Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File: EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier: SXxeCcqSsWeh46KpGRWf8H+lhUw9yDwVbMrJvpFxalE=
Subject key identifier: 87:71:5E:F2:05:A4:55:02:9E:C4:3B:00:B3:E0:1E:89:9F:E2:BB:BA
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial: 019921E7B3E00D1A7E29237272B37B568789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number: 11D7
Signing time: Sun 07 Sep 2025 02:00:56 +0000
Manifest this update: Sun 07 Sep 2025 02:00:56 +0000
Manifest next update: Mon 08 Sep 2025 02:00:56 +0000
Files and hashes: 1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: Ii/ziqNefgv+kl1l6NSWZfWk/ixdvA1bjvIY8+TcjLk=)
2: oKyfOldZLGuN5BcDb6Q-5dX2Wxw.roa (hash: k6gLX9MPlPqi07ed6OW+GaDRLIAiAFCmAJRimOBrPk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:b3:e0:0d:1a:7e:29:23:72:72:b3:7b:56:87:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Validity
Not Before: Sep 7 02:00:56 2025 GMT
Not After : Sep 8 02:00:56 2025 GMT
Subject: CN=87715ef205a455029ec43b00b3e01e899fe2bbba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:63:5c:2b:d9:af:26:fa:0b:4b:2a:ba:8e:
9b:26:67:3f:6f:a4:0d:d8:35:f5:bb:f6:d5:ff:10:
50:35:98:8f:aa:09:b3:d2:a2:4f:48:57:56:f5:30:
d2:1f:ac:26:ed:6b:15:4d:22:38:51:ba:67:28:8c:
a6:13:f2:1f:d0:b6:53:0b:ce:94:4f:42:06:17:d6:
88:a6:7e:b3:08:ce:0b:56:33:fa:d5:2e:5c:c2:50:
32:a6:44:09:71:2a:79:ff:0c:65:1a:77:72:02:ff:
5d:fd:66:63:4a:d9:8c:79:62:49:9b:15:b0:06:5a:
bd:ad:49:ed:c0:28:6c:80:df:dc:aa:52:ce:14:6c:
9f:d4:b0:fd:62:28:4f:56:1b:d3:08:91:3c:0d:4c:
87:b9:00:0a:d5:25:8b:38:d9:e0:97:30:6d:39:4a:
10:2e:19:08:df:64:a7:be:96:87:24:3c:7e:94:90:
53:69:b1:a4:3d:d1:cc:a4:59:54:15:5c:64:8e:b2:
a0:2e:c2:4c:ba:b2:51:2e:c0:4a:a1:8e:57:4c:dd:
48:05:91:da:78:68:1e:6b:ef:4a:0c:8d:2b:a8:79:
83:12:1a:a3:6c:35:d2:e0:52:ab:54:ca:2d:94:9c:
30:1c:52:98:68:94:69:38:33:3b:eb:56:a0:db:97:
d5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:71:5E:F2:05:A4:55:02:9E:C4:3B:00:B3:E0:1E:89:9F:E2:BB:BA
X509v3 Authority Key Identifier:
keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:21:0e:d0:f1:f5:cb:ce:01:ec:8b:95:c7:29:23:da:ae:85:
4d:07:4b:51:43:b8:6c:88:66:8e:a7:7b:cd:8e:89:f7:c8:d4:
77:39:bf:64:84:54:84:89:88:88:ab:ec:b9:8f:bd:21:59:9b:
86:5e:0a:05:76:5f:60:61:ba:20:27:48:d8:b4:1a:f2:05:ed:
61:83:9d:48:ae:ad:bf:05:82:f7:bf:48:76:21:e9:11:58:65:
65:4c:15:af:c4:43:a7:0a:d5:90:fa:e3:5c:1e:ca:9e:12:00:
d3:e3:b4:1e:ae:ba:0e:5a:2a:80:08:95:ba:cb:36:fc:6a:fc:
d4:18:77:54:bd:9f:21:07:4d:4c:b5:ae:29:56:b2:da:0a:20:
aa:e7:91:b7:28:23:1b:95:96:5e:e9:2e:2e:cd:e3:e7:c1:36:
b3:16:f0:4b:74:3b:49:aa:bc:93:3f:a5:e9:ba:73:c2:4a:1d:
cf:1d:e0:5a:c7:2d:d6:26:59:77:5e:86:e1:72:18:f7:61:78:
b6:ef:94:d9:02:11:6b:11:59:f7:fe:94:b8:22:b2:5c:a6:76:
15:13:07:17:7f:fa:70:ac:b6:c6:26:18:74:b0:0c:82:2a:e6:
7e:12:c8:bb:23:13:1e:fd:aa:56:ec:b2:28:01:54:68:9d:b2:
a2:bc:7d:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkh57PgDRp+KSNycrN7VoeJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzQ1YmQzOGQ0YmRjNjhlM2Q3OWRlMDI0NGRmMDZkMmVj
YjY2MDkwHhcNMjUwOTA3MDIwMDU2WhcNMjUwOTA4MDIwMDU2WjAzMTEwLwYDVQQD
Eyg4NzcxNWVmMjA1YTQ1NTAyOWVjNDNiMDBiM2UwMWU4OTlmZTJiYmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2hjXCvZryb6C0squo6bJmc/b6QN
2DX1u/bV/xBQNZiPqgmz0qJPSFdW9TDSH6wm7WsVTSI4UbpnKIymE/If0LZTC86U
T0IGF9aIpn6zCM4LVjP61S5cwlAypkQJcSp5/wxlGndyAv9d/WZjStmMeWJJmxWw
Blq9rUntwChsgN/cqlLOFGyf1LD9YihPVhvTCJE8DUyHuQAK1SWLONnglzBtOUoQ
LhkI32SnvpaHJDx+lJBTabGkPdHMpFlUFVxkjrKgLsJMurJRLsBKoY5XTN1IBZHa
eGgea+9KDI0rqHmDEhqjbDXS4FKrVMotlJwwHFKYaJRpODM761ag25fVlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdxXvIFpFUCnsQ7ALPgHomf4ru6MB8GA1UdIwQY
MBaAFBLEW9ONS9xo49ed4CRN8G0uy2YJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81Y2I1NDQtNTA0Zi00OGJmLWIxMDUt
MjIwMjhhNzg2ZjYwLzEvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS81Y2I1NDQtNTA0Zi00OGJmLWIxMDUtMjIwMjhhNzg2ZjYw
LzEvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSEO0PH1
y84B7IuVxykj2q6FTQdLUUO4bIhmjqd7zY6J98jUdzm/ZIRUhImIiKvsuY+9IVmb
hl4KBXZfYGG6ICdI2LQa8gXtYYOdSK6tvwWC979IdiHpEVhlZUwVr8RDpwrVkPrj
XB7KnhIA0+O0Hq66DloqgAiVuss2/Gr81Bh3VL2fIQdNTLWuKVay2gogqueRtygj
G5WWXukuLs3j58E2sxbwS3Q7Saq8kz+l6bpzwkodzx3gWsct1iZZd16G4XIY92F4
tu+U2QIRaxFZ9/6UuCKyXKZ2FRMHF3/6cKy2xiYYdLAMgirmfhLIuyMTHv2qVuyy
KAFUaJ2yorx9WA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:52:00 2025 by rpki-client