Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json)
Hash identifier: 0grv/Rlihwidxgd44osiBTkbZdjUCjZZP09A6MA8WL0=
Subject key identifier: 5B:E8:D6:C7:67:0B:67:73:7E:60:B3:5B:98:AB:F3:3E:1B:21:D6:C3
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 019A552D4729F819505F7DBAABA4509C8DB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
Manifest number: 0892
Signing time: Wed 05 Nov 2025 18:00:21 +0000
Manifest this update: Wed 05 Nov 2025 18:00:21 +0000
Manifest next update: Thu 06 Nov 2025 18:00:21 +0000
Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: mCtrUY5HxU8fOKQ5LPPuPlOmQCXr/NcN7y1HMcO8U7c=)
2: pWMenEyK3oj7AZ6h81KI2eooBIo.roa (hash: 6KZd57Ad66QVQkNRU3497fAssJrDtYq8EPVr4qqDMKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 18:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:47:29:f8:19:50:5f:7d:ba:ab:a4:50:9c:8d:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: Nov 5 18:00:21 2025 GMT
Not After : Nov 6 18:00:21 2025 GMT
Subject: CN=5be8d6c7670b67737e60b35b98abf33e1b21d6c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:4e:c2:2f:f4:f2:01:29:e9:08:27:e1:ab:
e0:63:a2:3b:d6:a5:b1:a6:06:5f:ad:51:00:e1:d2:
37:53:53:cd:c9:ed:89:24:43:40:1a:42:01:d9:28:
fd:54:82:24:5e:8a:2a:c2:d9:ad:2e:ff:a8:7f:b9:
4e:05:fa:3d:30:98:7c:60:10:53:2e:90:40:3c:2f:
72:fb:a0:af:be:de:4f:d6:cc:70:40:c1:97:ed:89:
a3:04:c8:7e:3e:d7:49:24:de:dd:c8:d1:0e:ff:64:
12:64:2f:58:96:17:77:39:2e:5b:29:14:e8:38:b4:
f0:77:ce:e6:71:18:aa:76:1e:da:42:03:59:7e:27:
b0:6c:c4:17:af:b8:8e:2e:77:8b:66:b2:31:35:8d:
fa:42:b6:d5:76:fe:b1:ac:f4:1e:e2:a4:18:a6:02:
54:88:18:08:85:3c:1b:9e:60:38:7f:b7:1f:e6:63:
bb:b4:e2:c3:c8:1d:9a:3c:1a:ff:19:a2:56:89:98:
8c:a8:cc:dc:07:fd:03:80:0b:6d:0e:71:b4:b3:8f:
c8:0b:25:c8:21:40:9b:d3:4d:9e:66:fc:ac:63:a9:
ab:cb:20:7c:9c:ee:f1:c6:51:4f:e1:89:5e:89:aa:
d4:41:2f:b0:75:72:87:1f:29:d3:18:6f:17:8b:7d:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E8:D6:C7:67:0B:67:73:7E:60:B3:5B:98:AB:F3:3E:1B:21:D6:C3
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:c4:fe:d7:95:bc:95:71:c4:8d:8c:77:41:cd:19:4a:d9:84:
75:93:97:f3:e0:7a:e1:2c:f5:94:a3:d6:00:14:10:a7:a3:63:
f7:16:6c:9f:a9:be:17:bf:37:89:46:9e:b4:12:02:7e:67:1e:
6c:a9:25:41:97:f9:78:b4:a4:7d:29:89:b0:38:15:28:78:03:
ce:38:3e:7d:8d:23:4b:d9:1c:59:2c:4c:ad:a5:0c:85:be:01:
a9:4d:4d:f2:2f:ea:df:c0:e0:b8:7b:e4:2c:4c:a3:1c:90:63:
76:aa:c7:3f:bc:8e:01:53:81:c6:a9:57:d6:7c:6d:37:6a:e6:
0f:c9:a1:9c:12:8e:48:cb:f4:a7:e9:4d:ab:63:64:f8:9e:51:
c9:2d:8e:00:ad:30:d6:03:a5:5a:6f:8d:5f:0e:70:e9:3e:81:
e3:59:42:ec:de:4a:40:1d:88:d3:7f:0c:88:74:cd:5f:ce:5b:
26:d1:f1:bc:16:ba:61:ce:d6:41:ff:7d:0e:e0:77:b0:e1:fa:
0e:f1:74:a6:02:ef:9d:62:7f:37:3e:98:86:05:e0:ac:84:85:
a9:01:d1:fe:32:15:63:e0:97:28:72:3c:7a:ad:78:0f:19:09:
1d:c9:ac:21:dc:53:c2:fa:1e:15:f8:ba:0e:84:e3:b9:9a:88:
c0:59:28:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:20:27 2025 by rpki-client