Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File: EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier: TrPe+Pkb878qbYm5Ov2luEHe1iLiX0QfAt/EE/mRHIM=
Subject key identifier: CA:DA:BE:29:A5:D4:C7:7E:54:95:27:1F:75:C1:D9:BD:96:1D:20:A7
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 01993839931555719CD5E26DB505533670E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number: 1682
Signing time: Thu 11 Sep 2025 10:02:01 +0000
Manifest this update: Thu 11 Sep 2025 10:02:01 +0000
Manifest next update: Fri 12 Sep 2025 10:02:01 +0000
Files and hashes: 1: 1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa (hash: 7OUkteLe8nHwqeQk9zlC7/yoJRlbZiYexJ0JFvbqk0Y=)
2: 9N77sGkqVPgPzl64HnlAQCAiJiI.roa (hash: 8rr1/h/HEPqZmQ/y+1jYrrv0fcfQ6nqe4NWrJHpDdT8=)
3: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: Sriexubv00jSVmHExjZh1UoiUV5UhBVI/i9ZL/E+lkQ=)
4: GxKilLVepL5t_pYKZrftFkg3OVM.roa (hash: XTTU+F0aFJFtKQUVRMP8YL9IwYldi2UmnMmIwVJ9a0s=)
5: Iav_qyY5ImtZ4ANKY_BlD16EiB4.roa (hash: o26HJXNrKDGMVRomgVXRlnZ79f/49jllECyaOAkuhL8=)
6: LTvU0JWVsSQgu0MVSG_VtxZcgMA.roa (hash: xmPZIz9nJEAlB3NELOSNPxxAUtJ8mR0ajbEAHYuN+DA=)
7: prOvIV94SipWj181Foj7X04Xy-c.roa (hash: fEs9h6WUn0wA3/zm4fis57AzqK3n8+IhBDsb2ZxLQfw=)
8: yTPU9KBT_yF9oFmQNNIcb5x-2m4.roa (hash: 4gwBmGsupWB21IC5fpENG4yVPsL+VM2s0DNtBND4taM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:39:93:15:55:71:9c:d5:e2:6d:b5:05:53:36:70:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Sep 11 10:02:01 2025 GMT
Not After : Sep 12 10:02:01 2025 GMT
Subject: CN=cadabe29a5d4c77e5495271f75c1d9bd961d20a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:28:8e:cf:5d:26:e0:64:5d:11:e5:05:44:
73:c7:00:94:a2:4e:66:e7:8b:35:6f:fe:a1:8c:bb:
70:ec:f1:4c:cf:e5:a3:11:d8:62:e6:2f:f4:3f:df:
f5:8e:a9:e0:4e:37:11:af:ab:3c:56:9e:ba:df:12:
f7:b5:b6:7e:33:33:20:1c:85:59:24:f7:cd:66:18:
8c:ee:f5:fa:14:c6:b0:40:23:d2:5a:2e:53:1d:33:
13:f0:da:a4:62:1e:f5:8e:84:28:66:46:c3:80:b3:
45:06:83:97:6c:27:b0:31:7c:2b:7e:07:a8:d4:f8:
1b:6f:8d:f3:9e:f5:fa:e3:39:db:05:15:f0:e0:5f:
66:77:c0:c0:bf:49:5d:7b:7e:07:30:31:47:6f:ac:
0a:93:d8:37:d0:b3:c6:22:06:de:ea:91:36:d0:b7:
45:c6:08:52:4d:e7:32:b6:36:e6:ec:aa:29:39:1f:
58:67:e4:25:4a:5e:55:95:7b:ad:eb:fd:96:5c:b9:
59:a7:82:0f:47:0d:f5:85:d9:e4:fb:7d:ea:d7:6d:
03:84:aa:23:b1:83:60:b2:77:d4:d3:ac:8d:f8:1e:
d9:e8:35:a5:4c:8a:f8:d6:64:a7:6c:45:35:7e:87:
11:92:4a:b6:54:d6:21:68:e9:30:c5:38:6f:b6:d5:
ae:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DA:BE:29:A5:D4:C7:7E:54:95:27:1F:75:C1:D9:BD:96:1D:20:A7
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:9c:1a:3a:79:dd:42:b0:63:9e:82:45:54:48:4a:16:6d:4b:
78:57:19:b0:5a:a1:c1:a5:42:f5:76:61:31:cc:2e:95:2a:f2:
e8:2c:3c:a7:3a:a9:ff:2c:c9:6b:99:c5:5d:ee:f2:0b:00:92:
fe:6a:a6:0d:bb:a3:ff:34:36:7e:88:e4:f4:bb:16:7c:c1:56:
56:48:d4:57:d9:94:78:d2:36:a0:0a:30:bf:73:a3:55:82:98:
52:2e:92:b8:a2:a7:e9:06:be:90:c1:b1:5b:8d:83:36:25:aa:
01:92:6d:2d:4d:fe:4d:18:c2:9b:9e:f4:a9:71:6c:e8:91:20:
70:93:d2:17:eb:58:22:26:02:f9:c3:61:41:32:5e:f2:25:af:
ad:16:8c:61:fc:b4:5c:c3:e1:53:ea:f0:69:10:e8:80:28:40:
f5:37:ce:0a:6d:d7:19:a8:f1:9e:4c:ee:b5:cc:3e:a4:38:d4:
e2:cc:55:a4:63:08:97:0d:36:65:33:31:51:80:7a:71:75:e6:
70:c7:a2:fc:68:14:2f:73:18:6c:03:1e:0f:50:c7:3d:03:c5:
50:f0:d5:fe:97:e5:6b:fd:6f:6a:ec:01:b3:b6:08:01:3d:70:
94:f6:44:f4:55:17:a4:f3:57:cc:e0:63:8a:17:16:94:9a:51:
0b:16:95:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:54:22 2025 by rpki-client