Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
File: EsShfSBma32NKx_-GKRoevkmIY8.mft (raw, json)
Hash identifier: xEv9zkmTcltr3jJPsN0/URS7CMUrsDXAQI+IYtWe9Ps=
Subject key identifier: 41:D2:F4:3B:D9:F5:62:66:F7:E2:96:83:0B:D3:FA:D2:7B:30:A4:91
Authority key identifier: 12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
Certificate issuer: /CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Certificate serial: 0198963736212D91437CB1BBCCB1616B18D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
Manifest number: 1628
Signing time: Sun 10 Aug 2025 23:00:57 +0000
Manifest this update: Sun 10 Aug 2025 23:00:57 +0000
Manifest next update: Mon 11 Aug 2025 23:00:57 +0000
Files and hashes: 1: EsShfSBma32NKx_-GKRoevkmIY8.crl (hash: AtVwx8acogOypYX6vPdwNMtlI62qsz9DizcJs32dSMU=)
2: nfi8L76Q0CcXdXMuyopjIwMNN1s.roa (hash: yyBzF5vSH0UZ1Eb70mzyyMArzuUjMy9cXtif0oEgNm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:36:21:2d:91:43:7c:b1:bb:cc:b1:61:6b:18:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Validity
Not Before: Aug 10 23:00:57 2025 GMT
Not After : Aug 11 23:00:57 2025 GMT
Subject: CN=41d2f43bd9f56266f7e296830bd3fad27b30a491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:2a:c8:3f:dc:1b:30:1b:f6:12:a1:fc:a7:
03:a6:f3:c7:f2:21:14:7b:d7:cc:4b:4b:b7:7f:58:
e6:a9:d1:65:2a:75:e9:67:2a:e4:df:a6:7e:8a:e3:
1b:14:c5:75:84:5a:64:6d:8d:e4:3f:95:ba:68:01:
d9:9a:26:49:81:15:3c:2c:de:a4:39:26:fe:7f:aa:
4e:08:cb:a8:2d:34:f0:24:26:03:10:3e:5f:4d:bc:
5f:2b:8c:eb:fc:6a:5e:0a:36:83:4c:a3:b3:93:c8:
a1:b8:3a:21:13:e8:e0:7c:76:00:65:b6:0c:0d:c1:
4e:d9:d9:af:26:a5:db:55:84:af:50:d4:4b:bc:34:
93:4e:68:fb:f4:b2:75:31:7a:40:0e:ce:9c:8c:be:
0d:79:22:fe:88:e5:af:9f:ed:77:96:1a:2c:75:e8:
e6:ac:a9:2f:71:37:f8:0c:01:c7:2a:93:38:03:be:
ad:74:c3:c9:9b:6a:57:84:f5:38:ab:e5:53:03:6a:
5f:48:22:5f:fc:cf:f3:49:52:3e:c3:26:c3:01:1c:
44:19:aa:b9:52:53:db:a2:8a:e1:56:ce:a5:59:30:
04:a0:c9:fa:12:f5:3e:97:c6:60:10:ee:e9:1e:31:
6c:be:14:9a:c2:ea:ef:b3:26:36:3d:fe:c9:a0:f2:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D2:F4:3B:D9:F5:62:66:F7:E2:96:83:0B:D3:FA:D2:7B:30:A4:91
X509v3 Authority Key Identifier:
keyid:12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:73:86:38:bd:d1:4e:45:b8:23:e1:7f:ac:5a:34:98:61:6e:
b8:89:39:56:c5:15:c5:72:4a:d8:e6:af:2d:e4:cb:f0:30:c4:
15:94:b6:af:a3:b6:c4:87:dc:7c:e5:50:0a:ba:8c:70:fe:c9:
4b:2b:84:38:c5:5f:cb:86:05:78:28:c9:92:4d:b0:e8:39:23:
db:59:85:7e:ba:aa:c6:4d:46:b2:3e:2c:3b:5d:68:cd:53:4b:
53:7b:0e:12:ce:19:9b:bd:82:43:08:ce:cc:c0:0b:dc:4a:6a:
b7:1f:4b:fc:42:3a:3b:3c:a4:cf:f1:5b:26:b7:0b:a7:80:2b:
82:e3:c3:63:46:cf:16:d5:4a:ae:bc:67:f2:48:5d:8d:6c:70:
e7:68:d6:dd:b5:d2:78:57:42:03:6d:85:ca:50:c2:d9:4c:0e:
91:35:37:d3:23:aa:58:f4:68:5e:bb:24:18:4b:48:62:ee:27:
dc:90:4e:22:f2:1d:f0:8c:f6:65:0e:59:08:31:ea:af:ad:21:
1e:3e:e8:02:39:e4:10:fc:4e:22:f6:5f:dd:02:de:e4:c8:9d:
7d:f9:bb:2d:bf:81:00:72:c4:79:96:50:75:13:17:60:f7:de:
a8:19:cb:b5:29:c3:8a:69:e5:80:24:32:f7:18:b6:07:c1:0e:
96:bc:6b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:47:11 2025 by rpki-client