Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
File: ES0MTxbciSISn_YFDiNVYjF1ZeU.mft (raw, json)
Hash identifier: 1rmb5Qyg0WMKKzfTtCWiUfgIUDn15vpEmqQA/3KwSBk=
Subject key identifier: 03:1D:98:3B:E8:78:B7:C5:3C:4D:BE:BB:38:7A:5D:32:1A:BD:06:4B
Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
Certificate issuer: /CN=112d0c4f16dc8922129ff6050e235562317565e5
Certificate serial: 019A71B789BD71D2E3DFBE37A308DC4887A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:00:44 +0000
Manifest this update: Tue 11 Nov 2025 07:00:44 +0000
Manifest next update: Wed 12 Nov 2025 07:00:44 +0000
Files and hashes: 1: ES0MTxbciSISn_YFDiNVYjF1ZeU.crl (hash: rOfKn+lQP+TqMX5rgYnM6dk13GEaxHGdBWG0+AS3UJQ=)
2: o9kVSX3gj3H9ZN8cW0Ym-IVcV44.roa (hash: lKG8mtPIe7S1JAZc980NZt3SRdrgtpPphzv++UEyF4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:89:bd:71:d2:e3:df:be:37:a3:08:dc:48:87:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5
Validity
Not Before: Nov 11 07:00:44 2025 GMT
Not After : Nov 12 07:00:44 2025 GMT
Subject: CN=031d983be878b7c53c4dbebb387a5d321abd064b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:88:89:dc:0f:56:90:d6:eb:9d:7d:86:8a:ba:
a5:e6:88:29:ba:23:0f:85:f7:d3:9f:fc:1d:22:6b:
02:00:d3:85:72:ee:64:37:c8:b3:7f:b7:c9:78:d7:
ee:30:9b:4b:3f:71:d2:78:02:23:53:07:10:51:dd:
b0:27:1a:ff:cb:22:a4:98:34:fa:df:e1:57:11:70:
6c:39:a8:92:3d:55:42:89:26:c9:66:2a:7c:7a:69:
90:64:ca:5f:f1:00:28:67:a8:e1:13:1d:6d:4f:03:
8f:4d:3e:63:64:1a:f5:10:d4:8d:8e:2c:c5:17:08:
a7:21:bf:a3:4a:7b:56:21:8a:e8:ab:95:16:3d:68:
d6:17:42:1f:e2:d2:6a:82:a7:fe:1e:34:a8:14:8d:
d6:af:22:ef:87:76:ac:0b:04:37:38:66:3e:32:6f:
58:42:bb:19:0d:06:91:f3:24:8b:de:f5:64:71:ba:
dd:38:24:27:ee:b7:58:5d:1a:51:81:bb:a2:35:0a:
18:41:85:c7:67:59:98:62:97:0f:1f:41:4f:a2:14:
33:33:5f:a0:ad:9c:7e:33:0a:42:73:ce:c8:c9:2a:
10:73:d7:04:1c:7b:08:0e:6b:28:bb:86:f9:2c:a0:
b5:64:c7:58:e5:c9:b2:be:50:88:b9:6a:fe:66:d9:
65:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1D:98:3B:E8:78:B7:C5:3C:4D:BE:BB:38:7A:5D:32:1A:BD:06:4B
X509v3 Authority Key Identifier:
keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e5:69:90:64:6f:5b:b4:25:8c:e7:92:15:76:3a:1f:40:dc:
f8:03:45:5a:cd:9e:dc:04:67:46:e3:96:b4:47:ae:17:17:b6:
da:65:b5:32:f7:1e:31:32:47:78:98:b3:b1:d8:c4:a8:4e:84:
ac:a5:2e:0e:81:4f:c5:c3:5a:06:e4:97:f5:17:d6:eb:ac:29:
5b:ec:ab:da:67:35:c2:29:e9:e0:f3:a1:96:fd:c0:a3:9f:50:
ee:25:15:69:fc:a5:7b:55:14:5d:fd:a6:31:f7:20:5d:c3:38:
3d:61:24:1f:95:f4:54:14:1a:20:2e:7a:3f:3e:0b:77:5f:45:
6d:24:09:2d:e4:65:17:0a:ea:89:e7:7c:2e:63:6f:a4:ac:20:
c2:59:4e:eb:8b:a5:8b:6b:1a:77:ec:7f:79:90:ef:40:4b:93:
ce:43:d5:22:79:c6:5b:67:55:fd:1f:26:4f:67:d8:11:b9:e7:
d6:95:d1:13:4b:aa:eb:84:b0:84:fb:a9:c8:cb:8e:14:c7:8d:
50:d7:87:14:b0:b9:32:fa:ad:7f:79:ba:f6:e2:b6:2b:61:75:
d5:4c:41:f9:f2:fd:5d:df:37:0d:71:ae:44:15:d1:05:89:d1:
8d:aa:23:d4:be:10:4c:4e:79:83:f8:f8:45:7f:74:88:7f:78:
ae:b1:0b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:49 2025 by rpki-client