
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
File: e_es5VMOXVCQfS3bQ1vym03x1uQ.mft (raw, json)
Hash identifier: TH/NglXXeE+hdkz4GzEtwV33Cxt5IyhpNku2vNUTMoM=
Subject key identifier: A0:AA:4A:04:10:F0:76:2B:67:4E:BA:15:9E:F5:B7:66:F7:0A:4E:CA
Authority key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
Certificate issuer: /CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Certificate serial: 019876075141B689822847221CD218432ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
Manifest number: 0411
Signing time: Mon 04 Aug 2025 17:00:47 +0000
Manifest this update: Mon 04 Aug 2025 17:00:47 +0000
Manifest next update: Tue 05 Aug 2025 17:00:47 +0000
Files and hashes: 1: 7ZUQ_v-BIT_KwAz6NDX0t_K7Y_o.roa (hash: W6gsf8oTn0VsRjkJRSnQZjA1UWhDIyT1LhfUV5ExzMo=)
2: e_es5VMOXVCQfS3bQ1vym03x1uQ.crl (hash: vmMyEn9jPmZ5YDHP1sduEggRHrjhZ/7wm9ke2ko8eKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:07:51:41:b6:89:82:28:47:22:1c:d2:18:43:2e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Validity
Not Before: Aug 4 17:00:47 2025 GMT
Not After : Aug 5 17:00:47 2025 GMT
Subject: CN=a0aa4a0410f0762b674eba159ef5b766f70a4eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:4b:1b:da:51:89:01:9e:ba:af:ae:03:3a:
3a:41:3a:84:48:74:37:60:f8:21:04:33:67:1b:62:
7d:0d:ce:62:63:87:54:6c:4a:cd:01:c2:89:71:d5:
4b:df:9e:91:67:b5:25:ae:54:bc:66:54:29:85:7c:
32:0f:de:96:07:25:63:54:23:a6:9a:e5:c8:79:f0:
83:ca:c3:cc:77:ce:07:61:f4:fa:6f:98:0d:31:9b:
bb:53:1a:c9:e9:52:17:9f:13:6b:e5:98:03:79:2c:
9f:2f:4d:e4:0a:74:6d:1c:c5:72:63:06:50:89:30:
03:03:c4:73:f8:47:9c:e0:6e:c3:53:dd:c4:ca:6f:
fc:aa:12:7d:d1:87:7b:09:28:77:fd:00:39:4b:be:
67:c0:06:c9:64:7c:3f:52:7b:e8:96:e8:7d:bb:6f:
83:8c:2c:f7:47:07:50:d4:d4:71:a1:a7:6b:c6:d8:
78:0f:79:e0:aa:d5:d7:4f:b8:ba:87:d1:d2:2c:67:
f7:70:bb:29:2e:22:f0:a7:8e:16:af:87:a9:99:30:
bc:0f:f7:f0:42:4a:cf:86:e6:37:f6:49:aa:0d:ef:
b6:af:9e:9e:96:1e:98:b7:e6:f8:0a:d2:71:29:c1:
ea:ab:b9:85:ed:b0:1e:08:71:92:c6:78:14:01:e9:
25:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AA:4A:04:10:F0:76:2B:67:4E:BA:15:9E:F5:B7:66:F7:0A:4E:CA
X509v3 Authority Key Identifier:
keyid:7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:88:d3:2c:30:8c:7d:06:c1:d8:ab:7f:e0:65:b8:88:2d:aa:
80:01:8c:e3:18:80:61:ca:00:78:5e:d9:24:57:a7:b7:8c:1e:
e3:ea:b2:98:59:26:7a:3a:e2:d8:cd:0b:06:97:a6:02:9c:f8:
26:5e:b0:a3:1f:5a:4b:af:d9:98:31:97:8a:74:aa:46:43:40:
ce:08:3d:ba:15:b4:63:f1:0b:d8:27:30:23:77:ab:fe:c8:47:
5f:df:ce:8d:74:91:27:6c:b2:91:c8:91:c4:a7:72:24:30:ba:
f6:2a:83:78:e9:06:81:45:65:dc:75:6e:e1:72:8d:54:30:dd:
66:40:01:39:ae:a1:b2:ac:68:c1:47:6d:17:cf:1f:c2:59:57:
3b:69:a5:7b:67:2d:62:4e:a9:dc:d0:fd:88:8b:dd:6a:e4:43:
1e:12:c1:00:88:34:f5:3b:41:3c:39:4e:c9:9a:0b:d2:a3:b7:
f5:a6:cf:2f:de:8e:97:99:e8:01:f1:f3:5f:54:31:42:44:8f:
90:f1:e9:d7:e6:80:5e:b0:83:dc:7b:59:ee:0d:64:d3:07:64:
6d:ee:8f:bd:3c:ab:55:a1:8b:ec:fa:d8:9d:56:ea:f9:01:a8:
bc:7c:9c:38:f5:74:83:9e:51:f8:0b:79:e6:f7:d4:a3:13:ea:
3a:bb:d6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:52:52 2025 by rpki-client