Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
File: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft (raw, json)
Hash identifier: yTXHBY03JxlXhRl8WahtPuqr/Ai0HJ9PK3kwmBSxxpU=
Subject key identifier: F4:EC:39:1F:99:60:00:5E:B3:9E:1E:F9:C5:32:01:8B:0D:05:CE:09
Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209
Certificate serial: 0199221F2D8D4DBCD4F8822404E4CDBEABB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 03:01:32 +0000
Manifest this update: Sun 07 Sep 2025 03:01:32 +0000
Manifest next update: Mon 08 Sep 2025 03:01:32 +0000
Files and hashes: 1: EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl (hash: iWTV8gmpQrRB/KqBvVLz9T3xvokzLzfeqmiw0kzWXrc=)
2: Siq3LXChf-J1kOdJHhD69EXWg8I.roa (hash: lqCjq1rRDcc2EL/o5bsRWvZA2ja39pIDJxSTPY+sOJk=)
3: ecaHIJxcx1Mgp1auyXMniU5m_AU.roa (hash: nk96xRsdyKFZrxulWblmb/pOYCvYpvcjJToJzvaxa8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:2d:8d:4d:bc:d4:f8:82:24:04:e4:cd:be:ab:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c603666719e979bef0921451a2ec264ed01209
Validity
Not Before: Sep 7 03:01:32 2025 GMT
Not After : Sep 8 03:01:32 2025 GMT
Subject: CN=f4ec391f9960005eb39e1ef9c532018b0d05ce09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:f1:f1:e8:7c:ee:d8:e2:a2:b3:5e:97:f1:
32:f0:1d:04:53:b9:2b:97:29:67:93:42:ee:75:26:
b6:b6:d6:db:3a:1e:a1:7d:24:59:84:7e:0a:b2:e0:
ee:73:58:84:a7:da:c7:7b:26:fd:fb:6b:9a:ca:a2:
2e:35:bc:ee:39:1a:37:d4:4f:b5:a7:39:be:c0:bb:
e7:21:77:fd:40:40:95:09:a6:ff:da:dc:e0:65:15:
53:c0:96:6d:0a:a7:35:2a:fa:8f:48:2f:da:a2:f9:
d3:25:c3:66:7e:c2:d9:6b:ed:7d:31:dd:b7:d9:04:
56:56:44:d1:3b:bc:fe:2d:92:2c:90:32:8a:56:ef:
c1:b4:21:d5:3d:83:78:6a:93:38:bf:e4:a1:14:34:
5d:3b:6d:10:f1:c0:d8:b4:58:05:ef:de:73:7a:64:
35:f6:00:e1:d7:bf:01:9a:74:90:f2:9a:7c:30:c6:
3f:45:95:43:51:80:69:a4:c5:f6:49:55:bb:48:23:
2e:c5:38:46:84:21:9b:fd:f3:5a:54:42:7a:a0:b4:
df:a0:31:98:55:ce:bb:80:2e:b4:6e:b1:fb:88:b4:
25:58:46:05:0a:c6:39:be:df:4f:c3:e7:9f:3f:5b:
9e:6a:96:87:0d:b9:a0:90:83:9a:e5:b2:d2:a8:2e:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EC:39:1F:99:60:00:5E:B3:9E:1E:F9:C5:32:01:8B:0D:05:CE:09
X509v3 Authority Key Identifier:
keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5d:8a:d3:71:38:4c:cc:a6:68:03:0c:17:6a:35:35:1f:5a:
50:87:94:0a:55:44:4a:71:35:2d:22:7a:af:56:41:00:3e:b7:
aa:45:46:95:26:17:66:a9:58:0e:ed:4f:bc:23:e5:2b:05:2a:
ce:7f:09:b8:04:da:b6:43:8c:2f:76:35:6f:fa:17:c8:a7:9f:
28:37:f5:ed:19:97:8f:c5:04:d3:e6:05:9d:92:e6:47:9c:06:
ea:6c:e7:42:af:f9:9e:71:2b:db:43:b1:7e:e7:03:f2:b4:bf:
f8:08:44:1d:57:48:3b:b1:f4:fd:c6:43:1a:2e:2e:96:25:13:
59:68:7a:b1:03:76:0d:36:44:24:a1:00:0f:f1:a8:1d:cc:7f:
a1:ef:e5:b6:81:b6:39:05:b9:5d:a2:31:7e:f0:79:ed:11:51:
13:39:fe:2d:8f:3a:39:45:6f:0e:0e:8b:96:6b:b3:ca:e8:27:
83:6b:e0:85:c5:ab:a5:de:40:d2:19:28:e1:d7:87:fd:d4:42:
af:bb:5c:e0:b9:e3:f1:bf:a0:cf:1a:8e:8f:6b:3e:e0:3f:2d:
6a:60:26:93:70:69:a8:9a:a1:93:6c:ea:aa:f1:ef:2f:7b:eb:
7f:a3:62:e0:0c:9c:32:99:2e:ca:a3:ab:86:d5:d0:f3:55:33:
44:40:2e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:25 2025 by rpki-client