Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
File: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft (raw, json)
Hash identifier: KQxliLMhm/ruXxMy5/slqDVarO3DjU6gU1SR+M/tubY=
Subject key identifier: FD:15:A3:07:00:3E:D6:AF:EC:D1:00:35:62:66:0B:B1:8D:EC:E6:8E
Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209
Certificate serial: 019A7225D8A2115309CBCEBF74A5FA57EE24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:14 +0000
Manifest this update: Tue 11 Nov 2025 09:01:14 +0000
Manifest next update: Wed 12 Nov 2025 09:01:14 +0000
Files and hashes: 1: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl (hash: C9zRf/kob2EUvuc6keuROdbJ/+83WjYJOyiENJQw3NM=)
2: Siq3LXChf-J1kOdJHhD69EXWg8I.roa (hash: lqCjq1rRDcc2EL/o5bsRWvZA2ja39pIDJxSTPY+sOJk=)
3: ecaHIJxcx1Mgp1auyXMniU5m_AU.roa (hash: nk96xRsdyKFZrxulWblmb/pOYCvYpvcjJToJzvaxa8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d8:a2:11:53:09:cb:ce:bf:74:a5:fa:57:ee:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c603666719e979bef0921451a2ec264ed01209
Validity
Not Before: Nov 11 09:01:14 2025 GMT
Not After : Nov 12 09:01:14 2025 GMT
Subject: CN=fd15a307003ed6afecd1003562660bb18dece68e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:6f:bf:58:7f:62:60:50:e1:36:06:bb:29:
e0:51:20:e5:34:f7:16:a2:69:7b:e8:a7:01:bf:47:
4c:61:32:4d:e1:75:2d:fc:d5:af:cf:bf:40:9f:16:
9c:5b:b0:90:4c:0a:cc:d4:6f:a3:0b:05:a6:7d:24:
7a:2d:9b:fe:30:44:73:44:b5:36:ca:d0:9c:be:5c:
19:39:bb:d0:7a:76:d3:aa:39:f5:f1:01:fd:4f:1d:
84:41:30:68:9c:f4:53:93:59:9f:f0:ba:ed:5d:38:
78:85:0d:93:97:9f:9c:57:94:57:df:eb:03:1a:c1:
c1:1c:22:89:59:73:2d:fc:3c:f2:c1:56:00:50:19:
18:8a:62:63:a5:cb:cc:1d:b2:9b:4c:84:b9:60:43:
7f:bc:fe:25:4e:f3:78:40:1b:94:48:80:c4:f9:bd:
74:c3:dd:fc:6c:e2:f9:2b:36:49:59:1c:94:b9:52:
06:47:24:7c:2a:f7:07:cf:1f:32:44:01:fa:4a:c8:
b0:bd:49:42:a8:d7:b7:dc:17:6d:85:5b:c3:1e:14:
20:88:47:65:76:90:c2:ef:21:e5:54:57:c7:48:cb:
e6:da:28:a2:22:36:91:86:5f:a4:15:ad:9b:e5:de:
86:67:6d:69:32:27:44:f3:1a:3f:02:0e:26:10:25:
fb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:15:A3:07:00:3E:D6:AF:EC:D1:00:35:62:66:0B:B1:8D:EC:E6:8E
X509v3 Authority Key Identifier:
keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c9:6a:f2:4f:87:2f:b1:50:08:e0:4f:ac:e4:48:b6:64:9c:
38:22:97:fa:29:0b:81:b8:28:18:73:d2:75:e6:84:ae:ec:63:
02:fb:11:62:32:c3:97:1c:49:72:e7:9b:94:c4:a2:fb:7b:2a:
ad:be:84:34:41:18:69:d7:24:2a:89:d7:65:5c:6c:7e:1a:c7:
f3:f9:87:12:95:ac:8f:3b:38:5e:c5:2c:50:58:43:61:31:6b:
a4:8f:82:d3:1e:13:80:38:5f:b7:53:88:a3:a1:61:84:a7:ee:
20:16:2f:0d:35:bd:44:60:57:91:15:2e:b7:21:cf:73:38:a3:
22:83:95:a8:f1:7f:50:3f:9f:16:8e:c6:6c:e4:c9:42:77:0a:
b4:9f:21:4a:f4:bd:6b:df:b9:62:75:f1:69:08:e7:0b:5d:99:
db:6a:ab:22:c3:2c:22:49:b5:a7:88:5b:a5:4c:f1:e8:2f:c5:
4b:de:8f:66:fb:19:23:5f:89:c4:e3:85:a1:3e:d8:5c:36:59:
45:73:37:68:ca:d6:28:b6:1d:bd:48:91:06:14:fc:7c:c5:f9:
55:e6:d4:78:dd:4b:dc:1a:6f:92:15:08:00:fe:7b:70:71:f4:
cf:92:09:38:68:54:09:09:7b:ab:a6:ec:af:a2:a0:97:9f:ef:
d6:8b:1d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:11 2025 by rpki-client