Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
File: ES0MTxbciSISn_YFDiNVYjF1ZeU.mft (raw, json)
Hash identifier: 5nhYqxJQ8FOjksqdFzxpx8t8J7+q2OIYBTZpsG7DNOI=
Subject key identifier: 97:41:2C:5C:21:EB:AA:03:C5:A2:25:9D:77:A8:B8:DC:C5:3D:57:E8
Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
Certificate issuer: /CN=112d0c4f16dc8922129ff6050e235562317565e5
Certificate serial: 019A4EF431CAACE0FF267DA6C50D9BF4C5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:00:17 +0000
Manifest this update: Tue 04 Nov 2025 13:00:17 +0000
Manifest next update: Wed 05 Nov 2025 13:00:17 +0000
Files and hashes: 1: ES0MTxbciSISn_YFDiNVYjF1ZeU.crl (hash: LWQQGtl/Dgh0CrMjaNPjDqV0yYlbfu2cHOS6ki1ZL8g=)
2: o9kVSX3gj3H9ZN8cW0Ym-IVcV44.roa (hash: lKG8mtPIe7S1JAZc980NZt3SRdrgtpPphzv++UEyF4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:31:ca:ac:e0:ff:26:7d:a6:c5:0d:9b:f4:c5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5
Validity
Not Before: Nov 4 13:00:17 2025 GMT
Not After : Nov 5 13:00:17 2025 GMT
Subject: CN=97412c5c21ebaa03c5a2259d77a8b8dcc53d57e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e6:48:bf:ce:f2:af:1b:6b:79:b4:4e:02:d6:
bd:59:fd:f9:92:4b:04:81:67:a7:f5:81:8f:4f:ba:
2b:80:7e:28:7f:c4:b5:7d:7c:ef:76:4a:53:4e:8f:
66:75:2d:37:a9:1d:1c:ab:1a:45:1f:53:5d:0c:b0:
47:a9:a2:ca:0a:98:ce:67:b8:9c:f4:ec:4c:c6:f3:
7f:32:9b:a9:c2:d6:58:aa:49:fa:de:c7:4f:3d:7e:
71:77:fe:07:9d:de:28:d2:0b:eb:df:73:74:8f:9b:
b8:cc:f0:86:5f:e1:1a:04:41:b0:69:3b:22:d6:8a:
d7:07:52:40:5e:c6:e2:48:8a:9f:d2:0c:87:51:48:
eb:26:ea:b0:63:00:ee:9a:db:c9:a1:0c:52:be:a3:
0b:43:9d:90:8f:2a:89:9b:29:d2:2b:ee:aa:5a:d4:
62:eb:70:66:1a:e4:f7:e2:90:c9:58:54:56:43:b8:
07:72:30:49:10:f8:cf:1e:bc:e9:4d:1a:62:c4:85:
cd:a6:eb:e1:ab:c9:c1:f6:70:28:62:a0:18:e4:fa:
81:c0:61:57:99:8d:7f:0a:64:0f:6a:b4:73:45:6b:
49:b3:99:ac:09:dd:3c:e7:0f:fd:e1:92:51:41:54:
d1:ed:e5:22:d3:ef:47:74:67:50:b8:9c:96:97:96:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:41:2C:5C:21:EB:AA:03:C5:A2:25:9D:77:A8:B8:DC:C5:3D:57:E8
X509v3 Authority Key Identifier:
keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b9:a8:ce:29:43:3d:09:3c:df:04:e4:cf:6c:7b:dd:10:a3:
3f:84:00:6d:e5:4e:1f:a2:43:ed:be:a3:7f:5d:cb:32:5f:a7:
70:cf:f4:2f:b3:0e:24:66:95:14:8e:4b:eb:35:bb:14:20:7d:
bd:67:9f:19:22:d1:38:11:41:f1:9c:aa:f6:46:8f:2f:3d:15:
d7:72:8b:7a:c3:92:e4:73:61:c2:97:8b:fb:a3:87:ec:1f:41:
69:b7:e4:4d:18:66:40:c5:c0:2c:71:42:91:0b:2c:3c:a5:c1:
53:88:cf:7c:f2:02:aa:f7:cf:85:a4:a4:b2:94:ea:2f:0b:58:
30:b4:b4:b9:d1:a0:c3:db:20:0f:92:cd:50:88:d2:3a:a5:bf:
a2:a9:a5:34:ce:17:f9:57:53:da:ad:92:48:c3:31:10:be:b5:
e9:9b:7a:d1:b7:43:2b:3b:53:e7:1d:13:b7:c3:da:f7:d9:ff:
81:72:e9:ed:d1:36:37:91:bb:26:c4:7c:79:ac:8b:b0:d0:16:
bc:47:56:fc:00:e4:e0:a1:82:f3:d8:d0:0f:19:60:95:4a:ce:
14:49:2e:9f:91:b3:75:a3:ef:7a:5a:9a:34:ea:40:96:7e:fe:
8f:2a:ad:cb:22:8b:6b:e7:11:7b:b9:1f:30:4a:f5:dc:3e:a3:
45:88:8b:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9DHKrOD/Jn2mxQ2b9MWhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMmQwYzRmMTZkYzg5MjIxMjlmZjYwNTBlMjM1NTYyMzE3
NTY1ZTUwHhcNMjUxMTA0MTMwMDE3WhcNMjUxMTA1MTMwMDE3WjAzMTEwLwYDVQQD
Eyg5NzQxMmM1YzIxZWJhYTAzYzVhMjI1OWQ3N2E4YjhkY2M1M2Q1N2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eZIv87yrxtrebROAta9Wf35kksE
gWen9YGPT7orgH4of8S1fXzvdkpTTo9mdS03qR0cqxpFH1NdDLBHqaLKCpjOZ7ic
9OxMxvN/MpupwtZYqkn63sdPPX5xd/4Hnd4o0gvr33N0j5u4zPCGX+EaBEGwaTsi
1orXB1JAXsbiSIqf0gyHUUjrJuqwYwDumtvJoQxSvqMLQ52QjyqJmynSK+6qWtRi
63BmGuT34pDJWFRWQ7gHcjBJEPjPHrzpTRpixIXNpuvhq8nB9nAoYqAY5PqBwGFX
mY1/CmQParRzRWtJs5msCd085w/94ZJRQVTR7eUi0+9HdGdQuJyWl5ZsXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdBLFwh66oDxaIlnXeouNzFPVfoMB8GA1UdIwQY
MBaAFBEtDE8W3IkiEp/2BQ4jVWIxdWXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVMwTVR4YmNpU0lTbl9ZRkRpTlZZakYxWmVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80NTgzMGMtNGE4Ni00MDJjLWExZWUt
NDAwOWQ4NzliOTdlLzEvRVMwTVR4YmNpU0lTbl9ZRkRpTlZZakYxWmVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80NTgzMGMtNGE4Ni00MDJjLWExZWUtNDAwOWQ4NzliOTdl
LzEvRVMwTVR4YmNpU0lTbl9ZRkRpTlZZakYxWmVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrmozilD
PQk83wTkz2x73RCjP4QAbeVOH6JD7b6jf13LMl+ncM/0L7MOJGaVFI5L6zW7FCB9
vWefGSLROBFB8Zyq9kaPLz0V13KLesOS5HNhwpeL+6OH7B9BabfkTRhmQMXALHFC
kQssPKXBU4jPfPICqvfPhaSkspTqLwtYMLS0udGgw9sgD5LNUIjSOqW/oqmlNM4X
+VdT2q2SSMMxEL616Zt60bdDKztT5x0Tt8Pa99n/gXLp7dE2N5G7JsR8eayLsNAW
vEdW/ADk4KGC89jQDxlglUrOFEkun5GzdaPvelqaNOpAln7+jyqtyyKLa+cRe7kf
MEr13D6jRYiLPQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:19 2025 by rpki-client