Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
File: EsqtEcXYmB2YPDAehqGs8tgRqsE.mft (raw, json)
Hash identifier: tNBVCJjMHj3aZfielYUt1LyeHYLU+K/wrbnoeW11bZQ=
Subject key identifier: 22:5C:A5:8C:D2:04:CC:EB:D7:B9:98:18:F9:8C:5A:6B:FC:41:F4:B8
Authority key identifier: 12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
Certificate issuer: /CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Certificate serial: 019A729336220F82A3D46B444A0A839B84B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
Manifest number: 111B
Signing time: Tue 11 Nov 2025 11:00:41 +0000
Manifest this update: Tue 11 Nov 2025 11:00:41 +0000
Manifest next update: Wed 12 Nov 2025 11:00:41 +0000
Files and hashes: 1: EsqtEcXYmB2YPDAehqGs8tgRqsE.crl (hash: 4ExJZhkwzaPwUU505V8sDrA8RxiVgMKAjWzwGGJk1X4=)
2: wCYSBxlEFn9C3bKzEBin_RqzoTU.roa (hash: HuM1kg7JZIqnFeWlmolggLVBCkZTp9UadWTeRelOxb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:36:22:0f:82:a3:d4:6b:44:4a:0a:83:9b:84:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Validity
Not Before: Nov 11 11:00:41 2025 GMT
Not After : Nov 12 11:00:41 2025 GMT
Subject: CN=225ca58cd204ccebd7b99818f98c5a6bfc41f4b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:86:cb:0b:09:c5:9e:cb:ea:d9:be:9b:8a:d8:
a1:60:5f:ae:22:e2:43:ee:b4:bd:c0:9a:6d:90:af:
d0:26:a3:06:ca:89:58:5a:bb:f1:15:4d:5a:2d:2a:
a6:6a:fb:9e:7f:3d:19:86:43:7c:73:50:bf:94:54:
3f:ac:c2:68:f7:58:93:a4:2c:d9:13:dd:37:f4:a6:
fa:95:ee:50:d8:2a:a4:e5:12:ef:2c:e3:e8:4f:bb:
d8:8e:28:a6:ff:2b:14:96:19:b6:7a:4b:e9:6a:79:
4d:81:3f:14:ec:12:e8:74:5f:55:9c:be:1d:c9:91:
58:75:15:4c:3b:5f:5f:71:ae:51:2a:11:a4:10:01:
28:5a:75:4a:2f:6e:71:36:4a:55:9d:09:00:b2:6b:
4c:11:d3:91:57:f6:1e:d1:e7:53:b2:2a:8b:00:dc:
8c:48:30:0b:5c:07:21:26:db:ba:d6:00:0e:94:46:
dc:d0:20:73:71:c8:4b:2f:0c:c6:ca:79:71:25:56:
2f:2c:d1:2b:a8:6e:ea:9e:63:74:49:d7:aa:8e:67:
0a:b0:a6:42:3e:0c:51:06:72:73:62:58:f8:17:70:
9f:8f:0a:01:02:70:df:ee:65:3a:a5:3a:ff:c1:75:
a3:bc:52:e6:db:04:8b:9d:2e:5f:18:09:9f:fa:19:
19:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5C:A5:8C:D2:04:CC:EB:D7:B9:98:18:F9:8C:5A:6B:FC:41:F4:B8
X509v3 Authority Key Identifier:
keyid:12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:77:26:06:c1:ae:9a:ab:02:20:d2:7e:2f:23:5c:c0:1f:0d:
81:cd:f3:34:7d:02:74:7d:d1:0a:8f:d1:f8:9a:30:d2:e5:55:
3c:40:71:66:9b:21:fa:9d:3f:9a:84:29:59:85:45:9c:c4:af:
bc:4c:d2:77:97:fc:10:a3:01:50:30:85:ef:da:9f:c0:32:66:
d7:0a:bc:fc:a7:0c:e0:ed:97:50:36:c5:b8:a9:7e:00:59:2c:
7f:55:ce:dd:67:14:09:b1:4f:b7:16:9f:ac:8d:57:e6:3d:a8:
eb:25:42:6b:08:80:cd:e7:fc:98:0e:f9:d9:f0:8b:8e:8b:a1:
f6:10:a2:34:1f:2a:db:71:0e:6c:be:30:32:b6:56:d2:58:76:
9a:3d:e3:37:cb:16:5d:d5:81:0e:ae:95:a0:b2:bb:fd:b1:b9:
26:25:72:79:73:de:f2:ce:f4:30:e8:f3:79:a9:ae:0f:63:14:
62:b6:a9:3e:5d:92:43:82:b6:91:42:e9:01:3b:b9:86:54:c6:
fe:ba:57:29:86:7c:64:3d:1d:18:44:7e:10:3e:3e:8a:a5:1f:
f9:82:a0:3e:8a:30:3a:07:03:b9:2a:14:a1:0e:a0:a5:16:26:
f5:2f:0d:88:c8:27:6c:d2:dc:19:7f:90:7f:98:34:34:63:ee:
2a:97:62:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpykzYiD4Kj1GtESgqDm4S4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyY2FhZDExYzVkODk4MWQ5ODNjMzAxZTg2YTFhY2YyZDgx
MWFhYzEwHhcNMjUxMTExMTEwMDQxWhcNMjUxMTEyMTEwMDQxWjAzMTEwLwYDVQQD
EygyMjVjYTU4Y2QyMDRjY2ViZDdiOTk4MThmOThjNWE2YmZjNDFmNGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhobLCwnFnsvq2b6bitihYF+uIuJD
7rS9wJptkK/QJqMGyolYWrvxFU1aLSqmavuefz0ZhkN8c1C/lFQ/rMJo91iTpCzZ
E9039Kb6le5Q2Cqk5RLvLOPoT7vYjiim/ysUlhm2ekvpanlNgT8U7BLodF9VnL4d
yZFYdRVMO19fca5RKhGkEAEoWnVKL25xNkpVnQkAsmtMEdORV/Ye0edTsiqLANyM
SDALXAchJtu61gAOlEbc0CBzcchLLwzGynlxJVYvLNErqG7qnmN0SdeqjmcKsKZC
PgxRBnJzYlj4F3CfjwoBAnDf7mU6pTr/wXWjvFLm2wSLnS5fGAmf+hkZSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJcpYzSBMzr17mYGPmMWmv8QfS4MB8GA1UdIwQY
MBaAFBLKrRHF2JgdmDwwHoahrPLYEarBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNxdEVjWFltQjJZUERBZWhxR3M4dGdScXNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82YzNmYTEtNjNiNS00YmRjLTk0YmUt
ZWI3Yjk1OTBlMzAzLzEvRXNxdEVjWFltQjJZUERBZWhxR3M4dGdScXNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82YzNmYTEtNjNiNS00YmRjLTk0YmUtZWI3Yjk1OTBlMzAz
LzEvRXNxdEVjWFltQjJZUERBZWhxR3M4dGdScXNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXcmBsGu
mqsCINJ+LyNcwB8Ngc3zNH0CdH3RCo/R+Jow0uVVPEBxZpsh+p0/moQpWYVFnMSv
vEzSd5f8EKMBUDCF79qfwDJm1wq8/KcM4O2XUDbFuKl+AFksf1XO3WcUCbFPtxaf
rI1X5j2o6yVCawiAzef8mA752fCLjouh9hCiNB8q23EObL4wMrZW0lh2mj3jN8sW
XdWBDq6VoLK7/bG5JiVyeXPe8s70MOjzeamuD2MUYrapPl2SQ4K2kULpATu5hlTG
/rpXKYZ8ZD0dGER+ED4+iqUf+YKgPoowOgcDuSoUoQ6gpRYm9S8NiMgnbNLcGX+Q
f5g0NGPuKpdiKw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:17:15 2025 by rpki-client