88:39:c5:91:25:c0:86:5e:e0:3e:a2:7d:61:67:
b7:95:0a:b6:91:fd:ee:dd:89:69:b6:0d:62:28:ad:15:06:38:
60:cc:9e:68:c7:0e:f6:af:70:4e:1a:4b:2f:9b:40:72:3d:ec:
c9:a3:9e:85:d9:2c:d2:ee:a9:50:57:8d:82:9c:3e:1a:72:4f:
10:f2:d7:93:78:42:c7:69:2d:5c:98:f2:eb:be:06:f4:be:cb:
14:f6:c2:0d:f7:6d:3b:06:9f:d5:2f:60:4d:72:76:35:71:c3:
3e:5c:68:04:7f:fe:6d:f9:86:98:31:9a:18:e2:9b:2a:d9:a3:
bf:f7:29:e2:7e:f4:0c:1e:9b:74:73:71:e5:c4:26:26:c2:79:
d1:74:1d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:14:56 2025 by rpki-client