Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: klmM/yOkN+KEs7azrZViTTZuF4Wmv6vEnYYYZwz9N6o=
Subject key identifier: F8:60:F1:D0:1E:8E:D4:50:C6:73:00:85:26:98:7F:EF:27:D0:F9:DF
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 01987E65F321F866A8E15541ABC72030B901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 08:01:07 +0000
Manifest this update: Wed 06 Aug 2025 08:01:07 +0000
Manifest next update: Thu 07 Aug 2025 08:01:07 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: ukSBy+stbQBykEysB6GFlLTcKn3ctFIyLZACq8kQLWk=)
2: giZEtebKwrV_K5a1acLqZif6N-k.roa (hash: lzFFffl4lpHRD7ZMSU5Ky5FbKZMuom72Ko9x5UDmCAY=)
3: r2MDM9YmqLIjylrH2WoKfJ8F-hk.roa (hash: 5oJl1RSDkKpv/NrAOtgSj/GjDfrDxGm50iGVTH3ViuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:f3:21:f8:66:a8:e1:55:41:ab:c7:20:30:b9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Aug 6 08:01:07 2025 GMT
Not After : Aug 7 08:01:07 2025 GMT
Subject: CN=f860f1d01e8ed450c673008526987fef27d0f9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b6:e8:93:2c:10:1a:15:b2:30:12:b1:df:e1:
48:bc:6b:50:6d:0d:2d:05:e6:75:1f:9f:a4:7c:cc:
32:0b:ca:32:43:eb:cc:9b:c1:d5:e8:bb:fa:6e:a5:
3b:a3:4e:8d:06:33:7f:68:ed:f8:62:e5:e9:df:49:
44:23:99:a8:a1:f9:61:61:44:2a:21:1a:8f:e5:26:
bc:3d:a0:1e:be:d7:d9:e1:fd:92:0a:ee:16:27:b7:
61:b5:e7:02:cb:43:fc:f5:85:d3:28:af:1f:38:8c:
70:2b:a3:de:07:32:62:14:fd:4c:d8:4a:8c:6f:0b:
9f:35:24:1b:9f:98:19:9f:f5:bf:78:11:83:e1:0e:
20:be:68:49:19:e6:31:4f:a0:21:e2:78:dc:39:d3:
4b:9b:48:f6:63:56:25:91:bd:84:fb:b3:d0:4b:c8:
ed:0f:0f:b4:77:ab:48:23:f8:2b:41:ee:c1:91:b1:
f5:61:c7:a9:ea:1f:01:8d:25:f3:73:21:9a:da:18:
f1:bd:f1:6a:92:ef:6a:28:2e:64:eb:51:8c:f5:d3:
be:08:cd:b4:ca:82:06:b8:5d:45:0b:9f:1e:6b:2f:
c6:c0:90:83:87:ee:c6:aa:cd:63:9e:d2:cc:af:b8:
5b:38:69:b6:27:a8:00:ab:d6:c3:81:75:3e:28:2a:
7c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:60:F1:D0:1E:8E:D4:50:C6:73:00:85:26:98:7F:EF:27:D0:F9:DF
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:20:50:6d:c7:06:10:0c:84:3b:63:c1:9f:e7:2f:12:c4:bd:
d4:cd:e6:18:06:46:87:c3:bd:dc:bc:19:95:a7:51:5a:7c:a1:
a3:85:41:ed:57:b8:83:ed:0c:ea:d0:70:43:36:11:38:75:be:
14:82:36:de:1b:0c:a7:bb:eb:3c:a9:ab:b9:15:5d:f7:8f:07:
53:d7:5a:7d:47:1b:8e:f8:ec:9e:9a:3b:6e:be:94:0a:c8:30:
dc:13:1c:38:40:a7:a7:8e:af:8f:b6:5c:e3:47:41:3c:95:c1:
e7:7c:10:ca:83:d1:04:f3:f5:34:0d:26:42:0b:a5:14:97:43:
fe:25:5b:96:c4:f2:6c:7f:0e:78:e2:7c:5a:68:4d:49:e2:4a:
3f:00:dc:45:6b:78:b6:0c:2e:c3:a7:4b:c9:3d:0c:9e:2c:20:
26:06:5d:7f:65:35:a1:d2:c6:d2:6a:fb:d1:5d:22:58:1c:cb:
e6:52:f5:b9:34:77:f7:56:0e:19:54:2e:c2:77:6a:4d:20:2a:
bc:18:fe:41:05:93:bb:b5:43:92:33:f9:46:17:ba:66:be:e0:
7e:ac:fe:1f:67:1a:4f:61:fa:11:17:ae:db:d4:5b:f7:10:b7:
f9:c8:96:ee:88:f4:f6:78:11:16:9a:da:b0:b0:93:a4:3b:32:
6d:73:8f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:11:13 2025 by rpki-client