
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
File: eSMEzs5_tlUdYh4ld0N1PX0-fro.mft (raw, json)
Hash identifier: /1frd8k1SRjRuLYZ3y27hdE3BAiMbXqsv8eEvjnfWZw=
Subject key identifier: 35:65:B5:AA:78:3D:FD:31:89:CA:9F:24:E6:A1:12:43:15:21:CA:6C
Authority key identifier: 79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA
Certificate issuer: /CN=792304cece7fb6551d621e257743753d7d3e7eba
Certificate serial: 019845F650A78B69FF0DF390025112B93637
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
Manifest number: 1344
Signing time: Sat 26 Jul 2025 09:00:26 +0000
Manifest this update: Sat 26 Jul 2025 09:00:26 +0000
Manifest next update: Sun 27 Jul 2025 09:00:26 +0000
Files and hashes: 1: IMdPglYzX5a0Y8UZyR6PoX9F3qI.roa (hash: LlemrthVpDv3Bg7I6x+S4EwJBWPGL+Tm33DKrH5qsTc=)
2: eSMEzs5_tlUdYh4ld0N1PX0-fro.crl (hash: fKBvK2AQBazeg36rLXMgV1X7/rCUt4DveaZ43Fykj0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:50:a7:8b:69:ff:0d:f3:90:02:51:12:b9:36:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792304cece7fb6551d621e257743753d7d3e7eba
Validity
Not Before: Jul 26 09:00:26 2025 GMT
Not After : Jul 27 09:00:26 2025 GMT
Subject: CN=3565b5aa783dfd3189ca9f24e6a112431521ca6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b8:24:8e:b2:c2:62:cb:87:3c:76:79:75:96:
5c:c6:d9:2d:a7:35:46:a9:7e:d1:80:d2:ef:ba:c9:
0b:ad:5a:75:28:4f:51:ab:11:c6:49:e8:74:6e:c7:
2b:f5:21:92:59:99:f6:2b:f9:1d:64:9b:9f:91:b5:
bc:f4:19:f7:2f:a6:4f:05:17:38:68:77:2c:30:42:
dd:e4:bf:a3:c3:3a:6e:5f:9e:d8:6f:20:75:ba:b9:
22:6f:74:cb:55:2a:0a:76:61:41:fe:fe:0f:02:59:
b7:7d:c2:55:26:dd:70:66:b3:02:7e:a7:99:a7:7b:
f5:fd:4e:51:d1:63:6d:3f:b6:fb:9d:27:91:60:b9:
78:60:bb:87:a8:d9:c8:f0:74:fa:03:35:70:c0:6c:
50:1f:ec:10:92:08:72:3b:5a:6e:3f:ca:a4:00:af:
22:79:d4:d6:4c:f0:6c:cc:20:66:4a:0c:5a:9d:ad:
d1:fd:d9:61:ac:ad:74:71:07:b3:78:68:f9:cc:b6:
b7:95:ee:e8:9d:91:bd:9f:f1:47:ab:b5:7f:fb:ae:
d1:4e:de:66:ad:c0:da:af:0c:63:90:c9:83:72:e9:
20:b1:33:cd:dc:38:44:fe:2a:0d:8f:ac:ad:43:18:
06:65:33:f8:fc:1e:9f:64:f2:43:08:d5:8d:20:d6:
d7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:65:B5:AA:78:3D:FD:31:89:CA:9F:24:E6:A1:12:43:15:21:CA:6C
X509v3 Authority Key Identifier:
keyid:79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:cf:29:7f:7e:f7:39:b6:4e:9e:69:49:ba:a7:20:92:02:b6:
b3:66:16:fc:7a:d3:1f:e3:bb:68:cc:db:5c:85:36:43:75:9d:
a3:a2:ec:3c:4c:db:e4:f5:d2:47:50:c8:56:52:aa:e7:80:c4:
7e:85:41:e8:ad:03:e0:fb:9a:e1:ee:31:36:44:91:0f:4f:47:
24:ac:b8:11:dc:7c:cf:e9:35:12:e0:ad:fb:6c:00:98:72:c6:
da:5c:2a:ea:73:f4:f3:fc:c5:9b:b8:9b:72:48:f6:4b:fe:c7:
f9:95:d8:5b:06:46:74:7f:bb:15:f8:b6:da:80:db:9b:ed:0b:
a1:39:e9:da:8a:1e:bc:f6:3e:15:28:5b:ed:01:db:57:2e:6c:
de:45:dc:39:a5:90:8a:93:b2:7a:e2:7a:09:9f:b1:34:54:db:
4a:ed:e2:aa:24:b7:bb:e1:b0:62:b5:b6:cf:7f:89:af:12:0f:
01:b3:84:bd:66:6b:29:3f:32:dc:3a:b9:47:ee:57:88:b1:e3:
00:c2:b3:e5:b8:ed:df:31:05:f0:74:38:cb:1b:54:6d:ef:aa:
ab:eb:1f:fe:52:03:21:34:2a:20:44:1e:52:56:2f:aa:24:e8:
f4:8c:b4:c6:85:94:91:e1:cc:a9:10:a4:8c:a3:d8:6f:d7:42:
19:50:cd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:47:04 2025 by rpki-client