Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
File: EsCzmbynzX_KI2gTkGefXMqVueE.mft (raw, json)
Hash identifier: DOSTuuuA32mbOozwpggmTIrs0hwYjCK1P42I4Vl95yw=
Subject key identifier: D2:B0:23:15:DB:09:E0:18:09:DB:72:7F:4A:D1:6C:AD:0D:FB:DB:0C
Authority key identifier: 12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
Certificate issuer: /CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Certificate serial: 01992444017F044284F26EE90A9EDF531829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
Manifest number: 13E0
Signing time: Sun 07 Sep 2025 13:01:00 +0000
Manifest this update: Sun 07 Sep 2025 13:01:00 +0000
Manifest next update: Mon 08 Sep 2025 13:01:00 +0000
Files and hashes: 1: EsCzmbynzX_KI2gTkGefXMqVueE.crl (hash: ErypcVoU1lTLc3rlVOXQQF7FUCsRpem29hlqpLS1X+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:44:01:7f:04:42:84:f2:6e:e9:0a:9e:df:53:18:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Validity
Not Before: Sep 7 13:01:00 2025 GMT
Not After : Sep 8 13:01:00 2025 GMT
Subject: CN=d2b02315db09e01809db727f4ad16cad0dfbdb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:dc:83:52:0c:e8:ee:3d:47:c1:d9:99:72:
33:0c:6c:aa:b1:77:b0:4b:6a:3c:03:6f:c5:e9:1d:
99:87:90:1e:1f:0a:cf:21:1c:8f:3b:b6:27:76:6f:
05:a5:5b:48:73:ca:06:fc:05:70:b6:5c:18:57:f8:
bb:05:03:21:20:1f:1c:d7:60:f4:a1:c7:74:38:e0:
fc:fa:b3:98:f0:9f:22:c0:13:4d:1d:b0:b6:25:a4:
5b:f7:49:91:fd:fa:d1:08:70:4f:9e:49:ca:99:03:
f5:5b:07:7f:eb:80:12:e5:d2:4d:66:5b:08:68:a0:
0b:ec:98:41:5d:2b:4f:a6:84:0e:d5:9b:18:10:e4:
c3:74:fe:bb:61:8e:ea:66:5d:49:69:e5:7f:98:d0:
11:fc:e7:78:98:58:f0:ad:79:d3:fd:d5:90:4a:4d:
bd:2b:a6:4e:76:a6:0a:46:bf:50:95:53:3f:70:9d:
56:8c:56:5a:cd:02:e4:b7:52:18:ad:bb:0f:fb:0c:
3e:a2:16:1a:71:72:72:29:73:70:db:97:3c:b4:63:
4b:e6:be:7c:ed:8e:06:3d:75:71:cc:81:08:2d:7d:
76:8b:1c:c7:91:39:e6:bf:d2:0d:a5:0c:cd:21:78:
66:97:c2:96:d9:68:90:52:b5:77:65:53:d8:be:ff:
09:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B0:23:15:DB:09:E0:18:09:DB:72:7F:4A:D1:6C:AD:0D:FB:DB:0C
X509v3 Authority Key Identifier:
keyid:12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:15:71:86:3b:52:7b:7a:14:1b:59:43:7a:39:2d:e5:85:53:
d3:af:65:cb:fd:65:63:dd:1c:36:b8:a0:0c:13:b4:ce:61:ef:
a9:78:43:01:64:34:8c:0b:08:11:7b:a0:8b:91:b1:ae:ad:c7:
f6:03:6e:5d:b4:a5:0a:de:a8:97:65:3b:1a:50:64:3a:80:1c:
29:a7:26:91:d8:90:72:ab:ad:ac:5e:f8:77:a3:81:49:04:5d:
b9:12:8f:d8:c5:3f:92:d2:4d:9a:35:28:f2:76:06:01:4f:6b:
68:55:a8:27:35:98:87:d2:2d:ca:c2:00:d5:91:d8:32:5d:5c:
e5:d7:c3:bb:6a:c5:6e:56:0f:d9:10:e0:b2:26:04:3a:a0:a0:
eb:aa:b9:3d:d6:98:92:9c:19:bc:94:48:c3:17:97:10:70:32:
ae:f8:4e:fb:73:72:51:4d:5f:99:93:f8:93:f2:1b:f6:d7:ae:
07:fe:d0:33:04:80:45:5d:c5:d0:a9:e6:ec:a0:38:68:f0:2c:
21:ee:26:cc:fc:ba:30:18:65:8f:3f:53:cc:fc:4f:c3:1a:08:
5a:a3:18:9d:a4:67:2c:50:cf:8d:d1:5f:c3:b4:21:c3:e5:3c:
90:f2:4e:dd:fc:58:89:15:ea:71:6c:30:dc:99:49:07:6f:0f:
a3:a0:f3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:41:36 2025 by rpki-client