Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
File: Es84yOexki9uvz_TQHNc2wQjFBg.mft (raw, json)
Hash identifier: kac9OY/oU4U/labDAsYmsv0XP5ttwqoEauTYuhceHpM=
Subject key identifier: 24:C2:37:6C:36:35:5D:60:F6:88:03:02:90:8A:77:64:4E:EE:2D:05
Authority key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
Certificate issuer: /CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Certificate serial: 01992255A130BB74EF1CC080AB1EE23D95A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 04:01:01 +0000
Manifest this update: Sun 07 Sep 2025 04:01:01 +0000
Manifest next update: Mon 08 Sep 2025 04:01:01 +0000
Files and hashes: 1: Es84yOexki9uvz_TQHNc2wQjFBg.crl (hash: 7G3ZyZ4/bkxJcqU+WqMuImsywpMHITyMWKlPKvoAvxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:a1:30:bb:74:ef:1c:c0:80:ab:1e:e2:3d:95:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Validity
Not Before: Sep 7 04:01:01 2025 GMT
Not After : Sep 8 04:01:01 2025 GMT
Subject: CN=24c2376c36355d60f6880302908a77644eee2d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:fd:08:53:b0:39:87:7b:3a:da:ad:c8:c7:
16:0f:38:cb:4c:32:ef:8f:48:58:63:7f:ae:00:65:
80:37:49:ad:d3:dd:82:4a:d4:e2:4e:e8:b9:f1:5d:
fe:47:6a:56:53:96:7c:52:1b:d7:15:b8:00:4d:3b:
94:07:12:8c:b8:02:ff:1e:ae:27:06:a7:dd:c1:62:
9e:7d:ab:05:fe:6a:16:0a:8e:a7:13:66:d9:98:c9:
70:54:d2:26:7f:c3:14:74:09:42:5e:e9:70:43:92:
6e:4c:59:85:c5:50:43:f0:16:0a:ef:b9:48:d3:10:
a7:fc:dd:7f:c5:5c:75:3b:d0:28:40:64:96:76:b7:
59:f6:36:c7:3e:6b:92:83:59:cc:cf:3f:a3:dc:d9:
f0:28:33:d4:49:ac:22:c1:0d:f9:72:b0:fe:5e:2b:
93:ec:e6:63:7e:b1:12:ac:c9:68:48:c2:06:43:f7:
6a:84:33:9b:b7:a7:a0:7a:51:b0:6c:85:2f:ad:7a:
ca:be:44:a2:d2:34:ca:a9:dc:42:64:20:61:24:cf:
af:e3:72:e3:74:79:6f:63:e3:b8:e0:ef:08:00:d7:
f2:15:10:36:14:07:91:78:a6:e6:3d:38:fa:32:d8:
e4:d6:89:fe:3c:98:c1:1d:64:97:43:f5:d1:d9:b1:
c7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C2:37:6C:36:35:5D:60:F6:88:03:02:90:8A:77:64:4E:EE:2D:05
X509v3 Authority Key Identifier:
keyid:12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8f:a0:fb:84:ec:1e:6b:9c:f8:e9:38:00:08:30:23:19:6a:
f9:42:fb:dd:2b:ee:be:c7:85:28:ee:bc:25:3a:9b:7c:e2:16:
3e:d5:9f:53:43:22:12:ff:3f:37:05:21:a9:ea:21:61:7d:f4:
40:03:3d:6e:0f:ae:e4:ae:71:2a:33:4f:df:62:d2:b4:72:a8:
38:c1:b9:2b:9d:cf:da:94:b3:59:e4:3f:fb:1b:3d:20:99:5e:
81:2f:5a:27:c3:09:a2:f1:e7:d2:3b:f1:c3:81:e4:08:17:f4:
7b:18:bd:7e:fd:c3:6c:f9:be:51:0b:91:97:4a:7a:6c:55:d0:
8d:20:6c:3d:4f:99:ed:c4:53:b7:78:a4:5e:44:dd:7b:69:a2:
f9:99:f8:ce:7a:4c:5a:49:34:58:40:05:3a:64:c9:59:7e:13:
33:ac:4a:e4:a7:10:96:49:8e:e5:d4:71:54:ab:08:61:54:6e:
99:6f:cb:52:fe:48:6b:16:c0:d7:58:3d:47:59:5f:49:30:2c:
7e:f7:78:7a:2c:99:7b:12:77:d2:36:18:a9:a1:91:07:db:67:
5f:e7:2b:4e:a9:aa:02:2a:8e:47:b1:3d:8c:6c:ab:54:dc:b1:
9e:47:0b:78:4f:90:a8:3d:73:b7:5c:11:70:14:aa:68:b2:1e:
61:c1:37:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:56 2025 by rpki-client