Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: YdRLJDCOdhzAEAKLw3QtTQEPFhsIQ1Wd3Qj7URFFcIM=
Subject key identifier: 18:45:3A:2D:79:B4:4F:B2:39:4E:7C:2B:8F:5B:FD:D7:0B:CB:EA:D1
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 019A4F99522385FB01BC34A761F0A75441A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 16:00:39 +0000
Manifest this update: Tue 04 Nov 2025 16:00:39 +0000
Manifest next update: Wed 05 Nov 2025 16:00:39 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: 9i+XDoYX6R/FRM+Hp379TWCtlunEUxKcC74+XZUfTMY=)
2: giZEtebKwrV_K5a1acLqZif6N-k.roa (hash: lzFFffl4lpHRD7ZMSU5Ky5FbKZMuom72Ko9x5UDmCAY=)
3: r2MDM9YmqLIjylrH2WoKfJ8F-hk.roa (hash: 5oJl1RSDkKpv/NrAOtgSj/GjDfrDxGm50iGVTH3ViuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:52:23:85:fb:01:bc:34:a7:61:f0:a7:54:41:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Nov 4 16:00:39 2025 GMT
Not After : Nov 5 16:00:39 2025 GMT
Subject: CN=18453a2d79b44fb2394e7c2b8f5bfdd70bcbead1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:b8:19:31:8f:fd:df:6e:b6:71:eb:7e:35:
80:7b:2f:ed:71:46:19:ae:b3:35:fa:f5:6f:c6:ef:
f8:22:ea:b2:02:ea:0e:63:ee:e2:3b:4d:b8:26:be:
2c:94:d0:68:2d:78:a0:e0:f3:97:d0:e3:91:48:f1:
c9:ae:3d:2d:aa:6e:75:b3:4f:2c:85:0a:d6:75:c9:
0e:f3:88:e2:0b:b4:80:07:2e:c0:9e:46:dd:fa:79:
87:ba:30:c2:07:fc:cd:4a:ff:68:bc:34:05:8a:99:
d0:2a:f5:c9:e0:4c:93:3b:7f:d9:34:63:35:a4:49:
42:8e:06:21:05:10:4d:2a:78:8c:1b:20:94:da:15:
32:97:75:44:cd:1b:9e:87:33:d6:fc:8d:80:51:2a:
7c:c2:80:ce:14:5e:9f:86:d0:14:70:83:e1:c3:a1:
3f:45:ec:a3:ad:45:52:40:11:4e:45:1d:af:fe:8c:
48:06:b7:a7:ae:4b:15:92:2f:88:85:bd:94:6e:c9:
71:6d:5b:51:a7:93:10:78:2e:bc:ee:08:06:d9:bf:
13:7c:82:d2:59:13:02:99:24:33:00:96:07:2f:b1:
5f:20:e8:f9:ad:05:61:34:f4:7e:db:6c:a2:30:11:
33:5c:d1:4f:1e:1e:db:75:9c:4b:d2:b3:67:6f:9d:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:45:3A:2D:79:B4:4F:B2:39:4E:7C:2B:8F:5B:FD:D7:0B:CB:EA:D1
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:0c:81:81:65:e5:a3:25:85:30:be:d9:0a:98:37:3a:4d:38:
b5:ed:80:19:f9:ae:cf:5e:f0:93:55:51:f8:dc:b0:cb:9b:b4:
f2:ca:a8:88:9f:06:a7:b5:fc:13:cb:48:3d:ee:28:ed:24:6b:
ae:de:9e:61:cf:68:40:bf:30:20:1a:38:d2:2a:9f:ab:96:50:
ae:3e:ca:65:07:a3:06:38:d5:a9:59:8b:0d:61:d7:46:3e:f8:
df:96:f2:97:f0:55:52:a0:a0:09:e0:eb:af:5e:c1:64:8d:8f:
ed:6d:a8:4f:d1:dc:f3:30:56:54:38:04:84:3b:b9:05:dd:fe:
a3:ab:21:84:63:f9:e7:64:08:7f:1b:26:37:19:1e:df:3c:82:
17:9d:51:9f:01:f2:2b:8c:3f:59:a8:58:cf:ed:38:cd:c3:cb:
64:da:6b:23:02:fa:3f:3c:49:0c:7d:60:e0:c9:1d:bd:54:f2:
e9:c3:42:38:d9:55:2c:df:ff:73:0c:cb:f5:76:81:ad:1b:ef:
3a:2b:e3:d4:0f:bf:5d:c3:ce:3f:20:b8:f1:bb:1f:0b:2a:b3:
e7:e5:11:fe:00:60:fe:be:df:06:f8:43:7d:fe:45:97:d5:8b:
b9:39:ee:a9:32:e3:5b:2a:55:de:d8:a3:7a:50:ee:df:f8:2e:
27:1a:28:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:53 2025 by rpki-client