Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
File: ESunl1d-pgpWGvmkWYxFBg47cIg.mft (raw, json)
Hash identifier: xnisBBUtXl7aol0qH0yFi492DG6KfpMvYkdeI0TcyVk=
Subject key identifier: 82:2A:35:F7:39:3D:1C:3E:5E:9F:89:18:50:69:1E:9B:48:91:AF:4D
Authority key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
Certificate issuer: /CN=112ba797577ea60a561af9a4598c45060e3b7088
Certificate serial: 019A7301586A1F61F2D37D4BE91A7C8D2F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
Manifest number: 1728
Signing time: Tue 11 Nov 2025 13:00:59 +0000
Manifest this update: Tue 11 Nov 2025 13:00:59 +0000
Manifest next update: Wed 12 Nov 2025 13:00:59 +0000
Files and hashes: 1: 0mKnnBxNDPUWW0TdKD82TEOVdS4.roa (hash: Lo4k+eo1K7P5fia7s3jKfkvAW4fzukEV2ibTeSf86Xg=)
2: ESunl1d-pgpWGvmkWYxFBg47cIg.crl (hash: XrsxA5CCik33ZmJLtUx5kKJwu04UVY/o/aaxV8V8eTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:58:6a:1f:61:f2:d3:7d:4b:e9:1a:7c:8d:2f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112ba797577ea60a561af9a4598c45060e3b7088
Validity
Not Before: Nov 11 13:00:59 2025 GMT
Not After : Nov 12 13:00:59 2025 GMT
Subject: CN=822a35f7393d1c3e5e9f891850691e9b4891af4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:e8:4e:47:40:74:e3:e0:f2:7f:11:58:b2:
10:64:ce:ea:4f:22:0a:d6:ec:b1:ad:7c:9e:b4:df:
0f:8f:73:5d:b4:f0:2e:1f:1b:f8:82:f1:5e:4d:4f:
38:56:a4:28:d4:ab:47:bd:0e:81:09:6d:28:38:8a:
18:d4:c8:73:7b:82:28:86:85:20:14:27:a6:23:ca:
18:64:ab:4f:92:0b:ca:10:fb:06:42:70:1f:dc:1f:
94:23:70:d3:29:16:4d:ff:65:ac:13:27:c1:4f:ff:
60:93:3f:d3:64:2b:58:4b:a5:9f:c9:bc:aa:ea:e6:
60:b8:d6:08:39:48:96:78:de:fd:f1:b4:45:5c:61:
1c:c3:19:1e:f4:14:a1:87:f9:fa:c5:81:19:ca:13:
a8:85:0e:71:65:25:ab:c5:02:a2:d4:97:96:32:c9:
2d:d2:aa:36:8b:8f:a0:a9:a9:b7:61:fc:56:77:2a:
ca:d2:3b:f3:ab:52:8f:cc:2c:8b:4c:4c:f6:e2:7d:
cb:7a:c3:a3:d7:28:b3:1b:5e:13:7f:d6:be:b5:39:
0c:89:34:4c:56:a9:d0:1d:25:85:7e:99:35:4e:2f:
c0:fe:31:8a:25:c5:90:dc:9e:45:1b:3e:ae:6d:21:
4a:09:83:2e:5b:dc:eb:d2:15:9a:5a:a5:17:28:8d:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2A:35:F7:39:3D:1C:3E:5E:9F:89:18:50:69:1E:9B:48:91:AF:4D
X509v3 Authority Key Identifier:
keyid:11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:55:54:ed:25:df:52:73:d6:0f:a7:ac:a5:8f:4d:51:59:09:
a2:29:64:00:78:75:fb:35:ef:3c:4c:08:90:ab:54:64:ff:4f:
cf:66:2a:70:04:cd:31:a6:6f:22:98:a7:cc:6e:6e:29:53:78:
2a:44:49:e7:6e:76:61:f8:19:1e:27:eb:76:d0:04:f3:b0:12:
98:08:16:47:47:75:a6:85:db:b7:a9:27:e2:77:f6:1d:4e:6f:
ac:f3:9f:ec:fd:1e:ba:c6:1c:44:3e:b7:e3:a9:bc:33:4f:12:
1a:d3:51:a4:26:32:1c:9b:bc:1e:06:4f:14:7e:b1:4f:69:d2:
9e:f7:e9:e8:a1:3d:e1:19:2b:d5:ab:34:e3:d0:69:47:ff:f1:
3b:1e:3b:46:0d:64:c2:a0:6a:c3:39:18:24:21:68:23:37:34:
63:43:25:1f:42:67:48:f8:d6:e1:06:c5:d1:ff:50:0b:91:ab:
46:29:e6:e2:63:27:05:bb:41:4c:cf:21:ed:56:27:e4:30:53:
f4:ed:88:4f:7a:dc:c4:cd:67:d5:89:8e:1a:0e:d5:0d:0c:00:
e3:3d:f9:04:aa:2a:d3:36:e8:65:7d:2b:a9:4d:d8:80:1a:a3:
56:e8:da:10:23:c2:77:92:d2:63:6e:14:c6:4e:82:4e:bd:cc:
ea:f9:74:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAVhqH2Hy031L6Rp8jS96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMmJhNzk3NTc3ZWE2MGE1NjFhZjlhNDU5OGM0NTA2MGUz
YjcwODgwHhcNMjUxMTExMTMwMDU5WhcNMjUxMTEyMTMwMDU5WjAzMTEwLwYDVQQD
Eyg4MjJhMzVmNzM5M2QxYzNlNWU5Zjg5MTg1MDY5MWU5YjQ4OTFhZjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq17oTkdAdOPg8n8RWLIQZM7qTyIK
1uyxrXyetN8Pj3NdtPAuHxv4gvFeTU84VqQo1KtHvQ6BCW0oOIoY1Mhze4IohoUg
FCemI8oYZKtPkgvKEPsGQnAf3B+UI3DTKRZN/2WsEyfBT/9gkz/TZCtYS6Wfybyq
6uZguNYIOUiWeN798bRFXGEcwxke9BShh/n6xYEZyhOohQ5xZSWrxQKi1JeWMskt
0qo2i4+gqam3YfxWdyrK0jvzq1KPzCyLTEz24n3LesOj1yizG14Tf9a+tTkMiTRM
VqnQHSWFfpk1Ti/A/jGKJcWQ3J5FGz6ubSFKCYMuW9zr0hWaWqUXKI03zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIqNfc5PRw+Xp+JGFBpHptIka9NMB8GA1UdIwQY
MBaAFBErp5dXfqYKVhr5pFmMRQYOO3CIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVN1bmwxZC1wZ3BXR3Zta1dZeEZCZzQ3Y0lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZTVjNWQtNTgxMi00ZmU4LWIzYzAt
NmJjNDQzZjM1NTQ0LzEvRVN1bmwxZC1wZ3BXR3Zta1dZeEZCZzQ3Y0lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kZTVjNWQtNTgxMi00ZmU4LWIzYzAtNmJjNDQzZjM1NTQ0
LzEvRVN1bmwxZC1wZ3BXR3Zta1dZeEZCZzQ3Y0lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVVU7SXf
UnPWD6espY9NUVkJoilkAHh1+zXvPEwIkKtUZP9Pz2YqcATNMaZvIpinzG5uKVN4
KkRJ5252YfgZHifrdtAE87ASmAgWR0d1poXbt6kn4nf2HU5vrPOf7P0eusYcRD63
46m8M08SGtNRpCYyHJu8HgZPFH6xT2nSnvfp6KE94Rkr1as049BpR//xOx47Rg1k
wqBqwzkYJCFoIzc0Y0MlH0JnSPjW4QbF0f9QC5GrRinm4mMnBbtBTM8h7VYn5DBT
9O2IT3rcxM1n1YmOGg7VDQwA4z35BKoq0zboZX0rqU3YgBqjVujaECPCd5LSY24U
xk6CTr3M6vl0PQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 18:11:31 2025 by rpki-client