Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
File: EsShfSBma32NKx_-GKRoevkmIY8.mft (raw, json)
Hash identifier: skzVTuHdtoG+SXtPijrasrck8evVQN4qPikD03f4aD8=
Subject key identifier: AB:65:38:9F:C8:B6:36:7B:90:84:37:CB:22:FE:A5:88:BA:F3:84:67
Authority key identifier: 12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
Certificate issuer: /CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Certificate serial: 019A4E865ADF21BE4BAF535AEE44E82029F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:19 +0000
Manifest this update: Tue 04 Nov 2025 11:00:19 +0000
Manifest next update: Wed 05 Nov 2025 11:00:19 +0000
Files and hashes: 1: EsShfSBma32NKx_-GKRoevkmIY8.crl (hash: 8rl1Mp5WdZHlM106RfVJ40HusFYm1sKAgS/YtbldwBs=)
2: nfi8L76Q0CcXdXMuyopjIwMNN1s.roa (hash: yyBzF5vSH0UZ1Eb70mzyyMArzuUjMy9cXtif0oEgNm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:5a:df:21:be:4b:af:53:5a:ee:44:e8:20:29:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c4a17d20666b7d8d2b1ffe18a4687af926218f
Validity
Not Before: Nov 4 11:00:19 2025 GMT
Not After : Nov 5 11:00:19 2025 GMT
Subject: CN=ab65389fc8b6367b908437cb22fea588baf38467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:43:33:57:f0:48:6c:ad:e7:f6:96:33:d9:
68:f3:83:35:e0:bb:f4:aa:d8:57:e2:4c:a9:9d:f5:
8b:5d:b0:ab:62:57:0c:3e:02:93:44:70:d1:86:b9:
d3:3d:52:15:22:f3:9f:c0:1b:8d:b9:9b:19:4e:af:
d5:7e:12:f7:00:f4:57:60:29:99:12:48:c4:aa:f9:
0f:2f:e2:c1:22:5b:6b:6d:6f:c1:aa:a6:4a:c1:5b:
81:b3:8f:07:e0:d4:7b:23:1c:a0:89:23:7b:bf:d9:
e6:86:22:db:1c:1d:34:c0:e8:f2:6e:fd:e3:8b:03:
29:6c:b4:64:eb:00:c0:9f:6b:33:b5:0d:51:50:5e:
44:1b:ca:e4:44:98:a7:ed:ac:1c:ef:86:b2:9c:7d:
f9:16:dd:e9:d9:69:ce:06:8b:01:f5:0c:63:ba:25:
83:48:fe:4f:8b:54:d1:1c:aa:51:e0:40:1e:ff:a6:
2f:92:d5:d4:2d:ac:47:bf:70:e6:ff:76:51:b4:88:
16:70:68:7f:52:d0:e5:10:ff:57:d4:2a:61:a7:ce:
61:6e:50:1e:be:92:22:d9:07:fb:ad:3a:64:d7:be:
1c:2c:3f:c6:2d:4d:44:dd:b5:2c:48:4b:0a:fc:50:
cd:80:41:1d:a7:65:ea:a0:11:0f:e5:dd:8a:b9:45:
71:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:65:38:9F:C8:B6:36:7B:90:84:37:CB:22:FE:A5:88:BA:F3:84:67
X509v3 Authority Key Identifier:
keyid:12:C4:A1:7D:20:66:6B:7D:8D:2B:1F:FE:18:A4:68:7A:F9:26:21:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsShfSBma32NKx_-GKRoevkmIY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/831181-b0b3-4b2e-88dc-49a96a82214e/1/EsShfSBma32NKx_-GKRoevkmIY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ab:f8:3a:a7:86:00:ca:42:0b:c4:3e:3a:16:d2:3e:5c:5c:
65:bc:6f:30:23:27:c2:18:1d:af:67:90:1b:57:6f:fb:f4:9f:
87:b4:de:da:2d:71:e2:5f:c6:38:60:7d:2e:41:b3:bf:49:82:
7b:08:23:82:38:65:b9:ea:48:24:4b:5d:9c:43:45:58:fd:43:
a8:3e:5d:86:fa:f4:56:9e:89:f3:24:a0:d6:13:18:9f:38:66:
dc:11:ef:eb:58:12:07:fb:52:1d:72:6e:2b:66:24:33:1e:90:
f8:b7:36:0e:b6:0a:18:17:aa:d3:80:04:2b:8a:8e:0f:e7:f2:
1d:2e:eb:85:d2:d7:3c:73:17:85:fd:ff:47:32:8a:2e:a4:a9:
e6:5d:43:35:5a:b9:94:8e:40:b8:95:b5:e1:54:68:cb:be:e6:
8c:31:5f:61:1f:b8:92:e9:a9:b6:5e:25:a4:a0:23:92:1f:67:
5c:8d:d3:76:23:51:1b:86:de:91:07:8d:6c:56:fb:32:52:56:
40:1d:3d:03:c1:3c:f0:e1:f4:86:ab:11:06:62:3b:b3:51:af:
01:8f:f4:f4:be:9d:b0:06:20:ee:07:08:7f:c8:c5:96:87:a9:
9a:45:8d:6c:e5:d3:81:40:15:67:4d:4a:d5:e4:e1:a6:29:dc:
8c:42:4b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:52 2025 by rpki-client