Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
File: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft (raw, json)
Hash identifier: i7jK/uNk5HB2qN1FvZuiOtLxRjQECpXFpF+g45u8ifU=
Subject key identifier: C0:92:83:9A:81:5A:81:F0:DC:B2:08:D1:3F:A7:20:06:C8:9A:49:4D
Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209
Certificate serial: 019A4D747B529A0D853EE913705AF837A3AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:01:10 +0000
Manifest this update: Tue 04 Nov 2025 06:01:10 +0000
Manifest next update: Wed 05 Nov 2025 06:01:10 +0000
Files and hashes: 1: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl (hash: 8NDyDwymc91y5fV8nN1DCkmJoTPVniwy+ZLQPbxe9gE=)
2: Siq3LXChf-J1kOdJHhD69EXWg8I.roa (hash: lqCjq1rRDcc2EL/o5bsRWvZA2ja39pIDJxSTPY+sOJk=)
3: ecaHIJxcx1Mgp1auyXMniU5m_AU.roa (hash: nk96xRsdyKFZrxulWblmb/pOYCvYpvcjJToJzvaxa8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:7b:52:9a:0d:85:3e:e9:13:70:5a:f8:37:a3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c603666719e979bef0921451a2ec264ed01209
Validity
Not Before: Nov 4 06:01:10 2025 GMT
Not After : Nov 5 06:01:10 2025 GMT
Subject: CN=c092839a815a81f0dcb208d13fa72006c89a494d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9f:40:69:14:28:62:73:83:5d:bf:78:48:c9:
ac:f7:56:c1:3f:99:20:c6:c2:62:f8:be:95:f6:d1:
9e:9a:52:eb:72:8a:4a:67:fd:be:5f:64:e8:1e:34:
d8:90:6b:ac:67:1b:bd:62:80:ba:cc:c3:23:6d:b2:
30:57:15:d5:f4:1f:6f:56:eb:01:fc:47:9a:63:4d:
23:31:e8:3c:f7:30:03:77:74:1c:03:9e:cc:7d:9f:
d3:32:c7:34:f5:22:b6:f8:0e:5a:56:63:ed:78:4a:
de:bc:f7:b6:9c:90:00:d3:73:09:e7:26:d4:ec:fc:
72:2a:26:e0:fe:94:8f:22:f0:7d:27:3e:a2:9b:db:
d6:03:d8:08:9d:fb:09:1f:fa:c6:24:75:01:7f:9f:
d8:57:4e:db:dd:81:de:d8:e3:47:cc:f8:81:e2:e2:
78:8c:74:24:b5:e8:3c:80:37:11:c9:77:43:0d:9f:
66:0c:07:14:d7:24:7a:f7:0f:89:08:bf:ac:9e:40:
ee:40:f8:84:d8:cb:8e:18:dd:4c:f8:8b:60:8a:45:
7a:20:06:0a:4e:a3:66:af:f4:46:aa:61:0e:82:24:
21:b7:d3:0d:c4:ac:da:04:38:50:d6:cb:4a:23:3b:
90:c0:c7:20:70:51:1a:bd:a2:26:cf:e2:58:6e:76:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:92:83:9A:81:5A:81:F0:DC:B2:08:D1:3F:A7:20:06:C8:9A:49:4D
X509v3 Authority Key Identifier:
keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:5c:6c:20:04:eb:d2:fa:71:8b:13:d9:4e:ec:20:75:d9:21:
92:ad:ca:f4:9a:f9:9a:f1:2d:eb:b0:f6:c6:23:07:8f:a2:8b:
89:d5:28:86:dd:19:bb:cc:e5:36:18:7e:c9:49:b5:a4:7c:fd:
da:93:e8:7b:f1:f6:1b:e6:df:87:d9:c6:e6:fe:ed:8d:bb:d8:
d8:d7:02:e1:88:08:7d:0a:73:34:15:3f:a4:ee:d2:1e:a6:ae:
49:8d:f3:16:61:61:fe:47:a5:82:78:01:d3:0b:63:3a:8c:56:
11:2b:80:38:cf:11:93:0b:0a:29:85:2e:4c:0f:5e:06:eb:a9:
1d:a2:75:ef:c1:1a:53:bb:36:93:f2:43:f3:30:f6:ac:78:8a:
05:f2:3e:ac:5a:eb:02:87:a2:9c:c8:4c:15:fa:2b:51:7f:d8:
10:a4:37:34:84:0b:f5:30:97:1a:45:66:6a:d5:0c:2d:b5:be:
4d:87:14:9a:80:85:c2:d4:5a:e9:c6:d0:28:39:20:9f:15:7c:
77:05:25:38:79:f6:13:34:d7:d3:d4:67:50:d7:d6:02:b2:ea:
ca:f0:c3:b3:2f:89:fe:5a:b4:1c:25:d9:0f:29:77:c9:07:5a:
fe:5f:cb:ef:2c:f1:94:dd:6b:d5:59:62:e2:27:fc:b5:91:bb:
a2:77:8a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:49:01 2025 by rpki-client