Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier: xCocTDuOeKpTrDbSaNMy22BqmB2bx5nXaO5g/EPxiII=
Subject key identifier: 98:A4:7C:CF:BB:93:34:06:BF:FF:EC:09:03:DB:9A:41:C6:CB:E0:D3
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial: 019A4F2B5B7139848C97321F1A2114C8A58E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number: 1273
Signing time: Tue 04 Nov 2025 14:00:32 +0000
Manifest this update: Tue 04 Nov 2025 14:00:32 +0000
Manifest next update: Wed 05 Nov 2025 14:00:32 +0000
Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: pgUtkW5d051aa2BHGy980/29/N5+Eillc8u+FvJIKy4=)
2: oKyfOldZLGuN5BcDb6Q-5dX2Wxw.roa (hash: k6gLX9MPlPqi07ed6OW+GaDRLIAiAFCmAJRimOBrPk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:5b:71:39:84:8c:97:32:1f:1a:21:14:c8:a5:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Validity
Not Before: Nov 4 14:00:32 2025 GMT
Not After : Nov 5 14:00:32 2025 GMT
Subject: CN=98a47ccfbb933406bfffec0903db9a41c6cbe0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:fb:cc:53:6b:fc:6b:42:ce:8a:de:92:00:
32:2f:d9:65:17:3a:47:b6:64:ab:b3:f7:c3:41:dd:
b4:27:0d:a7:bd:ea:d3:28:db:00:c0:37:ef:bb:6c:
4a:db:74:85:93:0f:37:6c:f9:b8:ef:99:1f:3b:53:
53:d2:e0:0b:14:5c:e7:da:2b:39:72:55:e5:cb:8c:
d9:ff:a3:e8:f6:b4:9a:1a:3e:39:0e:ac:42:c2:36:
f3:c9:fb:e3:07:51:f4:91:7c:bd:f2:5f:fd:18:73:
b7:35:84:da:47:9f:c5:0a:7e:93:4b:9f:c6:16:40:
05:ab:b3:bb:9b:49:a4:56:d0:fb:5b:d9:8d:44:bd:
3a:76:c0:fa:1a:4d:2d:02:8d:53:a6:d6:72:d7:f1:
11:1a:24:61:10:4d:6d:c6:37:5d:4b:82:6a:a8:db:
69:42:93:30:ff:7c:9c:aa:bf:c2:87:1f:4f:23:47:
e1:bc:d7:d5:79:81:3a:6b:e5:9d:24:76:f6:4b:13:
b3:2b:9c:fb:cd:01:39:db:a0:29:2e:e5:c1:89:f6:
21:7b:6a:fa:1c:8f:32:75:8b:13:3f:aa:6e:56:a7:
d3:cf:a8:63:55:f1:45:f0:f5:fb:90:4e:19:d5:70:
74:e2:df:51:54:2b:93:6e:c1:95:8f:d0:d0:af:de:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A4:7C:CF:BB:93:34:06:BF:FF:EC:09:03:DB:9A:41:C6:CB:E0:D3
X509v3 Authority Key Identifier:
keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:3f:77:b1:ee:57:50:61:c5:93:10:ef:e3:b0:bf:64:c7:62:
79:8b:83:c1:9e:3d:1a:2c:76:9b:19:60:30:f9:df:2e:b9:06:
28:1e:58:7c:97:9a:e7:75:35:26:2b:42:05:58:ef:b6:10:13:
d5:4e:dc:97:b0:48:4c:e8:6f:ec:65:7f:18:9c:e0:98:51:e9:
b5:df:0e:cf:98:90:46:8d:31:c8:06:4c:f1:a2:bd:57:dc:18:
0f:92:59:e8:0b:86:e6:c4:69:cb:5f:df:44:1a:23:7f:7b:bb:
69:29:f0:f5:14:49:f3:89:3e:7d:47:81:a7:e9:6d:b1:09:0b:
14:d6:3b:b0:1a:d4:ea:06:19:4c:68:55:f6:5f:52:b9:7b:8f:
cb:e1:f1:03:36:eb:f5:59:53:28:20:80:4e:f1:cc:8a:0c:a9:
cc:4d:87:24:dc:12:a8:a1:8d:94:53:b4:c6:bb:a0:5a:4e:5a:
8e:51:45:51:d1:52:1e:95:23:f0:3f:59:6a:b5:b2:ef:29:d8:
74:bb:d2:c2:a4:61:07:de:84:89:10:22:ad:fd:1d:21:f9:e9:
da:36:aa:9b:79:ee:17:9b:cd:41:6d:01:fa:be:c9:a9:3a:84:
ba:98:f7:ee:d3:14:ea:11:8c:00:71:e3:95:92:bb:41:01:4f:
44:6b:89:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:51 2025 by rpki-client