Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
File: ESe41aUEAgm4mTvyAxeJw7K6t8c.mft (raw, json)
Hash identifier: NuXPqsGtmPApXhYaD6TFBIEAsMAPQYW1S6HZbzQ+cMw=
Subject key identifier: 90:37:D1:57:C2:ED:38:E5:F7:FF:9D:E7:95:CF:5B:8F:35:9B:5D:C3
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Certificate issuer: /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial: 019A4D3D1C254EF53DCE5B80A29BD49AB0C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 05:00:41 +0000
Manifest this update: Tue 04 Nov 2025 05:00:41 +0000
Manifest next update: Wed 05 Nov 2025 05:00:41 +0000
Files and hashes: 1: ESe41aUEAgm4mTvyAxeJw7K6t8c.crl (hash: 3ssI/icV2cPzdLIko1MgSdvbhm6dGtc1St/NqHBn6n4=)
2: N6ILORbRZvbQFYCBBRtXEQJq4EE.roa (hash: mmnPcV9IaUAzNHOhWtx5CYix9aLEDcUiIi0yf9zddR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:1c:25:4e:f5:3d:ce:5b:80:a2:9b:d4:9a:b0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Validity
Not Before: Nov 4 05:00:41 2025 GMT
Not After : Nov 5 05:00:41 2025 GMT
Subject: CN=9037d157c2ed38e5f7ff9de795cf5b8f359b5dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:f6:52:48:9d:8f:6d:c6:35:45:e4:e2:31:
41:a8:7a:7c:12:2c:7e:b9:48:20:02:b8:77:07:08:
37:f4:84:dc:06:00:57:30:5d:51:af:a1:40:09:c0:
18:ab:f6:8d:91:00:5b:7c:fb:88:0b:70:b7:8c:3b:
20:12:af:25:84:8e:0c:09:48:a0:1f:fc:f8:c9:78:
a0:e7:44:c0:1d:7d:5d:5f:5e:30:39:d0:3f:81:5f:
c9:b8:31:f1:4b:11:61:63:44:76:42:9e:6d:26:90:
23:be:24:03:cc:e2:b7:02:0f:fb:bf:5c:b5:bc:0e:
19:10:2e:22:01:11:3e:ce:5a:15:c2:ea:20:78:1b:
f8:c2:74:39:cc:9a:37:35:e9:99:13:f0:df:99:e8:
40:9c:ce:f5:c8:06:e1:06:e5:5e:82:ab:a6:68:93:
e0:42:52:06:da:f1:aa:19:3a:2e:ad:14:ec:38:86:
68:7e:ae:f8:5c:21:55:f6:1a:63:ce:0f:ff:51:8b:
62:8b:07:3b:c3:55:f8:33:4c:0d:81:b8:98:3b:6d:
9f:0c:dd:07:03:79:22:7c:6e:a2:da:88:df:30:33:
77:6b:00:96:e3:90:89:c2:4b:56:6b:d1:e6:bf:2d:
b3:3c:c1:55:32:1c:3d:8f:c7:52:47:09:3e:30:62:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:37:D1:57:C2:ED:38:E5:F7:FF:9D:E7:95:CF:5B:8F:35:9B:5D:C3
X509v3 Authority Key Identifier:
keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:40:68:4a:6f:3d:65:81:9d:e9:42:7c:61:00:c6:42:e3:5b:
cc:ed:2b:de:4c:e9:42:7f:e9:b2:1a:d3:37:94:53:01:46:88:
f1:56:1e:2c:f4:61:68:19:17:e0:77:0b:94:63:9c:59:1b:00:
e4:8f:8d:0d:f4:84:28:4e:95:57:36:e5:94:95:06:e8:cd:31:
f7:62:71:d7:c2:6f:09:fb:e9:71:8f:5e:1e:20:48:a0:37:7a:
21:22:66:81:95:f3:44:7f:df:09:bb:89:36:9a:a2:cb:8d:98:
3d:80:db:2a:dc:3c:b7:33:ae:42:94:93:75:23:05:3a:81:f7:
4f:84:bc:ed:a9:25:6f:f1:da:5a:96:9d:b9:53:0e:0f:32:58:
6e:12:b8:13:bf:c0:d6:9f:30:df:01:9f:b6:fc:2d:d5:11:32:
28:55:5e:41:5d:f4:3c:8c:c2:a7:71:bb:ad:79:60:e6:03:52:
5f:a3:a7:7f:c4:f2:23:5d:c2:a6:c6:fa:96:c5:92:c1:12:c2:
9b:dc:72:ee:7c:36:3b:d2:a1:56:b0:6c:ad:a5:4f:97:24:78:
84:ac:83:11:08:3f:1b:61:a9:81:3c:ee:f1:be:68:2e:37:81:
2a:09:73:c4:94:b9:fe:fa:04:d5:da:6b:44:1c:50:42:9d:d1:
a0:a8:af:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPRwlTvU9zluAopvUmrDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMjdiOGQ1YTUwNDAyMDliODk5M2JmMjAzMTc4OWMzYjJi
YWI3YzcwHhcNMjUxMTA0MDUwMDQxWhcNMjUxMTA1MDUwMDQxWjAzMTEwLwYDVQQD
Eyg5MDM3ZDE1N2MyZWQzOGU1ZjdmZjlkZTc5NWNmNWI4ZjM1OWI1ZGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaj2Ukidj23GNUXk4jFBqHp8Eix+
uUggArh3Bwg39ITcBgBXMF1Rr6FACcAYq/aNkQBbfPuIC3C3jDsgEq8lhI4MCUig
H/z4yXig50TAHX1dX14wOdA/gV/JuDHxSxFhY0R2Qp5tJpAjviQDzOK3Ag/7v1y1
vA4ZEC4iARE+zloVwuogeBv4wnQ5zJo3NemZE/DfmehAnM71yAbhBuVegqumaJPg
QlIG2vGqGTourRTsOIZofq74XCFV9hpjzg//UYtiiwc7w1X4M0wNgbiYO22fDN0H
A3kifG6i2ojfMDN3awCW45CJwktWa9Hmvy2zPMFVMhw9j8dSRwk+MGLf9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJA30VfC7Tjl9/+d55XPW481m13DMB8GA1UdIwQY
MBaAFBEnuNWlBAIJuJk78gMXicOyurfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVNlNDFhVUVBZ200bVR2eUF4ZUp3N0s2dDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8yYjVmZWEtOGY1MS00YmExLWJkY2Mt
M2ViY2FkYWJmMGQ4LzEvRVNlNDFhVUVBZ200bVR2eUF4ZUp3N0s2dDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8yYjVmZWEtOGY1MS00YmExLWJkY2MtM2ViY2FkYWJmMGQ4
LzEvRVNlNDFhVUVBZ200bVR2eUF4ZUp3N0s2dDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0BoSm89
ZYGd6UJ8YQDGQuNbzO0r3kzpQn/pshrTN5RTAUaI8VYeLPRhaBkX4HcLlGOcWRsA
5I+NDfSEKE6VVzbllJUG6M0x92Jx18JvCfvpcY9eHiBIoDd6ISJmgZXzRH/fCbuJ
Npqiy42YPYDbKtw8tzOuQpSTdSMFOoH3T4S87aklb/HaWpaduVMODzJYbhK4E7/A
1p8w3wGftvwt1REyKFVeQV30PIzCp3G7rXlg5gNSX6Onf8TyI13Cpsb6lsWSwRLC
m9xy7nw2O9KhVrBsraVPlyR4hKyDEQg/G2GpgTzu8b5oLjeBKglzxJS5/voE1dpr
RBxQQp3RoKiv1w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:03 2025 by rpki-client