Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
File: Es2a3RYTfourmNeOKjNgvIvW8PE.mft (raw, json)
Hash identifier: d2baG6BurwKCetPoWusw8uByUROcD7VdKxsDEdhgdNI=
Subject key identifier: 84:04:E2:C3:3D:2F:DA:C9:05:4A:86:4B:DC:3A:72:33:39:67:AB:99
Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
Certificate issuer: /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Certificate serial: 01992255385F3059B153851550F67F03BA57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 04:00:34 +0000
Manifest this update: Sun 07 Sep 2025 04:00:34 +0000
Manifest next update: Mon 08 Sep 2025 04:00:34 +0000
Files and hashes: 1: Es2a3RYTfourmNeOKjNgvIvW8PE.crl (hash: /ZhN4OrvJC5Ccas401x2GXoKFl9YXenivNeH0c9laKg=)
2: l3o0cPreMKkY6Zin7N9ceMUABWg.roa (hash: IkZ3DQrsK1OPin+reh8WbUesG/v7qTfWkg1bNypSLzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:38:5f:30:59:b1:53:85:15:50:f6:7f:03:ba:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Validity
Not Before: Sep 7 04:00:34 2025 GMT
Not After : Sep 8 04:00:34 2025 GMT
Subject: CN=8404e2c33d2fdac9054a864bdc3a72333967ab99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4a:e7:45:83:87:d4:80:cd:8f:40:e1:83:0c:
38:89:5c:fd:8a:03:70:ba:03:e1:46:bc:10:ca:95:
a7:ee:d0:2d:de:7e:ad:ab:67:41:f3:b2:ac:92:47:
7c:7a:e3:c7:b1:69:83:41:1b:40:c8:f1:8c:9a:65:
5a:0e:3c:dd:35:ee:76:c9:2a:73:a8:1c:6b:3d:c9:
5f:ae:ed:2c:5b:41:26:2c:60:22:b4:a0:a4:b4:be:
8f:1c:36:4d:96:ba:cf:09:8d:40:4f:0b:14:cb:39:
11:ea:40:77:5d:04:12:e8:62:36:4d:bd:3e:e3:5c:
51:18:93:7f:a4:37:3e:7d:9c:84:4c:a0:5d:04:ac:
ca:a1:0f:03:f0:87:67:ec:02:68:52:50:be:ee:f0:
01:70:35:14:6b:b7:53:67:2f:31:ff:14:07:b6:7c:
0e:5a:8e:7a:42:fe:30:85:60:c8:b6:70:53:3a:95:
11:64:36:77:37:e2:96:d5:8c:99:9d:be:bf:75:15:
d0:27:55:c9:c2:4f:61:f9:be:9d:d9:f8:65:07:ea:
2f:a7:0c:8b:88:8f:91:a0:21:52:7b:f4:86:56:ca:
c3:d3:ba:12:9f:eb:41:a9:65:90:27:ad:04:62:73:
65:6d:1f:92:32:b9:69:07:fb:99:2b:ef:ec:80:58:
9e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:04:E2:C3:3D:2F:DA:C9:05:4A:86:4B:DC:3A:72:33:39:67:AB:99
X509v3 Authority Key Identifier:
keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9e:f4:a1:1c:f2:a8:bf:49:3d:05:20:60:f2:4d:62:7f:3d:
bf:18:47:c4:71:59:bf:c6:f2:4c:90:d4:b4:93:17:b8:13:13:
2a:2a:af:b2:28:af:f1:4a:68:cb:f1:de:a0:a9:4b:cd:53:34:
2b:7b:19:72:99:8c:e1:fe:63:85:64:0d:40:1f:39:06:b8:17:
a7:69:dd:67:08:1e:a5:78:df:03:29:46:ba:ea:86:2a:68:4a:
d1:1c:a4:df:ea:05:28:e7:aa:e2:e1:a5:cf:ed:6d:3a:84:9f:
61:73:d8:a2:f6:7e:c0:55:4f:56:b8:e6:6b:00:4b:3e:b3:e8:
34:a3:4a:cd:e9:0e:bf:7a:e7:e3:b2:42:ea:eb:a1:87:31:ba:
9f:c4:0d:e7:f4:d3:5e:51:30:d3:3b:18:7f:fb:e8:f0:25:27:
f2:4a:c1:ce:f3:b6:90:78:ec:75:0d:89:84:24:cc:04:8b:75:
92:92:92:d3:93:71:a7:72:43:5f:1f:41:c8:d8:b2:32:12:b0:
28:0d:e3:4b:da:17:fc:cd:d1:b2:4e:39:2b:a6:91:80:63:f3:
16:93:9f:7a:a8:ab:9d:17:08:5a:d7:91:74:52:a9:cf:d3:c9:
02:76:a1:3a:bb:9b:67:1f:1e:72:b3:bd:11:69:c5:33:62:b3:
5d:44:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:26 2025 by rpki-client