Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
File: Es84yOexki9uvz_TQHNc2wQjFBg.mft (raw, json)
Hash identifier: Z5+XLYRXEey1fwj9anO7LdoXFmWwno0n5Fbzw5KoT8I=
Subject key identifier: D4:BA:0F:F0:A5:8F:CE:96:A7:B9:40:59:9E:B7:0B:63:12:E6:E8:7D
Authority key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
Certificate issuer: /CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Certificate serial: 019A4F9948A435F4A6C670A486BD3206ADA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 16:00:36 +0000
Manifest this update: Tue 04 Nov 2025 16:00:36 +0000
Manifest next update: Wed 05 Nov 2025 16:00:36 +0000
Files and hashes: 1: Es84yOexki9uvz_TQHNc2wQjFBg.crl (hash: RdIy+/Z87fL79TP/pigbeAVJmBCNHiY4FAk/w0/RBb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:48:a4:35:f4:a6:c6:70:a4:86:bd:32:06:ad:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Validity
Not Before: Nov 4 16:00:36 2025 GMT
Not After : Nov 5 16:00:36 2025 GMT
Subject: CN=d4ba0ff0a58fce96a7b940599eb70b6312e6e87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:98:cb:a6:62:63:d1:3e:7e:0f:ce:9b:1a:
1a:af:f4:0d:ba:01:61:59:7d:64:c5:aa:0d:ff:6e:
fc:58:07:e7:90:58:4d:f8:44:b1:df:cf:07:47:a5:
24:f1:9b:ae:a9:84:2a:ea:7b:22:7d:e7:1b:25:3b:
a1:c4:d1:2f:fd:f8:64:18:a0:20:ae:15:f8:fd:a6:
49:a9:24:78:da:a0:dd:07:33:11:81:d1:5e:4c:05:
83:09:c2:80:07:d2:48:bb:c2:86:18:02:4e:a6:63:
5e:d4:41:36:33:47:c7:4e:1d:36:82:6e:8e:95:38:
f9:62:b5:7a:f4:ec:5a:b4:d6:b9:9a:13:88:13:1c:
7d:6c:50:8f:df:ed:b9:2a:89:48:61:80:ca:5c:9f:
94:27:d0:e9:46:0e:92:c5:7b:9c:2d:e3:82:f7:70:
e3:f1:b2:59:7d:cd:49:98:76:98:05:23:00:af:4e:
59:10:2c:05:1f:15:3c:e7:fb:ef:f9:7d:f6:df:cf:
7b:8f:0a:4a:38:b6:ce:d0:b2:52:25:64:22:4b:7f:
77:c5:4c:75:5f:90:37:40:0c:36:37:01:ff:40:e0:
be:89:f5:58:a2:74:77:c0:75:c8:81:da:d4:54:76:
01:93:ff:c5:f7:78:d3:3a:1b:54:0d:6b:fc:fa:64:
e8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BA:0F:F0:A5:8F:CE:96:A7:B9:40:59:9E:B7:0B:63:12:E6:E8:7D
X509v3 Authority Key Identifier:
keyid:12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ac:a7:db:7c:7a:32:6b:77:0a:db:db:89:d8:98:16:4c:35:
9e:8c:b6:8f:73:b0:65:80:ab:2c:f0:e2:3c:b8:6e:da:64:a2:
35:f8:b3:ae:dd:18:fb:74:4e:79:c5:0d:40:a3:c5:bd:8f:4b:
6c:e4:c8:f6:e6:4c:e9:12:86:53:4c:af:46:6e:d2:00:48:06:
a4:7d:b7:9f:53:31:47:7e:a9:54:74:05:a1:c3:e3:92:6d:c9:
86:c7:e4:b8:2c:a9:63:14:1d:94:ec:04:4f:93:a3:c6:1d:0a:
3f:d2:61:72:af:98:71:6c:f7:2d:69:d1:62:32:da:c2:c7:e9:
b2:e7:b2:d5:b2:ba:a4:99:53:9b:42:4e:f1:d8:3d:42:18:b4:
1e:6b:e9:e0:60:f3:39:c1:21:1e:20:40:9c:6e:b1:f3:15:8a:
08:92:8d:6c:1d:fa:6e:ff:81:df:70:53:8b:a8:98:cd:26:58:
84:7f:73:c0:e7:72:f0:59:7b:e1:63:35:42:07:4f:95:c3:10:
60:c9:8a:0e:6b:e7:87:20:09:74:0b:fb:ff:37:06:49:d6:b7:
4e:c1:01:77:e9:b9:8c:37:44:65:45:f9:61:1f:15:f9:59:a3:
21:dd:93:fb:55:cc:27:8c:da:5c:0f:eb:cd:3e:0b:15:2c:4b:
8c:03:7d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:55 2025 by rpki-client