Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
File: Es2a3RYTfourmNeOKjNgvIvW8PE.mft (raw, json)
Hash identifier: L3nnO4ldRZnMLxawL/96xBpB1hn3iXIKRcWUEJds+Nk=
Subject key identifier: 6E:CA:61:F0:63:E9:07:3E:FD:23:AE:95:76:90:6C:7A:F8:49:38:1D
Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
Certificate issuer: /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Certificate serial: 01987A51D565CACDF1A0805F3D3D6AA7F5DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
Manifest number: 161C
Signing time: Tue 05 Aug 2025 13:00:39 +0000
Manifest this update: Tue 05 Aug 2025 13:00:39 +0000
Manifest next update: Wed 06 Aug 2025 13:00:39 +0000
Files and hashes: 1: Es2a3RYTfourmNeOKjNgvIvW8PE.crl (hash: xhy+1Wf1rf5dFXhecrMA75/K/5E7nJTxQYEug8ghxk4=)
2: l3o0cPreMKkY6Zin7N9ceMUABWg.roa (hash: IkZ3DQrsK1OPin+reh8WbUesG/v7qTfWkg1bNypSLzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:51:d5:65:ca:cd:f1:a0:80:5f:3d:3d:6a:a7:f5:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Validity
Not Before: Aug 5 13:00:39 2025 GMT
Not After : Aug 6 13:00:39 2025 GMT
Subject: CN=6eca61f063e9073efd23ae9576906c7af849381d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:e0:22:95:8c:2b:55:7f:02:92:5f:75:9a:
2c:5b:f8:da:79:e3:f0:27:62:6d:bb:a9:cc:8a:94:
94:46:a2:99:41:87:33:b2:fd:0e:14:a2:23:b5:d9:
32:04:54:91:6a:10:38:bb:c6:94:97:11:2a:da:e5:
42:c5:7b:75:b7:c5:9f:79:3e:76:4d:a3:7b:7a:15:
05:7a:05:3c:ff:8f:7c:fe:35:4c:8d:e6:ee:29:f0:
40:69:11:2b:c5:0c:de:85:b3:b1:ec:7b:6d:7c:a4:
e6:12:b0:6a:03:9c:1e:86:fb:f4:a1:21:e0:cf:47:
70:33:0b:0e:d0:f4:9c:50:47:0f:77:f1:4f:2c:33:
c3:eb:2a:77:7f:69:be:d4:16:67:93:70:b5:10:59:
bb:f4:be:6a:6d:fd:83:0a:c9:37:13:fd:b2:1d:43:
ed:2a:4b:e1:1a:63:65:e5:dd:58:78:6b:7f:da:4b:
33:2f:4e:66:2b:53:83:1d:8a:23:b6:d1:ae:2b:aa:
fc:96:21:74:d8:bf:95:a5:ff:4a:1a:d0:8d:84:29:
1f:88:58:63:14:0a:f9:93:a0:47:fd:83:26:4a:9d:
c3:ae:13:44:cb:c0:95:ef:af:45:38:63:af:1c:5b:
3a:bf:84:35:91:ff:2f:1f:99:70:c4:65:29:3b:aa:
39:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CA:61:F0:63:E9:07:3E:FD:23:AE:95:76:90:6C:7A:F8:49:38:1D
X509v3 Authority Key Identifier:
keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ff:ee:cd:0e:de:da:f5:68:d1:66:1a:ab:72:38:dd:42:35:
af:54:a1:49:f0:43:be:1e:f9:e3:e6:ec:a4:59:2e:82:d6:86:
d6:93:7b:4a:3b:50:17:b3:79:b0:32:a3:2c:94:3a:84:2c:36:
59:9e:6f:12:69:10:5f:08:54:f3:ef:64:c0:02:88:c9:56:b3:
4a:9f:4d:59:e2:a2:dd:9a:eb:28:82:49:0f:98:22:8a:a7:1e:
80:e9:29:be:ae:fc:0f:c8:72:d8:8b:80:65:72:28:cd:c1:aa:
11:cd:1a:2e:86:43:69:60:c9:36:7d:38:36:13:d6:03:8f:28:
92:55:24:16:f1:b0:ae:f8:23:b2:45:bc:49:67:6c:7c:54:d3:
1b:c1:65:40:f8:70:2f:3a:49:81:0a:f2:65:f4:50:59:33:8b:
72:99:e9:e5:3f:d4:e4:73:3f:12:08:e9:4e:9e:53:7b:3a:8a:
b5:58:4a:ad:f2:ed:b0:af:30:c2:68:7e:f7:89:ff:2e:f4:30:
ca:ab:96:d8:60:7d:77:05:59:5c:51:d2:6f:e4:a2:5f:fe:90:
1e:ba:60:0f:98:f7:4e:d3:4b:08:73:bf:06:88:a6:1f:c6:1d:
c7:6d:bd:f1:6a:56:95:34:ee:16:13:81:19:73:9f:ca:4c:0f:
59:c9:9a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:13:19 2025 by rpki-client