Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
File: ES0MTxbciSISn_YFDiNVYjF1ZeU.mft (raw, json)
Hash identifier: bfaRN9V5LHApedxvNqaUVg8lrmn9AD940wRbn7HVAlc=
Subject key identifier: 43:92:36:29:21:93:21:AA:A5:2C:7B:00:F2:76:DA:1B:9D:46:31:BF
Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
Certificate issuer: /CN=112d0c4f16dc8922129ff6050e235562317565e5
Certificate serial: 019854FBE639B090B8BFAD56A6E030F5D746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
Manifest number: 1608
Signing time: Tue 29 Jul 2025 07:00:51 +0000
Manifest this update: Tue 29 Jul 2025 07:00:51 +0000
Manifest next update: Wed 30 Jul 2025 07:00:51 +0000
Files and hashes: 1: ES0MTxbciSISn_YFDiNVYjF1ZeU.crl (hash: 3IB4QMazlIB43Sont8OZkO8+keONoc07Sz0QPVpKwY0=)
2: o9kVSX3gj3H9ZN8cW0Ym-IVcV44.roa (hash: lKG8mtPIe7S1JAZc980NZt3SRdrgtpPphzv++UEyF4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:e6:39:b0:90:b8:bf:ad:56:a6:e0:30:f5:d7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5
Validity
Not Before: Jul 29 07:00:51 2025 GMT
Not After : Jul 30 07:00:51 2025 GMT
Subject: CN=43923629219321aaa52c7b00f276da1b9d4631bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:3d:15:1c:64:fd:1e:b7:11:81:6c:ca:d8:
b0:b5:36:32:dd:aa:92:05:6c:ae:d6:6f:0c:8b:f2:
7d:34:5e:c2:e0:c2:85:ac:4f:9c:bd:21:d6:e5:68:
6c:93:3f:aa:b4:6f:f1:df:2f:26:59:43:ba:cd:cc:
2a:78:dc:39:15:63:d5:64:f6:c0:fa:36:13:2b:de:
1c:5f:89:c3:2f:5d:b3:eb:e9:95:73:dc:b3:3b:3b:
63:19:28:d0:ce:cc:d0:a7:b6:6e:9d:ae:dc:3e:35:
cb:c0:2b:fc:25:28:33:25:41:15:5b:8d:7f:66:e5:
ad:f4:de:43:71:24:0b:12:f6:06:6c:10:9f:dd:60:
4e:b0:c3:51:35:0f:20:1c:7b:b0:f8:a8:63:f0:9c:
d3:cb:30:87:07:31:7d:85:d7:51:a1:66:63:68:60:
6b:ea:54:99:7f:e7:c5:a1:68:a7:1a:53:a6:8b:3d:
df:7a:5e:c2:f6:89:d5:fc:37:fe:81:82:76:9a:7b:
6a:f9:b0:89:b4:bd:b2:c1:28:ba:9c:38:36:f4:7f:
bc:17:3d:b3:ad:a3:30:79:21:54:cd:22:07:c2:f9:
a4:fe:09:9e:0f:6a:15:b4:1b:a7:38:d4:b5:ea:1b:
50:cc:a9:ae:9b:bb:cb:15:c4:c3:73:9f:a6:d6:e9:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:92:36:29:21:93:21:AA:A5:2C:7B:00:F2:76:DA:1B:9D:46:31:BF
X509v3 Authority Key Identifier:
keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:25:eb:6e:dd:ed:76:8f:58:4f:be:bd:57:53:e8:e7:af:77:
c3:47:a8:31:ed:3a:03:ef:38:5d:6f:68:1a:ca:04:00:28:ef:
9c:94:78:9b:40:64:eb:ec:97:19:46:55:52:e8:77:dd:ce:5e:
9f:d9:48:bd:70:79:79:ad:33:da:88:ee:c2:c3:c4:f2:9b:a3:
4a:ed:68:6b:1c:a9:99:e9:f4:b4:ef:80:8a:d5:12:b6:1c:16:
a6:08:6a:71:4f:5b:42:90:4f:12:d8:78:a0:9e:7e:6c:bc:0d:
40:13:6e:aa:b5:8d:b1:4a:61:56:c4:58:bb:f5:e3:9f:56:3a:
10:66:b3:0e:0b:72:a5:66:c6:66:94:7c:17:f5:d9:3b:6b:12:
c4:e9:0c:da:ea:6c:86:e1:21:25:c7:8e:6f:d7:11:46:7f:92:
c7:37:97:18:76:24:3b:b5:32:db:05:cf:73:8a:41:11:ac:54:
53:7d:6c:19:5d:f1:bb:dd:76:df:44:dd:cf:ba:87:69:71:c5:
c6:07:ef:ee:65:d1:3e:6c:8d:2c:cb:1e:6f:54:4b:75:32:74:
59:4c:96:87:7c:e5:9e:1f:62:1d:66:fa:7c:c6:f2:c8:a6:4d:
a1:88:af:35:09:16:da:be:a3:a7:d5:e2:80:18:37:1d:a9:b0:
e2:48:26:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:37:47 2025 by rpki-client