Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: QbczKNN/q+K9MDnF/dGkGsuD/abtKvjVaS4dDcv6t7c=
Subject key identifier: 95:A1:05:88:09:9A:5C:A3:94:78:AF:8B:DA:51:59:5C:B1:57:C9:24
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 01984A411BBFB1268940BBB63E59E706A1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 05:00:37 +0000
Manifest this update: Sun 27 Jul 2025 05:00:37 +0000
Manifest next update: Mon 28 Jul 2025 05:00:37 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: /cX3ZpvqSBTOCFUzDi5fT5zU/BSi9lptH1GKNrApWPs=)
2: giZEtebKwrV_K5a1acLqZif6N-k.roa (hash: lzFFffl4lpHRD7ZMSU5Ky5FbKZMuom72Ko9x5UDmCAY=)
3: r2MDM9YmqLIjylrH2WoKfJ8F-hk.roa (hash: 5oJl1RSDkKpv/NrAOtgSj/GjDfrDxGm50iGVTH3ViuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:1b:bf:b1:26:89:40:bb:b6:3e:59:e7:06:a1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Jul 27 05:00:37 2025 GMT
Not After : Jul 28 05:00:37 2025 GMT
Subject: CN=95a10588099a5ca39478af8bda51595cb157c924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:32:2e:f3:40:05:f2:c2:72:a4:e2:ee:15:16:
60:e0:03:e0:33:09:db:cf:ee:5d:3e:db:91:ce:7e:
ea:79:67:3e:8d:ec:1a:9b:a9:5b:2f:c5:d7:e0:02:
24:e1:83:35:41:16:bb:cd:49:77:bd:44:b7:62:ea:
19:e0:17:da:da:22:2e:e1:2e:35:a9:71:a5:4a:e0:
4a:44:c2:44:8a:26:a9:f7:12:aa:1f:f9:dc:ea:41:
f0:7a:23:40:25:31:b1:0e:69:69:c4:79:eb:76:07:
f1:c3:1f:b8:67:5d:7c:ea:fa:f6:08:99:fd:0c:d3:
d6:fb:54:48:48:9f:4b:38:01:2c:98:30:32:02:c9:
62:24:1d:1f:a0:bb:1a:9f:93:87:a1:dc:fe:e3:95:
ba:72:b7:d5:97:0d:8a:03:5a:71:5d:3f:95:88:95:
3b:eb:6c:86:1a:2b:7d:32:5b:d7:1f:3f:2e:00:b4:
7f:1a:32:e0:71:6e:4f:7b:23:02:66:8d:07:e0:26:
3a:60:97:e5:11:4b:e2:c8:a3:98:6f:21:7f:8b:0e:
15:f2:dc:e2:9e:10:fc:eb:a2:97:c9:c6:c5:bd:71:
71:cb:b8:fa:3d:ba:07:9f:06:d9:3a:39:13:5d:56:
78:52:c2:16:a1:b9:8c:ef:fb:ee:fc:ec:1b:30:e3:
ef:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A1:05:88:09:9A:5C:A3:94:78:AF:8B:DA:51:59:5C:B1:57:C9:24
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6b:98:81:6c:7b:82:91:b2:5c:62:8a:53:2f:88:25:e8:01:
2a:b1:b2:4d:97:8d:72:64:f4:4c:1a:75:97:37:49:98:7e:38:
c2:87:f3:56:ee:9c:04:a3:b4:f2:e5:90:a3:d7:bd:7e:70:5d:
6d:76:8d:03:a2:70:dc:6b:d5:58:c1:3e:13:61:81:e4:6a:b2:
a3:74:c7:49:9b:67:f4:f5:d7:ae:8d:bb:86:30:c0:98:a8:49:
f0:64:50:1b:6d:6d:b6:da:13:58:19:83:ca:7b:f8:a9:02:d9:
db:10:8b:62:3f:b0:94:53:8b:9e:c3:68:6a:b7:8c:06:17:f1:
31:55:3d:05:65:d6:3e:73:a5:fc:cf:ee:14:0d:48:0f:ff:c3:
36:f2:36:cc:89:66:47:a3:15:71:d7:4f:77:7d:09:d1:ac:51:
3e:bb:7b:e9:56:da:da:3a:f5:1e:d2:cb:27:90:30:f1:9a:86:
a7:32:85:07:ec:e8:c2:4e:ae:78:d6:b6:d7:71:52:a6:67:5a:
41:e0:da:98:22:63:71:b6:6c:b7:65:53:d0:af:e4:b9:39:7a:
20:38:78:ee:0b:ab:b8:06:f8:d0:32:41:7c:2b:a7:a9:65:0a:
36:91:8c:69:d4:54:68:70:d2:1e:c5:c6:38:c1:46:ca:90:69:
68:2d:aa:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQRu/sSaJQLu2PlnnBqHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2UxNzZhNjljY2M5Yzk5NmUxNjEwOTI1YzBiNmJkZjc2
YjIwN2MwHhcNMjUwNzI3MDUwMDM3WhcNMjUwNzI4MDUwMDM3WjAzMTEwLwYDVQQD
Eyg5NWExMDU4ODA5OWE1Y2EzOTQ3OGFmOGJkYTUxNTk1Y2IxNTdjOTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDIu80AF8sJypOLuFRZg4APgMwnb
z+5dPtuRzn7qeWc+jewam6lbL8XX4AIk4YM1QRa7zUl3vUS3YuoZ4Bfa2iIu4S41
qXGlSuBKRMJEiiap9xKqH/nc6kHweiNAJTGxDmlpxHnrdgfxwx+4Z1186vr2CJn9
DNPW+1RISJ9LOAEsmDAyAsliJB0foLsan5OHodz+45W6crfVlw2KA1pxXT+ViJU7
62yGGit9MlvXHz8uALR/GjLgcW5PeyMCZo0H4CY6YJflEUviyKOYbyF/iw4V8tzi
nhD866KXycbFvXFxy7j6PboHnwbZOjkTXVZ4UsIWobmM7/vu/OwbMOPvWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWhBYgJmlyjlHivi9pRWVyxV8kkMB8GA1UdIwQY
MBaAFHrOF2ppzMnJluFhCSXAtr33ayB8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82YWZjYmUtNmRmMC00Zjc3LWFmMzQt
YzYxODAzYzM0NjU3LzEvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82YWZjYmUtNmRmMC00Zjc3LWFmMzQtYzYxODAzYzM0NjU3
LzEvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGuYgWx7
gpGyXGKKUy+IJegBKrGyTZeNcmT0TBp1lzdJmH44wofzVu6cBKO08uWQo9e9fnBd
bXaNA6Jw3GvVWME+E2GB5Gqyo3THSZtn9PXXro27hjDAmKhJ8GRQG21tttoTWBmD
ynv4qQLZ2xCLYj+wlFOLnsNoareMBhfxMVU9BWXWPnOl/M/uFA1ID//DNvI2zIlm
R6MVcddPd30J0axRPrt76Vba2jr1HtLLJ5Aw8ZqGpzKFB+zowk6ueNa213FSpmda
QeDamCJjcbZst2VT0K/kuTl6IDh47guruAb40DJBfCunqWUKNpGMadRUaHDSHsXG
OMFGypBpaC2qzQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:11:01 2025 by rpki-client