Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
File: EsCzmbynzX_KI2gTkGefXMqVueE.mft (raw, json)
Hash identifier: 2UUN9xw/TJOAtjsheDl+EIDuhaRI466hsZ6sBiYX2V4=
Subject key identifier: 6B:CA:0B:3D:42:48:99:6E:DD:38:D7:DD:FF:A7:43:7E:E4:EA:A1:6A
Authority key identifier: 12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
Certificate issuer: /CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Certificate serial: 019872989F5BA1619DE4EE396150E2027992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
Manifest number: 1384
Signing time: Mon 04 Aug 2025 01:01:01 +0000
Manifest this update: Mon 04 Aug 2025 01:01:01 +0000
Manifest next update: Tue 05 Aug 2025 01:01:01 +0000
Files and hashes: 1: EsCzmbynzX_KI2gTkGefXMqVueE.crl (hash: ATv95fO4SBhx7WZLBTN4NQIXBehX6B//y1REzNzogtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:9f:5b:a1:61:9d:e4:ee:39:61:50:e2:02:79:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Validity
Not Before: Aug 4 01:01:01 2025 GMT
Not After : Aug 5 01:01:01 2025 GMT
Subject: CN=6bca0b3d4248996edd38d7ddffa7437ee4eaa16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:ab:dd:7f:08:34:3e:66:4e:74:72:db:59:
79:7a:7d:af:f1:bb:37:98:8d:35:2e:c4:41:c8:07:
38:03:c2:2c:68:73:76:d0:b8:1b:0c:7e:ca:ba:2c:
c2:43:33:60:81:27:a4:b3:0a:15:d1:4a:b7:39:49:
e9:2d:c6:4d:36:5e:d8:73:1f:5f:40:37:3d:b1:bd:
f5:7a:70:ad:02:1c:6a:37:cc:6f:8f:12:cd:35:87:
b4:fc:eb:2b:12:53:bf:a1:d3:49:f0:ea:9e:19:d2:
3b:82:71:bc:36:7a:f4:eb:60:22:a1:a2:67:2e:9e:
72:46:ed:0f:c1:6c:b0:d6:15:af:15:70:ba:96:85:
67:03:c2:1f:32:7c:c7:a6:dd:a1:ff:29:96:3c:95:
5a:b5:70:b0:fa:ba:ba:2c:06:0c:b2:57:23:5d:5f:
28:e9:0d:10:d6:2e:a9:d6:11:40:8d:b1:fe:bf:00:
26:ba:6c:1f:a4:51:23:5c:e4:5e:ee:7a:22:86:5a:
bc:28:9c:9a:87:20:78:cb:e9:60:89:72:85:68:25:
6a:77:4e:6a:3b:86:dd:55:c5:0c:8d:bb:2f:99:87:
01:57:52:8e:b0:e3:f9:b1:fd:93:02:ac:06:17:fc:
14:36:55:11:19:15:9c:17:f5:72:13:8d:d9:55:6c:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CA:0B:3D:42:48:99:6E:DD:38:D7:DD:FF:A7:43:7E:E4:EA:A1:6A
X509v3 Authority Key Identifier:
keyid:12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4f:4c:c5:11:c5:97:b5:13:df:48:37:b8:48:fc:d3:2c:1a:
12:66:a9:b4:b3:2b:5d:a0:fa:a9:83:c3:0a:a4:b5:1f:78:b4:
da:b5:3b:36:0e:33:2e:c7:d9:d2:76:df:f3:16:f6:98:9d:02:
06:e3:fd:8e:a4:76:88:b1:22:98:54:d5:13:c7:99:74:4e:9a:
90:bf:cd:97:2c:1b:5f:46:17:72:09:d9:71:05:a2:03:c6:1e:
b7:b5:0f:c3:91:b7:b9:4f:14:5b:4a:bb:5d:80:79:00:79:1a:
6f:52:6e:e0:4d:25:70:a6:7c:bb:97:ef:7e:c8:39:35:31:18:
9c:0c:7c:fd:75:55:f2:02:00:7a:00:4a:c5:67:96:b9:bd:e2:
07:6f:43:12:cc:55:f6:a7:7d:9e:f8:95:d9:d6:d7:19:fc:99:
ff:63:c8:00:00:d3:ba:c7:3f:0a:d3:41:44:02:3c:96:6a:51:
0a:d3:3c:04:7d:ef:ee:39:e5:92:7a:25:65:27:7c:21:49:a4:
a9:75:59:b1:65:5d:14:f3:c2:84:9d:18:f1:e6:4d:e0:a8:6c:
be:20:6b:b6:86:fa:25:2b:7e:9b:a3:a2:0a:1e:de:43:75:e5:
3a:61:59:98:30:14:1d:a9:62:73:5d:28:8c:03:cd:37:46:5d:
ab:75:92:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymJ9boWGd5O45YVDiAnmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzBiMzk5YmNhN2NkN2ZjYTIzNjgxMzkwNjc5ZjVjY2E5
NWI5ZTEwHhcNMjUwODA0MDEwMTAxWhcNMjUwODA1MDEwMTAxWjAzMTEwLwYDVQQD
Eyg2YmNhMGIzZDQyNDg5OTZlZGQzOGQ3ZGRmZmE3NDM3ZWU0ZWFhMTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkWr3X8IND5mTnRy21l5en2v8bs3
mI01LsRByAc4A8IsaHN20LgbDH7KuizCQzNggSekswoV0Uq3OUnpLcZNNl7Ycx9f
QDc9sb31enCtAhxqN8xvjxLNNYe0/OsrElO/odNJ8OqeGdI7gnG8Nnr062AioaJn
Lp5yRu0PwWyw1hWvFXC6loVnA8IfMnzHpt2h/ymWPJVatXCw+rq6LAYMslcjXV8o
6Q0Q1i6p1hFAjbH+vwAmumwfpFEjXORe7noihlq8KJyahyB4y+lgiXKFaCVqd05q
O4bdVcUMjbsvmYcBV1KOsOP5sf2TAqwGF/wUNlURGRWcF/VyE43ZVWzc1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvKCz1CSJlu3TjX3f+nQ37k6qFqMB8GA1UdIwQY
MBaAFBLAs5m8p81/yiNoE5Bnn1zKlbnhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNDem1ieW56WF9LSTJnVGtHZWZYTXFWdWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMGNhOWUtN2NjNi00YWRjLThiZTQt
ZjRlZDI2ZTQ0Yzk3LzEvRXNDem1ieW56WF9LSTJnVGtHZWZYTXFWdWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9iMGNhOWUtN2NjNi00YWRjLThiZTQtZjRlZDI2ZTQ0Yzk3
LzEvRXNDem1ieW56WF9LSTJnVGtHZWZYTXFWdWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFU9MxRHF
l7UT30g3uEj80ywaEmaptLMrXaD6qYPDCqS1H3i02rU7Ng4zLsfZ0nbf8xb2mJ0C
BuP9jqR2iLEimFTVE8eZdE6akL/NlywbX0YXcgnZcQWiA8Yet7UPw5G3uU8UW0q7
XYB5AHkab1Ju4E0lcKZ8u5fvfsg5NTEYnAx8/XVV8gIAegBKxWeWub3iB29DEsxV
9qd9nviV2dbXGfyZ/2PIAADTusc/CtNBRAI8lmpRCtM8BH3v7jnlknolZSd8IUmk
qXVZsWVdFPPChJ0Y8eZN4KhsviBrtob6JSt+m6OiCh7eQ3XlOmFZmDAUHalic10o
jAPNN0Zdq3WSnA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:20 2025 by rpki-client