Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
File: EsqtEcXYmB2YPDAehqGs8tgRqsE.mft (raw, json)
Hash identifier: DbadB4vA66/gBZP4R0ERWq608NOeW5nJ0XsJ2aF6wc8=
Subject key identifier: 1C:A9:26:B9:9F:64:19:02:B8:BF:39:22:62:AE:A9:49:FB:48:9A:4D
Authority key identifier: 12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
Certificate issuer: /CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Certificate serial: 0199228CC3061134470E394522D2A8497357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
Manifest number: 106D
Signing time: Sun 07 Sep 2025 05:01:14 +0000
Manifest this update: Sun 07 Sep 2025 05:01:14 +0000
Manifest next update: Mon 08 Sep 2025 05:01:14 +0000
Files and hashes: 1: EsqtEcXYmB2YPDAehqGs8tgRqsE.crl (hash: 127TM3jnnFDEeisM2SyCZ5WbX0HPpzoUo4MW/DF+rcY=)
2: wCYSBxlEFn9C3bKzEBin_RqzoTU.roa (hash: HuM1kg7JZIqnFeWlmolggLVBCkZTp9UadWTeRelOxb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:c3:06:11:34:47:0e:39:45:22:d2:a8:49:73:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Validity
Not Before: Sep 7 05:01:14 2025 GMT
Not After : Sep 8 05:01:14 2025 GMT
Subject: CN=1ca926b99f641902b8bf392262aea949fb489a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:73:18:40:b7:d1:f6:ea:6e:85:a6:cd:ac:f7:
95:6b:6b:99:14:2f:8e:50:27:f0:68:bc:7c:39:93:
a1:eb:16:62:e1:4c:97:58:d5:59:f6:4d:c3:f3:54:
f6:71:9b:6e:ef:40:e5:ce:e2:23:ab:68:8f:81:fa:
dc:cd:1c:75:d5:00:28:86:54:e7:09:74:a8:38:b4:
03:8d:1a:89:10:ef:7d:52:70:79:a9:bb:94:72:25:
00:53:4a:e8:a5:69:ed:1f:18:b0:e3:24:af:2e:2e:
d3:1f:d8:1a:4b:cc:ce:41:0b:6e:9d:70:a9:16:13:
37:73:b6:63:1f:68:d3:e1:23:e2:19:c2:63:88:ce:
d3:d0:cf:fa:ab:7b:a0:d7:00:65:bf:95:a5:1e:b2:
b5:5f:67:95:9f:c5:9a:b2:f9:33:22:71:38:8d:01:
c3:72:19:0a:b3:2d:e6:1d:6e:28:c2:84:81:fe:01:
7d:7f:02:1d:dc:f7:1a:e6:74:90:d0:94:01:82:c3:
0e:56:f8:7d:ca:0d:cf:46:7f:7b:74:f0:94:28:06:
6e:ed:32:62:9e:f4:4b:f4:2f:12:99:84:25:8c:cf:
19:b2:dc:0b:60:94:29:6c:c4:88:e5:15:e5:8b:76:
3a:68:00:75:56:2f:95:eb:f4:5a:46:bd:93:f0:03:
a2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A9:26:B9:9F:64:19:02:B8:BF:39:22:62:AE:A9:49:FB:48:9A:4D
X509v3 Authority Key Identifier:
keyid:12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6c:d4:5f:f3:7f:19:e9:c1:b6:66:5b:88:cd:57:8e:af:e9:
8d:61:fa:91:e0:44:d6:08:ef:98:ae:67:e2:57:0b:6b:eb:5b:
b7:64:12:b1:8e:a5:a4:10:e7:f5:2e:ac:7d:07:e8:62:57:a0:
07:bd:e6:96:ba:b5:68:7a:8b:60:03:a6:a5:16:d0:48:25:45:
b0:64:c8:10:4d:3d:61:e0:e1:fe:91:5e:46:6f:4c:66:a2:d4:
af:f7:96:44:c9:d8:73:c3:39:9e:2a:48:66:61:ac:e0:95:4e:
e3:b1:d6:5a:2b:05:34:ed:d0:e5:25:41:9f:28:04:1b:0b:89:
cf:19:a1:13:52:51:0b:c9:f6:f3:3e:69:40:fa:5f:c9:de:ed:
5c:80:9d:ba:1d:79:b3:26:34:5d:15:ad:e1:4d:84:62:61:bb:
54:e3:8b:6e:11:39:b2:14:c8:02:4d:82:10:03:04:d1:a5:46:
c8:4f:10:49:f5:94:bf:69:27:1d:9c:33:6d:26:a2:dc:81:cf:
9e:68:1f:83:86:89:d3:cd:ec:92:ea:1f:0e:09:87:bb:46:5d:
72:df:ab:40:80:84:cd:61:b2:79:63:26:6c:65:39:63:a1:75:
66:69:3f:d6:a0:23:63:80:3f:42:f9:0c:d4:8b:8a:df:af:a5:
73:e7:4c:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijMMGETRHDjlFItKoSXNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyY2FhZDExYzVkODk4MWQ5ODNjMzAxZTg2YTFhY2YyZDgx
MWFhYzEwHhcNMjUwOTA3MDUwMTE0WhcNMjUwOTA4MDUwMTE0WjAzMTEwLwYDVQQD
EygxY2E5MjZiOTlmNjQxOTAyYjhiZjM5MjI2MmFlYTk0OWZiNDg5YTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3MYQLfR9upuhabNrPeVa2uZFC+O
UCfwaLx8OZOh6xZi4UyXWNVZ9k3D81T2cZtu70DlzuIjq2iPgfrczRx11QAohlTn
CXSoOLQDjRqJEO99UnB5qbuUciUAU0ropWntHxiw4ySvLi7TH9gaS8zOQQtunXCp
FhM3c7ZjH2jT4SPiGcJjiM7T0M/6q3ug1wBlv5WlHrK1X2eVn8WasvkzInE4jQHD
chkKsy3mHW4owoSB/gF9fwId3Pca5nSQ0JQBgsMOVvh9yg3PRn97dPCUKAZu7TJi
nvRL9C8SmYQljM8ZstwLYJQpbMSI5RXli3Y6aAB1Vi+V6/RaRr2T8AOimQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBypJrmfZBkCuL85ImKuqUn7SJpNMB8GA1UdIwQY
MBaAFBLKrRHF2JgdmDwwHoahrPLYEarBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNxdEVjWFltQjJZUERBZWhxR3M4dGdScXNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82YzNmYTEtNjNiNS00YmRjLTk0YmUt
ZWI3Yjk1OTBlMzAzLzEvRXNxdEVjWFltQjJZUERBZWhxR3M4dGdScXNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82YzNmYTEtNjNiNS00YmRjLTk0YmUtZWI3Yjk1OTBlMzAz
LzEvRXNxdEVjWFltQjJZUERBZWhxR3M4dGdScXNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmzUX/N/
GenBtmZbiM1Xjq/pjWH6keBE1gjvmK5n4lcLa+tbt2QSsY6lpBDn9S6sfQfoYleg
B73mlrq1aHqLYAOmpRbQSCVFsGTIEE09YeDh/pFeRm9MZqLUr/eWRMnYc8M5nipI
ZmGs4JVO47HWWisFNO3Q5SVBnygEGwuJzxmhE1JRC8n28z5pQPpfyd7tXICduh15
syY0XRWt4U2EYmG7VOOLbhE5shTIAk2CEAME0aVGyE8QSfWUv2knHZwzbSai3IHP
nmgfg4aJ083skuofDgmHu0Zdct+rQICEzWGyeWMmbGU5Y6F1Zmk/1qAjY4A/QvkM
1IuK36+lc+dMAg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:21 2025 by rpki-client