Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
File: e_es5VMOXVCQfS3bQ1vym03x1uQ.mft (raw, json)
Hash identifier: MuDEQ4vNWnySYATZJHrTGWi8R8fRPaMYGewXuYn1lyk=
Subject key identifier: 64:AA:DE:AE:FA:26:13:99:9B:42:E3:A4:04:9A:47:CC:88:51:C7:96
Authority key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
Certificate issuer: /CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Certificate serial: 019A71EEF11F0A694EB6E01B4CC70FE5E1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
Manifest number: 0518
Signing time: Tue 11 Nov 2025 08:01:15 +0000
Manifest this update: Tue 11 Nov 2025 08:01:15 +0000
Manifest next update: Wed 12 Nov 2025 08:01:15 +0000
Files and hashes: 1: 7ZUQ_v-BIT_KwAz6NDX0t_K7Y_o.roa (hash: W6gsf8oTn0VsRjkJRSnQZjA1UWhDIyT1LhfUV5ExzMo=)
2: e_es5VMOXVCQfS3bQ1vym03x1uQ.crl (hash: kgcJ0k8F2qz33Rn0E5xX6DB5N/skjt4H4GbBJO5nMhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f1:1f:0a:69:4e:b6:e0:1b:4c:c7:0f:e5:e1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Validity
Not Before: Nov 11 08:01:15 2025 GMT
Not After : Nov 12 08:01:15 2025 GMT
Subject: CN=64aadeaefa2613999b42e3a4049a47cc8851c796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:b0:9f:d9:59:11:ba:c1:10:d9:86:f9:a1:
a5:73:28:d7:fd:78:00:41:4b:33:ce:05:b9:4d:34:
89:10:de:61:c6:79:3d:a7:98:3a:12:30:26:c7:12:
89:a2:2d:b4:d7:db:f3:b5:1a:d0:ad:59:6e:bf:d1:
e6:57:07:29:a7:47:44:cf:10:fe:dd:c3:bf:47:53:
b0:b6:03:f5:63:03:06:9f:03:72:42:37:89:fb:73:
d2:05:24:ed:18:a9:82:11:da:e3:25:d6:e0:8b:2e:
99:a1:5a:67:d5:dc:66:ce:1e:b2:53:7f:39:84:9f:
5a:46:83:ff:4c:e5:4e:bd:1e:03:6e:9a:1b:c9:a0:
6c:5b:00:51:fe:18:87:da:97:b4:9f:42:7e:8c:51:
00:12:dc:48:6f:57:d1:95:34:93:85:66:14:a9:f0:
17:9d:08:aa:f2:9e:a8:e4:ba:f4:98:28:3f:33:1b:
43:c8:9c:66:5f:4e:a4:ec:9c:e0:35:9a:11:47:20:
c0:ff:ca:86:4b:fd:6e:0c:b4:b0:9b:06:2e:19:c6:
89:d9:43:15:e3:64:32:91:ab:e1:94:b1:d1:bf:c0:
d6:4a:5e:04:b6:74:68:e0:51:99:e1:99:bf:99:4d:
7e:97:26:de:60:70:2b:c9:3f:16:69:f7:3e:c8:7e:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AA:DE:AE:FA:26:13:99:9B:42:E3:A4:04:9A:47:CC:88:51:C7:96
X509v3 Authority Key Identifier:
keyid:7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:21:75:4f:09:eb:98:67:a0:0c:82:a2:24:e0:5d:b8:31:02:
b5:9b:e0:89:4b:5b:fb:34:66:4c:7a:b4:83:c2:d2:aa:c5:30:
f1:1c:15:fc:d4:9d:83:85:69:b4:64:49:67:b6:32:50:6c:ac:
9a:32:65:d2:0a:85:39:0d:1f:0a:4e:63:13:5d:20:24:c4:31:
88:cf:80:71:b4:d4:88:40:96:d7:97:f5:86:1e:7d:b6:76:cb:
51:79:1f:33:3e:b4:51:f6:24:00:e8:39:45:7a:35:9f:b4:fb:
90:8d:43:dd:38:2b:1c:b2:29:bd:f6:bf:ee:eb:7c:67:1c:52:
e2:c2:10:69:51:59:89:b2:82:11:69:a2:ee:b9:d3:c5:6c:1b:
cb:eb:7b:1b:21:05:9f:ad:05:f1:5b:f2:8e:e8:29:b2:b8:16:
97:75:19:35:7d:bd:65:ac:3e:01:a2:39:05:9d:b1:47:95:de:
91:29:d3:a9:69:71:d6:fa:fa:9a:12:83:8c:2f:6e:60:b6:5c:
b0:94:f1:e3:50:aa:c4:00:46:e5:83:7b:a0:8e:65:f3:d3:22:
b8:33:e1:66:d3:c2:4f:35:28:e7:1e:c8:24:92:c2:34:ac:6f:
59:9b:50:81:58:d3:53:e5:64:1b:3f:44:fa:7e:ab:49:4a:60:
38:9a:4e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:06 2025 by rpki-client