Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
File: esMB9rptscwntFS8szI5rh1kGrs.mft (raw, json)
Hash identifier: Pt6bibBWlLfytMbSN6A+yXzQjUQyXeoaGEzwJBUAKDY=
Subject key identifier: 00:4A:77:3A:95:18:D0:F5:C9:A6:4B:76:14:39:0F:0C:74:F9:35:B8
Authority key identifier: 7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB
Certificate issuer: /CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb
Certificate serial: 019873743DC4F410758E223CA5E49B5551D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
Manifest number: 01F0
Signing time: Mon 04 Aug 2025 05:00:54 +0000
Manifest this update: Mon 04 Aug 2025 05:00:54 +0000
Manifest next update: Tue 05 Aug 2025 05:00:54 +0000
Files and hashes: 1: esMB9rptscwntFS8szI5rh1kGrs.crl (hash: y59xpituUX3hufHdbG+zGtTpB3scFZ6LjCvz7UWE9VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:3d:c4:f4:10:75:8e:22:3c:a5:e4:9b:55:51:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ac301f6ba6db1cc27b454bcb33239ae1d641abb
Validity
Not Before: Aug 4 05:00:54 2025 GMT
Not After : Aug 5 05:00:54 2025 GMT
Subject: CN=004a773a9518d0f5c9a64b7614390f0c74f935b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8c:65:fc:44:ae:61:6d:ae:ea:a6:ce:36:07:
20:01:70:eb:30:f4:2b:1b:23:6c:d8:76:79:cc:a0:
bb:77:11:52:ac:bc:1b:e6:62:0f:b5:1d:20:e2:13:
4e:7f:c6:11:34:f5:88:d4:6c:7b:05:d7:f9:bd:67:
ff:6f:1e:be:45:11:a3:35:b3:e1:6e:7d:76:dd:7e:
49:97:71:ae:9a:ed:be:4a:11:d4:8e:53:48:f3:76:
5f:1d:84:9b:31:5e:7b:12:17:c6:b9:40:c7:4c:dc:
e2:b5:ec:2c:73:ca:bf:49:2e:e9:47:cd:33:ad:f6:
86:b9:ef:70:50:25:5d:5f:84:f1:65:bd:8f:4c:2a:
c8:cd:c7:9a:f9:c8:6d:ba:77:f4:7c:a2:70:c5:72:
d4:be:d1:55:77:84:ac:05:b0:45:c4:f1:80:ae:9b:
28:a3:db:8d:8e:e4:18:f0:f5:16:b5:42:36:ba:ae:
07:53:2a:74:fb:49:a8:e0:4e:62:44:81:11:42:2e:
13:d4:92:13:c1:ff:b5:86:23:95:b1:96:2c:45:52:
4f:bd:db:39:45:bd:a0:1c:8f:c2:56:e8:5f:1d:fe:
9c:fe:88:46:ed:8e:3a:64:ac:54:67:e8:6a:0b:fb:
a1:8b:be:9c:c0:09:f7:93:e9:9a:5c:f6:4a:ae:07:
5e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4A:77:3A:95:18:D0:F5:C9:A6:4B:76:14:39:0F:0C:74:F9:35:B8
X509v3 Authority Key Identifier:
keyid:7A:C3:01:F6:BA:6D:B1:CC:27:B4:54:BC:B3:32:39:AE:1D:64:1A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esMB9rptscwntFS8szI5rh1kGrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/87876d-d766-4a6c-9f05-a55ef7e3388e/1/esMB9rptscwntFS8szI5rh1kGrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:76:ac:0a:e3:b7:56:47:22:6e:2a:43:45:ba:15:13:6f:73:
21:f2:2d:1e:b7:25:ce:69:7d:b0:9f:aa:76:2e:e5:4b:b6:e8:
3b:c1:5d:4d:81:62:bb:c5:51:6f:8e:11:1e:1c:3c:54:5a:77:
45:a9:72:5e:c7:cd:68:56:5a:00:fa:79:be:21:5c:f2:c2:10:
ed:76:58:72:d3:94:d8:2a:4b:d3:21:e9:1e:74:83:6b:36:0d:
29:2d:32:0a:dc:24:d4:03:6d:5b:02:b9:eb:73:71:a4:10:54:
64:f3:43:d9:7b:d1:fe:77:29:06:1d:55:13:c0:14:e0:8a:20:
20:61:a9:12:30:5b:5c:d2:dd:33:1d:97:ca:40:8b:7e:09:86:
a3:80:24:f5:23:3a:46:10:af:14:f4:dc:77:ab:bb:cf:70:4c:
c0:d3:29:9c:ec:2c:26:ca:ec:87:f3:2c:36:e7:b2:37:9a:19:
a3:55:13:0a:ef:ac:17:b9:77:3e:59:c2:46:1f:7a:fe:9e:71:
61:d7:02:13:c1:89:45:c4:14:73:0c:e8:67:6e:bc:98:df:90:
57:be:a6:f5:71:54:fc:6a:71:59:10:37:1e:f5:4f:01:83:40:
ab:76:8e:60:54:9c:4e:5d:8a:84:58:f2:13:16:c9:ce:ea:7c:
4d:7e:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:08 2025 by rpki-client