Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
File: sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json)
Hash identifier: CgGnpwHBnvAThtevCTt3D8OROS61Mrd1xxovCXYO+I0=
Subject key identifier: D4:1C:EF:F3:8E:84:0C:C8:93:DC:8B:6D:F0:31:73:B2:3F:08:90:5D
Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Certificate issuer: /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Certificate serial: 0199F2426DA58D40D9D12F1D56BE9A1CDDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
Manifest number: 1539
Signing time: Fri 17 Oct 2025 13:01:03 +0000
Manifest this update: Fri 17 Oct 2025 13:01:03 +0000
Manifest next update: Sat 18 Oct 2025 13:01:03 +0000
Files and hashes: 1: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: QAr7u94Ijdp6TDfsfRnUrOQMMxyQX8RfKTfmmqbbYPk=)
2: tUy7VKDDVboY2Qo-sNWljYmxPOI.roa (hash: nOufD9VcAARAPXFJN7YbCFA3vo77wDsfl0JVajaSTdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Oct 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f2:42:6d:a5:8d:40:d9:d1:2f:1d:56:be:9a:1c:dd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Validity
Not Before: Oct 17 13:01:03 2025 GMT
Not After : Oct 18 13:01:03 2025 GMT
Subject: CN=d41ceff38e840cc893dc8b6df03173b23f08905d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:83:ad:88:8b:90:eb:a9:48:d8:be:cb:c8:
6d:38:72:48:21:b9:51:f2:70:0f:66:2f:46:94:e8:
7d:06:3c:e6:1c:c4:b5:40:ff:17:3c:4c:21:a5:e8:
3c:2a:e7:89:b5:e8:3d:f6:e0:3c:7d:32:dc:07:cd:
d9:87:c6:a6:2d:ca:34:de:26:1b:49:4a:11:aa:d7:
b2:4d:5b:31:66:ac:af:a0:9d:5c:3c:1d:3b:0a:fa:
03:59:bb:86:6a:4c:32:91:3c:57:cb:ab:4f:cf:ef:
33:3e:d6:fa:49:83:31:61:83:81:04:32:7b:bb:19:
bb:09:4c:f3:b2:c9:0a:54:37:81:ef:d7:35:24:32:
56:87:79:10:5d:8f:51:05:c8:6c:89:b8:f3:49:05:
a1:63:73:57:32:7a:f3:db:38:59:fe:dd:de:91:98:
6b:c0:2f:86:29:e0:6d:11:c0:cd:11:9b:32:e2:8b:
1b:09:a7:80:59:91:12:a7:54:4c:ad:61:f0:79:9d:
b8:62:f2:81:0f:8b:ce:33:d9:b7:db:b5:6c:16:df:
9f:48:ed:82:89:31:40:9c:25:80:e1:3a:7d:fb:36:
72:70:f7:a4:78:5d:a9:31:54:fc:cb:3e:1c:5a:cc:
6f:c2:ad:cb:bc:b4:b1:c4:14:ec:1d:f2:21:b5:3b:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1C:EF:F3:8E:84:0C:C8:93:DC:8B:6D:F0:31:73:B2:3F:08:90:5D
X509v3 Authority Key Identifier:
keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:34:9a:fd:71:bb:35:06:d5:6f:c8:05:eb:41:8c:3c:88:64:
c3:a5:ec:63:9b:05:29:40:81:b3:78:89:2d:21:37:27:a1:5b:
8e:21:7d:c2:54:3f:c6:32:65:3d:ef:ab:28:a6:be:1b:ad:5b:
96:a4:3f:0d:c6:7b:16:d1:50:cc:61:56:35:31:f4:8b:8c:e8:
6f:af:a3:b5:fa:08:da:c1:6a:d9:24:48:77:92:46:29:73:09:
c9:6f:d6:9a:6e:08:70:d4:4b:6b:fb:05:b6:7f:45:5d:1c:48:
15:7b:37:17:0d:ab:7c:b7:e2:c6:06:48:25:e7:b6:a4:61:7b:
b9:da:2b:ef:64:00:c4:d0:e8:95:9e:52:7c:85:85:99:25:7e:
d1:f0:d2:18:4a:82:44:dc:94:ae:75:30:ed:49:f8:cf:9d:90:
a6:22:0a:0d:ac:ab:37:e5:b0:2d:9c:06:52:f2:2b:82:a9:eb:
0d:a4:f8:c1:e9:02:e7:07:96:8b:00:11:e9:91:83:34:be:a3:
9b:dd:3e:77:85:14:4d:cd:44:c3:47:78:3b:e3:33:19:83:94:
62:cf:8a:b9:3c:bf:e7:0d:0d:73:f3:c7:ce:8e:80:ba:32:b5:
b7:33:63:fe:e5:1f:4c:90:b5:9a:8e:7e:63:d1:84:68:05:c3:
80:cd:22:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 19:51:26 2025 by rpki-client