Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
File: ESe41aUEAgm4mTvyAxeJw7K6t8c.mft (raw, json)
Hash identifier: kFpVk3MqejDRq+lxTKI5aAxWBcLZIAVbDhNb08/bRUc=
Subject key identifier: C6:F5:A0:C9:B6:B3:25:B7:F9:04:F1:5B:B0:7E:77:E5:04:4E:B7:9E
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Certificate issuer: /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial: 019849D330690637A3586BA8A8D1BEF1984F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 03:00:33 +0000
Manifest this update: Sun 27 Jul 2025 03:00:33 +0000
Manifest next update: Mon 28 Jul 2025 03:00:33 +0000
Files and hashes: 1: ESe41aUEAgm4mTvyAxeJw7K6t8c.crl (hash: TIGpDBXNxFdl7un3uUABIpVtv693yJeWzJUJEx+to0A=)
2: N6ILORbRZvbQFYCBBRtXEQJq4EE.roa (hash: mmnPcV9IaUAzNHOhWtx5CYix9aLEDcUiIi0yf9zddR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:30:69:06:37:a3:58:6b:a8:a8:d1:be:f1:98:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Validity
Not Before: Jul 27 03:00:33 2025 GMT
Not After : Jul 28 03:00:33 2025 GMT
Subject: CN=c6f5a0c9b6b325b7f904f15bb07e77e5044eb79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:37:7c:d1:98:09:06:ce:49:b6:04:4a:9c:
ca:28:22:ce:b8:88:87:85:1c:34:2a:e5:4c:8e:07:
bc:b5:80:c5:33:68:61:f3:91:6d:aa:dc:53:24:71:
c2:07:0a:8f:83:57:92:c7:87:69:af:d8:38:0a:b3:
ed:9a:95:a7:f6:47:a9:dd:1a:80:3c:af:72:46:c6:
dc:60:9a:53:ab:fe:7e:8a:dc:84:fc:7b:b8:7f:d2:
95:c1:18:eb:4a:11:e8:35:56:a1:1d:f6:0c:f9:e6:
f2:28:24:b3:ae:68:7c:8e:76:11:d7:8b:35:68:30:
55:ca:de:f8:96:15:83:ad:d6:bf:8b:ce:1f:d9:87:
83:36:c9:5b:ba:d0:fb:c1:b8:b4:05:eb:c8:d5:f4:
a6:13:96:ce:8f:94:45:cd:01:57:bf:29:f2:59:97:
46:47:e6:3e:2f:78:0e:c3:8a:b5:05:a2:3f:ce:46:
b2:fe:19:05:f4:8e:c4:2e:04:7e:1d:f4:c4:96:6a:
94:5d:1b:52:e0:a6:d4:a1:92:99:e5:2e:74:ea:f9:
77:db:a5:21:4a:2d:26:f1:de:c3:fe:46:42:5c:df:
11:af:21:1e:60:8e:66:d4:2d:00:7f:d9:86:98:a0:
94:29:f1:b2:5c:0c:74:e3:5d:c3:a6:98:8a:62:04:
08:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F5:A0:C9:B6:B3:25:B7:F9:04:F1:5B:B0:7E:77:E5:04:4E:B7:9E
X509v3 Authority Key Identifier:
keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f1:16:f8:93:96:62:b5:86:25:14:c7:48:fb:5a:3b:a8:45:
44:e1:21:98:15:2d:31:29:a1:10:44:72:f1:03:ff:6e:69:54:
aa:40:37:3b:ab:42:77:a5:36:dd:5a:ef:03:89:c0:69:0e:59:
c9:51:a6:07:39:1a:2c:a9:91:02:62:b5:09:3a:3e:c7:ac:b0:
4b:29:51:bf:1b:9d:52:68:49:d7:45:31:a5:a4:c8:00:0c:4c:
3c:74:24:32:89:81:4b:89:13:eb:58:fb:19:39:05:db:03:d3:
3d:67:28:77:0a:fe:bd:a0:1e:91:dc:09:88:f7:9a:f8:ff:a7:
aa:29:de:95:9a:0d:1a:48:86:50:02:86:97:cf:82:35:e2:6a:
d0:d5:86:de:88:e8:b7:71:93:46:05:fd:73:23:33:35:b0:fc:
f4:2a:96:9f:26:d1:01:d6:e2:ef:14:05:5e:b8:cc:66:07:6d:
f6:67:44:4e:32:19:f1:b3:c5:77:7a:57:e1:6e:14:15:86:d5:
da:3c:ae:52:06:93:ec:bd:77:69:ab:2c:7b:60:13:b2:bf:42:
19:41:d1:cf:de:e3:0e:e8:14:25:a9:02:62:60:0b:1b:8e:7b:
af:fe:7d:60:47:a4:61:9f:cc:cd:8b:7c:6a:c7:bb:00:04:79:
1b:43:e5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:56:09 2025 by rpki-client