Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File: EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier: qk7DgNq+sfWOEni6htSduMUQMxxXFq6VisOWnfJU60s=
Subject key identifier: A3:C7:42:76:98:AD:34:2E:A2:77:E3:99:E2:D2:3B:5A:29:E0:42:0C
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer: /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial: 019A258A881A62985A6E2CB70792ED1199C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number: 16FD
Signing time: Mon 27 Oct 2025 12:00:27 +0000
Manifest this update: Mon 27 Oct 2025 12:00:27 +0000
Manifest next update: Tue 28 Oct 2025 12:00:27 +0000
Files and hashes: 1: 1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa (hash: 7OUkteLe8nHwqeQk9zlC7/yoJRlbZiYexJ0JFvbqk0Y=)
2: 9N77sGkqVPgPzl64HnlAQCAiJiI.roa (hash: 8rr1/h/HEPqZmQ/y+1jYrrv0fcfQ6nqe4NWrJHpDdT8=)
3: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: n+rcUSxG1fskDcJ+Rl5gAziWENpuRM52MD+6/PL12PM=)
4: GxKilLVepL5t_pYKZrftFkg3OVM.roa (hash: XTTU+F0aFJFtKQUVRMP8YL9IwYldi2UmnMmIwVJ9a0s=)
5: Iav_qyY5ImtZ4ANKY_BlD16EiB4.roa (hash: o26HJXNrKDGMVRomgVXRlnZ79f/49jllECyaOAkuhL8=)
6: LTvU0JWVsSQgu0MVSG_VtxZcgMA.roa (hash: xmPZIz9nJEAlB3NELOSNPxxAUtJ8mR0ajbEAHYuN+DA=)
7: prOvIV94SipWj181Foj7X04Xy-c.roa (hash: fEs9h6WUn0wA3/zm4fis57AzqK3n8+IhBDsb2ZxLQfw=)
8: yTPU9KBT_yF9oFmQNNIcb5x-2m4.roa (hash: 4gwBmGsupWB21IC5fpENG4yVPsL+VM2s0DNtBND4taM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:88:1a:62:98:5a:6e:2c:b7:07:92:ed:11:99:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Validity
Not Before: Oct 27 12:00:27 2025 GMT
Not After : Oct 28 12:00:27 2025 GMT
Subject: CN=a3c7427698ad342ea277e399e2d23b5a29e0420c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:67:c8:86:31:2f:34:7f:99:c9:f2:5d:a7:
40:a4:91:0c:03:3b:ba:50:b2:bf:39:09:3a:31:2f:
93:11:af:5b:fe:d6:56:10:8b:67:99:60:42:71:e2:
54:77:ac:e1:32:a1:ed:9e:45:65:f5:9c:a4:f7:f0:
1b:69:79:37:83:8a:52:e4:62:b7:e3:4b:6c:e8:6a:
2e:58:04:a6:67:21:db:6f:8f:6b:d4:55:6d:b9:7f:
fc:42:f4:f6:9c:ef:e6:0c:a4:86:e0:b6:5f:49:d7:
61:50:45:e0:f2:24:79:12:2f:37:39:e5:bc:2c:de:
28:b6:e2:fd:90:bb:a9:1e:0f:c2:68:ab:0e:b1:61:
71:a7:3b:9c:05:7c:39:0c:0a:db:bc:6f:db:6e:58:
fd:10:96:a8:1f:96:eb:57:c5:8e:57:3b:37:78:db:
1c:9d:be:37:96:4f:99:98:71:e8:d7:53:33:50:fa:
2c:41:63:a2:8e:db:a2:30:42:4b:64:56:02:52:75:
54:95:14:28:61:e9:ad:fb:b5:f3:d5:ca:44:a0:12:
5b:47:17:68:1c:f3:9b:1b:2c:84:38:41:44:d2:ea:
67:80:4d:c4:3b:73:35:3c:43:2e:9a:b2:48:f7:15:
aa:d1:f5:ec:65:95:33:70:a5:07:82:f0:17:85:24:
3a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C7:42:76:98:AD:34:2E:A2:77:E3:99:E2:D2:3B:5A:29:E0:42:0C
X509v3 Authority Key Identifier:
keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f8:e0:66:93:a7:80:1e:bc:59:ef:76:5b:d8:47:22:ab:ee:
d3:1c:bc:79:ce:da:67:a4:4e:fa:7b:a0:f8:01:2f:d0:98:dc:
b2:bc:b8:1e:a1:72:7f:78:e9:5f:8d:d6:b4:7e:9b:b6:39:db:
ad:da:c6:29:38:bf:50:69:b8:28:ed:ef:4e:1a:24:c1:15:ea:
9c:ca:91:de:94:fe:3b:b2:df:4a:ed:38:81:7f:bc:cd:b0:c2:
f7:a2:37:67:78:7e:62:43:94:bc:a7:5b:0f:91:11:df:cd:c9:
a0:89:8b:ef:45:b5:39:c2:0b:f6:ef:a5:49:c6:36:00:d1:d0:
ba:f5:b0:38:fc:ec:b2:e3:58:3d:df:e0:47:ac:56:e6:8b:f0:
e2:b8:77:a9:49:f3:f5:87:ce:39:35:1c:53:77:a6:21:e8:37:
62:b2:4c:6f:5e:e5:61:82:e7:7f:bc:8b:79:21:1e:12:ec:f5:
45:02:25:d8:85:15:4f:2c:2c:fd:a5:7c:59:a6:88:a3:10:59:
54:b8:a7:f0:25:eb:2b:b4:ed:52:2c:b3:c6:7f:71:b1:84:ab:
b6:3e:dc:80:e5:1f:a5:b4:40:79:e4:66:28:91:9d:ce:ce:f8:
ec:1f:2c:7e:88:d5:a9:17:b7:a9:37:dc:af:58:a8:ce:1b:77:
d5:c4:36:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:47:52 2025 by rpki-client