Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
File: eSttblvaBSZfwM6XGaYzvgSm6Xk.mft (raw, json)
Hash identifier: jB7EqeIt/wWpoBdllZl2NS2jxQ9HrEuGVfCUafgh6HU=
Subject key identifier: AD:40:81:A4:25:4A:E9:90:A8:87:C8:F4:B4:01:A6:A1:63:78:7F:EC
Authority key identifier: 79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
Certificate issuer: /CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Certificate serial: 019923A05AFF0668D69CB8F675E57A8C905A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 10:02:15 +0000
Manifest this update: Sun 07 Sep 2025 10:02:15 +0000
Manifest next update: Mon 08 Sep 2025 10:02:15 +0000
Files and hashes: 1: eSttblvaBSZfwM6XGaYzvgSm6Xk.crl (hash: 6xSjZaOt5w6o5+g9usuBAL1SJUit6olqvYfPHdWzc3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:5a:ff:06:68:d6:9c:b8:f6:75:e5:7a:8c:90:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792b6d6e5bda05265fc0ce9719a633be04a6e979
Validity
Not Before: Sep 7 10:02:15 2025 GMT
Not After : Sep 8 10:02:15 2025 GMT
Subject: CN=ad4081a4254ae990a887c8f4b401a6a163787fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:21:82:02:cb:11:07:53:37:ad:d6:16:ed:72:
68:65:d7:40:33:93:8b:18:be:13:d6:4d:4b:92:64:
9c:8f:36:d4:6e:52:3b:c3:c3:24:18:4c:d2:54:2a:
28:5c:c1:68:b8:e0:b8:55:24:e4:5d:5f:40:ed:9d:
05:11:23:e5:71:ad:3c:ae:d4:bf:be:6b:72:09:65:
22:7a:88:20:2d:3c:20:eb:96:03:3e:a9:40:8e:c5:
fd:c1:b3:2c:ca:1a:60:9d:f7:fb:4d:9d:0f:f8:c7:
13:f1:04:41:fb:e5:f0:87:d9:2f:df:83:a4:7e:9d:
cc:36:98:b0:19:f3:1a:83:a3:b9:af:72:31:86:88:
80:6f:38:a8:04:27:39:7c:a5:11:ef:75:f6:48:5b:
3c:0a:70:47:11:9b:9d:4e:bf:03:5e:64:12:f1:8f:
16:03:b7:aa:eb:5f:76:19:b5:10:b6:e1:2d:4a:59:
16:b8:1c:63:69:86:a5:b9:9a:3e:9a:98:a9:be:fd:
d7:d1:bd:f4:41:62:33:e0:b2:90:4a:e4:a6:8c:eb:
56:55:4b:09:8b:ee:0f:58:57:ea:90:4c:5b:93:2d:
f7:b7:94:88:95:2a:59:f2:2e:60:41:d8:78:d6:01:
b2:cc:2b:43:26:59:fa:50:bf:69:0b:d0:de:55:f9:
6a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:40:81:A4:25:4A:E9:90:A8:87:C8:F4:B4:01:A6:A1:63:78:7F:EC
X509v3 Authority Key Identifier:
keyid:79:2B:6D:6E:5B:DA:05:26:5F:C0:CE:97:19:A6:33:BE:04:A6:E9:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSttblvaBSZfwM6XGaYzvgSm6Xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/dac1e5-1fd9-43d4-8926-213dc399be6f/1/eSttblvaBSZfwM6XGaYzvgSm6Xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:2e:65:94:04:3c:87:eb:e4:66:89:65:08:2c:28:62:c1:d6:
ec:67:26:e6:8f:c0:24:db:28:6b:7b:9c:1f:b5:f3:02:5c:5e:
13:75:c0:07:e1:04:42:c4:ea:35:39:16:cd:0f:c0:8e:e2:51:
e3:34:dc:15:8a:1e:76:f9:49:fa:eb:03:1c:88:dd:d8:95:06:
5e:51:90:94:37:9c:6a:93:21:b7:9c:ee:e9:4f:23:37:12:0d:
8a:1c:9e:d9:db:ce:69:73:2a:78:b6:71:84:b2:0b:f8:39:93:
c2:9a:d6:5e:96:0e:2b:99:d0:e3:ec:43:97:50:64:c3:d1:d7:
55:51:3a:70:2a:9d:51:c5:a1:5f:dc:33:3b:06:e9:c3:5c:15:
8d:92:41:b4:df:65:4e:81:dd:15:a9:47:1f:1d:27:b6:cc:d4:
68:73:d6:d9:f1:4b:0c:a9:b5:77:b4:49:ec:c4:8d:44:55:25:
38:dd:1d:82:7c:73:16:72:3f:9a:fe:6f:b2:02:3b:55:c8:10:
02:35:88:93:99:54:43:f5:38:cb:d2:9c:47:80:dc:43:5b:6a:
cd:e1:14:6d:e0:d2:78:7d:8f:40:93:72:86:d6:2a:3c:aa:02:
ba:fa:33:54:f5:be:0d:13:c4:06:18:ca:58:a8:ca:7e:0f:06:
ea:11:99:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoFr/BmjWnLj2deV6jJBaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MmI2ZDZlNWJkYTA1MjY1ZmMwY2U5NzE5YTYzM2JlMDRh
NmU5NzkwHhcNMjUwOTA3MTAwMjE1WhcNMjUwOTA4MTAwMjE1WjAzMTEwLwYDVQQD
EyhhZDQwODFhNDI1NGFlOTkwYTg4N2M4ZjRiNDAxYTZhMTYzNzg3ZmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yGCAssRB1M3rdYW7XJoZddAM5OL
GL4T1k1LkmScjzbUblI7w8MkGEzSVCooXMFouOC4VSTkXV9A7Z0FESPlca08rtS/
vmtyCWUieoggLTwg65YDPqlAjsX9wbMsyhpgnff7TZ0P+McT8QRB++Xwh9kv34Ok
fp3MNpiwGfMag6O5r3IxhoiAbzioBCc5fKUR73X2SFs8CnBHEZudTr8DXmQS8Y8W
A7eq6192GbUQtuEtSlkWuBxjaYaluZo+mpipvv3X0b30QWIz4LKQSuSmjOtWVUsJ
i+4PWFfqkExbky33t5SIlSpZ8i5gQdh41gGyzCtDJln6UL9pC9DeVflqdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1AgaQlSumQqIfI9LQBpqFjeH/sMB8GA1UdIwQY
MBaAFHkrbW5b2gUmX8DOlxmmM74Epul5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kYWMxZTUtMWZkOS00M2Q0LTg5MjYt
MjEzZGMzOTliZTZmLzEvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9kYWMxZTUtMWZkOS00M2Q0LTg5MjYtMjEzZGMzOTliZTZm
LzEvZVN0dGJsdmFCU1pmd002WEdhWXp2Z1NtNlhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFC5llAQ8
h+vkZollCCwoYsHW7Gcm5o/AJNsoa3ucH7XzAlxeE3XAB+EEQsTqNTkWzQ/AjuJR
4zTcFYoedvlJ+usDHIjd2JUGXlGQlDecapMht5zu6U8jNxINihye2dvOaXMqeLZx
hLIL+DmTwprWXpYOK5nQ4+xDl1Bkw9HXVVE6cCqdUcWhX9wzOwbpw1wVjZJBtN9l
ToHdFalHHx0ntszUaHPW2fFLDKm1d7RJ7MSNRFUlON0dgnxzFnI/mv5vsgI7VcgQ
AjWIk5lUQ/U4y9KcR4DcQ1tqzeEUbeDSeH2PQJNyhtYqPKoCuvozVPW+DRPEBhjK
WKjKfg8G6hGZmg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:35 2025 by rpki-client