Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File: es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier: 8aYDMnC3Q4dyiTwaI2AiAoJulIsZpR0wiziXelDDnko=
Subject key identifier: AD:94:18:35:2A:ED:6E:AD:13:28:2D:16:2B:64:73:92:6E:A5:21:41
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 019A251CD90A100A6FA8967950BB574F65BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 10:00:38 +0000
Manifest this update: Mon 27 Oct 2025 10:00:38 +0000
Manifest next update: Tue 28 Oct 2025 10:00:38 +0000
Files and hashes: 1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: 7ohZveReakBlWhDVO416PRq7Kro2GEWNapyQxE4fWFM=)
2: giZEtebKwrV_K5a1acLqZif6N-k.roa (hash: lzFFffl4lpHRD7ZMSU5Ky5FbKZMuom72Ko9x5UDmCAY=)
3: r2MDM9YmqLIjylrH2WoKfJ8F-hk.roa (hash: 5oJl1RSDkKpv/NrAOtgSj/GjDfrDxGm50iGVTH3ViuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:d9:0a:10:0a:6f:a8:96:79:50:bb:57:4f:65:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Oct 27 10:00:38 2025 GMT
Not After : Oct 28 10:00:38 2025 GMT
Subject: CN=ad9418352aed6ead13282d162b6473926ea52141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ba:12:36:78:85:ac:06:b8:e1:74:63:b3:ca:
4b:31:4c:57:63:a5:e5:ef:c7:c7:bd:22:5f:fb:af:
40:a9:e7:20:27:7f:ed:ce:ef:5b:d9:ef:a1:4a:7a:
a9:f1:cb:39:ce:4b:5e:47:f8:d8:ee:57:4a:88:5a:
9f:f6:d9:07:a7:d5:50:16:2e:0a:9a:7d:de:64:cf:
d7:13:1e:df:bf:4b:d7:41:48:31:fc:e4:f0:08:b8:
97:2d:b6:42:12:69:8f:c0:8d:09:9e:a5:cd:7f:84:
8f:b7:9e:aa:56:45:b5:8b:0a:c3:bc:f6:94:76:f3:
4a:34:4f:c1:21:fd:90:90:40:14:78:b8:0e:8a:8b:
b9:c7:ec:36:c8:9c:e3:fb:ed:cc:46:0a:ad:6e:da:
67:00:4a:20:a5:23:f6:2a:3e:51:ac:0c:ac:83:31:
59:cc:15:08:c7:65:1a:f9:8c:63:e1:06:ff:2f:67:
ed:38:7f:34:e9:7e:a8:a8:09:b8:64:4c:04:aa:0f:
d3:d2:06:c3:96:a0:72:76:9a:df:78:97:e8:39:58:
df:5e:f6:a1:26:c1:b7:ea:75:bb:08:b2:dc:13:71:
f6:6c:ce:2f:85:ac:9e:27:99:9a:37:a9:8c:22:08:
fd:64:54:03:7a:0a:1f:3c:8d:31:1d:75:68:36:7e:
e6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:94:18:35:2A:ED:6E:AD:13:28:2D:16:2B:64:73:92:6E:A5:21:41
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:aa:f6:ac:a0:b7:2a:c2:ac:7d:ba:dc:25:19:ae:b9:9a:37:
e7:27:3b:cd:88:66:c4:a9:33:f9:f8:c0:2e:31:7a:c5:8f:c4:
6e:a3:26:e4:e8:37:9e:72:a7:28:8b:34:fe:5e:3d:cb:d7:fa:
49:03:84:0e:7a:54:1c:ee:a9:d6:6a:28:68:8d:7f:f9:1f:09:
dd:71:3a:1d:a3:86:2a:58:57:e7:eb:1d:e7:f2:a9:2f:70:88:
80:92:14:9b:81:34:a9:bc:9d:2d:d0:5b:21:ff:56:6c:cf:f9:
33:61:ca:2c:76:8d:61:03:ad:24:bc:d8:db:b6:f4:c0:70:47:
e0:e2:9f:1c:a2:3e:b1:07:fc:39:0f:71:f0:7f:48:77:d3:81:
53:6c:d5:d2:35:79:39:d8:3d:b0:ad:97:32:90:c1:4c:0b:11:
03:45:2c:1d:cf:97:11:33:95:95:8c:29:e8:38:e4:95:42:3e:
12:74:18:03:18:a7:ae:22:6b:84:32:72:8a:e0:bf:70:29:e1:
3e:0c:71:6a:03:fa:60:6a:b5:ce:87:fc:02:b5:bb:66:48:be:
0f:37:a8:21:d7:97:ce:d3:58:05:a1:3c:0f:a1:89:b9:b9:76:
28:ba:96:34:b5:68:7a:f8:be:44:01:e9:4d:5b:00:25:a4:9c:
07:83:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:27:27 2025 by rpki-client