Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
File: EsMFQE6AtaTXDSHauG_FtrgBqLg.mft (raw, json)
Hash identifier: mbF9kxhCssVQlPGV3pI1uv8YxzHfCav3ahjB3s5jvLk=
Subject key identifier: 2C:F4:4A:89:80:58:AE:75:23:B9:8A:04:05:3C:A8:58:24:69:58:72
Authority key identifier: 12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
Certificate issuer: /CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Certificate serial: 01984AE58EA811D88A9CE7D5D4288E1B41D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 08:00:14 +0000
Manifest this update: Sun 27 Jul 2025 08:00:14 +0000
Manifest next update: Mon 28 Jul 2025 08:00:14 +0000
Files and hashes: 1: EsMFQE6AtaTXDSHauG_FtrgBqLg.crl (hash: B03/le/jcySSB8EUVEJvKAxBPZ5iYmf0qtpH7bsZRcE=)
2: UKIFbdEhJSvRJBhQ9UZ29Ixwxd8.roa (hash: djsrsXvlKMi85HEyAQmyat+QxO41fFJrWFnZ+KpDs6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:8e:a8:11:d8:8a:9c:e7:d5:d4:28:8e:1b:41:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c305404e80b5a4d70d21dab86fc5b6b801a8b8
Validity
Not Before: Jul 27 08:00:14 2025 GMT
Not After : Jul 28 08:00:14 2025 GMT
Subject: CN=2cf44a898058ae7523b98a04053ca85824695872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9d:5b:b0:d7:2b:c7:57:55:57:d5:ce:50:64:
80:78:a2:02:a3:14:db:93:60:71:1b:b7:80:c6:fe:
58:60:14:e5:16:48:84:1f:8a:f1:6e:87:46:37:7e:
5c:7a:a2:47:4d:01:4f:73:1e:82:93:5b:0d:3a:be:
a3:9f:06:15:85:94:9e:3d:72:62:ad:3d:af:e1:6e:
68:c9:9d:2b:56:35:7e:3f:fe:7f:a8:46:fd:ac:04:
1c:9f:f2:3b:4e:f2:77:f3:5d:58:8b:93:d3:01:a1:
56:d7:62:2a:e0:37:e8:72:11:96:5b:cc:36:4c:ae:
8b:bc:2a:bf:fd:d1:0e:25:e8:ba:ae:f4:e6:b9:e5:
bc:5e:05:d6:55:00:83:16:7d:52:0d:f2:1e:d3:3f:
8f:63:fb:46:e0:25:c7:ba:47:10:09:38:6e:c3:cb:
9a:94:05:78:02:a7:76:72:be:d5:15:82:9b:71:57:
01:08:ce:1d:36:93:2e:70:38:9e:8c:28:d1:2d:1f:
b8:24:c0:ab:60:18:36:c7:04:49:98:4f:df:51:0d:
d6:29:44:bf:7d:c0:41:1c:a1:96:1d:c0:06:67:ea:
23:10:55:45:9c:6b:d1:56:b8:73:7e:09:2e:a6:48:
c4:66:e2:ec:a4:1b:fb:33:77:37:de:4d:d9:78:de:
b6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F4:4A:89:80:58:AE:75:23:B9:8A:04:05:3C:A8:58:24:69:58:72
X509v3 Authority Key Identifier:
keyid:12:C3:05:40:4E:80:B5:A4:D7:0D:21:DA:B8:6F:C5:B6:B8:01:A8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsMFQE6AtaTXDSHauG_FtrgBqLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7c7e90-c781-42ab-9691-ce923d19508f/1/EsMFQE6AtaTXDSHauG_FtrgBqLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:52:88:c1:c1:16:e4:4b:89:0e:1c:10:79:29:ad:77:47:3b:
ea:a2:0e:a5:b3:c2:30:6a:5e:cf:6e:b7:8a:ab:06:ec:38:bb:
aa:72:ec:52:4b:0a:bc:08:d5:3a:05:8e:cd:d8:75:2b:62:1b:
1f:e0:4c:21:b2:b4:13:e9:03:1e:f3:26:0f:6d:41:3e:8f:49:
a0:11:78:2f:36:55:e2:38:d7:0c:c8:ce:a1:a3:d3:2b:fa:61:
d2:b7:21:84:4d:d9:ed:4a:ca:6d:27:94:cc:32:ad:ae:bc:20:
c4:69:34:c2:91:00:1e:b8:19:bc:b3:d2:f5:97:1c:4d:4a:a4:
c2:d8:a1:6d:74:cd:a0:d5:68:6b:a6:dc:04:08:84:9b:40:5a:
9c:dd:4d:49:53:33:52:55:9c:7c:b2:bc:28:e9:6b:0f:a1:be:
9e:9d:bd:d3:de:08:28:65:80:0d:6a:fa:7e:3b:03:ef:a2:3c:
5c:a8:a0:8d:5c:00:19:07:95:b0:b1:2f:1b:9d:72:17:e0:ee:
9a:64:84:03:4b:ad:a8:89:f8:5a:4d:db:1f:96:3c:6e:ad:7e:
01:e6:f3:b1:24:04:8a:37:5e:e4:c6:1a:06:49:a1:dd:b3:30:
80:f9:b5:53:27:1d:2b:66:13:0a:05:c3:e0:f7:06:02:f0:94:
45:ec:94:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5Y6oEdiKnOfV1CiOG0HWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzMwNTQwNGU4MGI1YTRkNzBkMjFkYWI4NmZjNWI2Yjgw
MWE4YjgwHhcNMjUwNzI3MDgwMDE0WhcNMjUwNzI4MDgwMDE0WjAzMTEwLwYDVQQD
EygyY2Y0NGE4OTgwNThhZTc1MjNiOThhMDQwNTNjYTg1ODI0Njk1ODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA651bsNcrx1dVV9XOUGSAeKICoxTb
k2BxG7eAxv5YYBTlFkiEH4rxbodGN35ceqJHTQFPcx6Ck1sNOr6jnwYVhZSePXJi
rT2v4W5oyZ0rVjV+P/5/qEb9rAQcn/I7TvJ3811Yi5PTAaFW12Iq4DfochGWW8w2
TK6LvCq//dEOJei6rvTmueW8XgXWVQCDFn1SDfIe0z+PY/tG4CXHukcQCThuw8ua
lAV4Aqd2cr7VFYKbcVcBCM4dNpMucDiejCjRLR+4JMCrYBg2xwRJmE/fUQ3WKUS/
fcBBHKGWHcAGZ+ojEFVFnGvRVrhzfgkupkjEZuLspBv7M3c33k3ZeN62aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCz0SomAWK51I7mKBAU8qFgkaVhyMB8GA1UdIwQY
MBaAFBLDBUBOgLWk1w0h2rhvxba4Aai4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83YzdlOTAtYzc4MS00MmFiLTk2OTEt
Y2U5MjNkMTk1MDhmLzEvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83YzdlOTAtYzc4MS00MmFiLTk2OTEtY2U5MjNkMTk1MDhm
LzEvRXNNRlFFNkF0YVRYRFNIYXVHX0Z0cmdCcUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVKIwcEW
5EuJDhwQeSmtd0c76qIOpbPCMGpez263iqsG7Di7qnLsUksKvAjVOgWOzdh1K2Ib
H+BMIbK0E+kDHvMmD21BPo9JoBF4LzZV4jjXDMjOoaPTK/ph0rchhE3Z7UrKbSeU
zDKtrrwgxGk0wpEAHrgZvLPS9ZccTUqkwtihbXTNoNVoa6bcBAiEm0BanN1NSVMz
UlWcfLK8KOlrD6G+np29094IKGWADWr6fjsD76I8XKigjVwAGQeVsLEvG51yF+Du
mmSEA0utqIn4Wk3bH5Y8bq1+AebzsSQEijde5MYaBkmh3bMwgPm1UycdK2YTCgXD
4PcGAvCUReyUew==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:34:28 2025 by rpki-client