Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File: EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier: yPdqL/FoTW3xa7/7yB8sXrtN4KREOZaKY+FXSRxzP3o=
Subject key identifier: 8F:D7:99:60:29:3A:FA:1A:4F:EC:E1:B0:B4:11:70:54:61:B3:9E:5F
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 019749D5A1E38FD2348B6887A3E2803393B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number: 1582
Signing time: Sat 07 Jun 2025 10:00:26 +0000
Manifest this update: Sat 07 Jun 2025 10:00:26 +0000
Manifest next update: Sun 08 Jun 2025 10:00:26 +0000
Files and hashes: 1: 1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa (hash: 7OUkteLe8nHwqeQk9zlC7/yoJRlbZiYexJ0JFvbqk0Y=)
2: 9N77sGkqVPgPzl64HnlAQCAiJiI.roa (hash: 8rr1/h/HEPqZmQ/y+1jYrrv0fcfQ6nqe4NWrJHpDdT8=)
3: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: lyqxvsntI9AuRbfmXwmvvMsF+gU3f5X7uD/Fa+3dzbE=)
4: GxKilLVepL5t_pYKZrftFkg3OVM.roa (hash: XTTU+F0aFJFtKQUVRMP8YL9IwYldi2UmnMmIwVJ9a0s=)
5: Iav_qyY5ImtZ4ANKY_BlD16EiB4.roa (hash: o26HJXNrKDGMVRomgVXRlnZ79f/49jllECyaOAkuhL8=)
6: LTvU0JWVsSQgu0MVSG_VtxZcgMA.roa (hash: xmPZIz9nJEAlB3NELOSNPxxAUtJ8mR0ajbEAHYuN+DA=)
7: prOvIV94SipWj181Foj7X04Xy-c.roa (hash: fEs9h6WUn0wA3/zm4fis57AzqK3n8+IhBDsb2ZxLQfw=)
8: yTPU9KBT_yF9oFmQNNIcb5x-2m4.roa (hash: 4gwBmGsupWB21IC5fpENG4yVPsL+VM2s0DNtBND4taM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:a1:e3:8f:d2:34:8b:68:87:a3:e2:80:33:93:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Jun 7 10:00:26 2025 GMT
Not After : Jun 8 10:00:26 2025 GMT
Subject: CN=8fd79960293afa1a4fece1b0b411705461b39e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:65:73:ad:9a:ff:6f:23:75:e3:61:7c:d3:0c:
d7:52:d2:73:96:f1:5b:2c:74:21:ac:fc:86:a2:41:
22:2f:d2:cc:eb:3f:a4:58:c2:e9:23:75:ed:8f:17:
05:f8:f9:8a:bb:90:bb:ad:c5:ff:cc:94:d6:18:a7:
7c:4b:f0:ca:56:16:23:17:21:e9:85:70:98:3e:ad:
36:0d:7d:5d:98:22:9a:cd:c5:31:25:14:20:91:8c:
6a:8b:7d:ff:9b:de:ee:cf:92:42:5e:46:bd:f8:bb:
41:b0:3c:10:ed:44:fa:d7:2b:19:e9:86:ed:98:63:
7a:f6:ec:b3:bd:0c:d1:43:b3:c7:9c:cb:e1:70:58:
a1:ed:3e:8d:37:8e:5b:4b:51:1b:0e:63:53:c8:2a:
85:1f:bd:dd:f0:73:22:17:20:ca:4d:39:f5:b6:2c:
74:73:8d:89:b6:14:78:bd:a2:2a:2e:c5:92:aa:8d:
cb:e4:b6:15:7e:51:81:00:7b:fe:01:6b:08:e4:b1:
90:ab:a9:29:df:5d:fb:33:f4:f7:1d:cc:67:6d:3d:
ba:ae:9c:42:46:30:03:f2:3b:50:f5:d5:8a:79:6d:
ba:eb:68:e3:cc:6d:b7:cd:7d:93:4f:3c:c8:43:85:
84:e0:64:ae:d6:aa:0b:25:c4:9c:21:b3:4a:13:f3:
9c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D7:99:60:29:3A:FA:1A:4F:EC:E1:B0:B4:11:70:54:61:B3:9E:5F
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:6a:39:e1:cb:18:a8:d2:4f:6f:49:09:58:9a:01:13:4f:87:
e6:ef:18:07:78:d9:42:e5:03:8a:57:39:a0:39:14:ae:5d:f0:
59:43:c5:8d:8b:50:01:dc:2c:c7:09:d3:6d:d5:d2:07:f0:e8:
f1:99:94:09:47:01:de:0f:a0:22:26:c6:27:ff:f7:6d:37:59:
a8:1e:63:35:ee:18:b6:7d:1d:d3:79:a5:6f:30:d6:9e:10:42:
42:27:52:e1:2b:b0:a5:e1:6b:4a:7a:ea:39:de:98:ba:ad:48:
e9:0a:a3:df:0a:f7:04:0b:67:e0:7e:58:57:ed:af:8d:ff:79:
27:73:7f:21:46:bb:c9:32:de:2e:d4:de:00:4b:31:8e:45:65:
19:ef:81:bd:8e:64:e5:19:ba:91:a3:7b:a2:34:0b:8e:11:11:
95:8e:a0:08:57:0b:88:5b:d5:28:fe:86:9a:e6:49:4b:30:00:
eb:6f:c8:a8:08:e7:b9:76:eb:05:6c:d4:f5:87:95:ec:23:41:
fa:36:75:96:b1:f7:4e:b9:be:fa:21:41:e7:7c:75:27:7a:fd:
45:84:be:fa:6c:16:eb:36:83:e9:d5:46:67:f1:62:93:81:6d:
05:c0:be:05:ce:27:75:a3:4d:ee:7a:8e:9d:64:0d:f4:a2:73:
72:9f:38:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:04:40 2025 by rpki-client