
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
File: eSMEzs5_tlUdYh4ld0N1PX0-fro.mft (raw, json)
Hash identifier: Q7FNLWiPJ3NSZrkGExo+O44excPbjlgtCfInqHs2P7I=
Subject key identifier: AD:05:F9:9E:A1:3D:CF:F9:15:B0:18:B9:1C:C5:EE:33:2A:14:2D:15
Authority key identifier: 79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA
Certificate issuer: /CN=792304cece7fb6551d621e257743753d7d3e7eba
Certificate serial: 019748FA0393BA96DCFF5DE63315F9A9BCCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
Manifest number: 12C1
Signing time: Sat 07 Jun 2025 06:00:33 +0000
Manifest this update: Sat 07 Jun 2025 06:00:33 +0000
Manifest next update: Sun 08 Jun 2025 06:00:33 +0000
Files and hashes: 1: IMdPglYzX5a0Y8UZyR6PoX9F3qI.roa (hash: LlemrthVpDv3Bg7I6x+S4EwJBWPGL+Tm33DKrH5qsTc=)
2: eSMEzs5_tlUdYh4ld0N1PX0-fro.crl (hash: WmhWCWSTSabfewvQA4R0djrdNramf0X3PhFzz88X19g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:03:93:ba:96:dc:ff:5d:e6:33:15:f9:a9:bc:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792304cece7fb6551d621e257743753d7d3e7eba
Validity
Not Before: Jun 7 06:00:33 2025 GMT
Not After : Jun 8 06:00:33 2025 GMT
Subject: CN=ad05f99ea13dcff915b018b91cc5ee332a142d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:63:1b:8f:d5:ef:f2:c0:e9:24:8a:3e:e7:a7:
93:75:07:3b:a1:19:50:92:4d:24:c4:37:3a:84:c2:
2f:0e:c0:f1:63:72:41:17:36:9f:23:c0:ac:1b:2e:
11:1e:f4:e1:58:b2:31:1d:26:48:8b:e8:a8:43:ac:
b3:7f:8f:2b:13:30:54:ba:1d:60:81:eb:5e:00:22:
26:0a:1d:ad:78:89:91:c2:66:b9:06:3a:62:f7:b9:
a7:b6:1d:d8:4e:28:2b:0e:32:35:12:88:1c:36:6c:
87:c4:39:38:8b:c1:86:6e:4a:fd:12:50:ab:71:f0:
84:0b:36:65:82:0a:c4:19:15:f5:9f:e7:c5:07:c0:
86:b6:8f:59:bf:22:51:c8:57:78:b5:bf:96:8d:e1:
34:80:36:2a:31:13:29:08:64:9a:ea:f9:20:05:2a:
37:d6:df:42:6a:03:1b:de:f8:48:bc:f6:fa:23:7b:
1b:9a:40:57:e5:7e:12:b0:4d:8e:eb:f2:86:ab:d1:
a0:9d:c9:86:64:03:80:bd:4e:b0:49:b8:dd:3b:f6:
80:7b:66:89:43:e5:92:b4:20:b3:44:a6:32:16:bd:
b1:3a:b4:bc:3a:89:87:dc:62:22:a3:80:b4:ad:38:
4a:c8:97:c4:72:65:8d:6c:49:3b:ee:0f:8f:43:31:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:05:F9:9E:A1:3D:CF:F9:15:B0:18:B9:1C:C5:EE:33:2A:14:2D:15
X509v3 Authority Key Identifier:
keyid:79:23:04:CE:CE:7F:B6:55:1D:62:1E:25:77:43:75:3D:7D:3E:7E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSMEzs5_tlUdYh4ld0N1PX0-fro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e84b5d-3511-44e9-9261-ed82ae7dbd59/1/eSMEzs5_tlUdYh4ld0N1PX0-fro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:aa:76:59:0f:8f:f7:da:2e:e8:a5:eb:5e:d5:a1:3e:e9:5e:
f3:59:7d:88:05:ca:ca:ab:45:06:b1:7b:6b:bc:07:6c:d7:9d:
c6:00:8a:c5:0b:8d:71:30:9c:c5:a1:c1:72:69:b6:85:fd:de:
f3:8b:86:00:df:f5:93:3c:cf:dd:44:76:b7:4d:e7:36:e2:3e:
5a:b5:29:12:f9:68:c4:08:6a:c3:41:90:b9:3a:94:9b:7f:de:
7c:59:be:80:2d:a8:5a:93:5f:52:57:1e:8c:8c:eb:3f:d8:3d:
e1:fb:1b:48:5e:ae:78:65:cd:bb:86:66:79:80:3d:86:db:94:
00:96:4b:93:6c:fe:d7:5b:03:d6:fd:2e:4b:c1:d1:07:d5:b9:
90:36:5e:ee:35:09:fe:15:85:7b:30:dd:b3:ba:72:07:9a:20:
42:54:dd:8b:00:11:6d:6a:6b:a3:96:17:cb:3b:71:8e:cb:25:
04:70:4e:31:15:b8:d3:c9:c8:a8:e6:a9:e5:5c:80:8d:02:f9:
99:9f:04:ef:ad:40:92:69:6c:0d:85:68:f3:eb:78:5d:1c:c2:
f4:ba:0c:77:05:8c:5a:9a:fc:10:85:8c:a4:2b:75:d5:e3:f2:
c3:d6:6d:c9:37:18:7d:d2:49:71:46:cd:94:75:f4:27:bc:f9:
a8:11:37:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:23:54 2025 by rpki-client