Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
File: ESXJC-alxXrBYrVYE8_HZm7wg1o.mft (raw, json)
Hash identifier: +0P9OrNJDqupRzc6dbduStdLgtBM0e+TKSqQ9BAzVr0=
Subject key identifier: 2D:8B:D4:AF:B3:EC:CA:8C:61:83:12:A7:08:D1:64:26:8D:97:58:80
Authority key identifier: 11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
Certificate issuer: /CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Certificate serial: 01984A0A0B23A5E5E8EBB9C0A9A73D498C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
Manifest number: 0419
Signing time: Sun 27 Jul 2025 04:00:28 +0000
Manifest this update: Sun 27 Jul 2025 04:00:28 +0000
Manifest next update: Mon 28 Jul 2025 04:00:28 +0000
Files and hashes: 1: ESXJC-alxXrBYrVYE8_HZm7wg1o.crl (hash: 63870wcxUiLofi8iscP1Gob9uk3TqcbpvSoQe6w8GUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:0b:23:a5:e5:e8:eb:b9:c0:a9:a7:3d:49:8c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1125c90be6a5c57ac162b55813cfc7666ef0835a
Validity
Not Before: Jul 27 04:00:28 2025 GMT
Not After : Jul 28 04:00:28 2025 GMT
Subject: CN=2d8bd4afb3ecca8c618312a708d164268d975880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:87:ae:2c:85:1c:07:f3:8b:a8:ce:52:c1:fc:
6c:e7:29:06:16:f8:a6:cc:b6:d0:8d:25:58:cf:84:
4c:6e:80:15:95:7b:d5:f8:c3:f8:f3:bc:f6:20:c4:
7f:8a:24:39:4a:b3:20:5c:f3:8f:8d:ab:2d:67:64:
d2:ce:aa:db:fe:d4:0c:e0:55:16:66:a1:e6:5e:63:
6a:a6:ef:52:97:b2:23:f3:c1:82:3b:45:5f:90:58:
ec:71:55:4c:79:31:9e:e4:03:b5:7d:ad:ee:5a:76:
3d:42:76:bc:c4:5e:9e:34:76:21:62:13:07:b6:94:
75:6e:4f:cb:a1:1c:59:01:8f:f3:c9:ed:c4:44:30:
49:80:07:f2:dd:bf:2d:d9:de:63:e4:57:e7:f9:39:
9b:d8:6e:de:d9:1c:cc:b7:4d:b9:b6:d4:5a:aa:86:
ab:5f:ed:bb:6b:82:5d:50:11:35:14:fd:f8:d1:eb:
92:61:e7:d0:01:33:36:9d:50:57:eb:83:56:6f:ec:
da:23:54:8c:96:1b:e1:1c:65:19:84:48:1a:ec:5f:
52:4d:06:4e:1d:39:c1:fd:f3:1b:cf:97:c0:ce:39:
3a:77:c8:aa:9e:d9:10:da:1c:b7:17:60:ca:4d:d3:
76:c7:09:5e:6d:b2:68:3f:43:77:d4:86:cf:b1:cf:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8B:D4:AF:B3:EC:CA:8C:61:83:12:A7:08:D1:64:26:8D:97:58:80
X509v3 Authority Key Identifier:
keyid:11:25:C9:0B:E6:A5:C5:7A:C1:62:B5:58:13:CF:C7:66:6E:F0:83:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESXJC-alxXrBYrVYE8_HZm7wg1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/527416-ee06-4890-9fe0-eceeeb97a7d1/1/ESXJC-alxXrBYrVYE8_HZm7wg1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:1b:c1:3f:67:96:5f:13:8e:25:d7:2f:20:33:cd:da:36:1f:
a0:88:81:27:9b:c0:bd:fc:9a:fc:e6:59:45:40:1e:f2:e7:33:
16:31:1a:bd:7e:99:02:b1:16:4b:77:6e:4e:7e:9e:80:fa:f9:
48:6a:8d:de:fc:fb:fe:e1:5b:ff:e2:c5:e5:e8:bf:81:5c:ef:
99:9a:8c:57:10:83:bb:f3:2a:70:ec:d8:49:83:99:fc:97:5f:
c8:c5:c2:33:9d:15:26:6e:3d:f9:d8:86:4c:13:75:de:4a:c1:
67:b2:3c:b3:a4:14:ac:5f:c0:3a:3f:8c:a6:12:38:4a:5e:6a:
9f:4a:9d:6b:4e:78:e8:3a:74:1c:81:96:a8:07:94:b2:26:45:
2b:d9:01:1a:9f:9e:6b:f3:65:af:48:f9:c0:6c:55:03:01:dd:
71:96:37:a5:44:e9:99:40:21:73:f3:2b:ec:c8:1e:e7:cf:6b:
a5:0b:c5:75:b3:aa:10:da:85:ae:be:3d:f2:db:03:e8:6f:c9:
46:79:6d:bb:c0:40:2c:93:9e:ef:64:6c:0e:07:a8:dd:b9:a4:
a2:53:d2:6d:49:10:ba:41:ee:2c:fa:49:7f:93:e5:2e:f0:d0:
e7:68:51:9c:6a:c4:cc:37:85:e1:e5:eb:a3:ea:63:19:47:d8:
8c:13:c9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:55 2025 by rpki-client