
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
File: seWdsb2vITytIQJfd4-slhj9TpE.mft (raw, json)
Hash identifier: SkmCVt1yLeVnO200+a4FYIjVPIM2FsnlhZLz+N2csrs=
Subject key identifier: B2:CE:1F:B0:36:5C:CE:22:10:E7:51:88:92:65:16:34:02:81:31:43
Authority key identifier: B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
Certificate issuer: /CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Certificate serial: 019847E53C6A40C197647834AE2C729911E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
Manifest number: 05B5
Signing time: Sat 26 Jul 2025 18:01:02 +0000
Manifest this update: Sat 26 Jul 2025 18:01:02 +0000
Manifest next update: Sun 27 Jul 2025 18:01:02 +0000
Files and hashes: 1: Y6XguoASkuj117zapWikDdhsOwE.roa (hash: cYRIxVqFr0BZZuT1yz+/1pm1CRjn1QkJKZ6Frd8lRoI=)
2: rJqP0FlZEZ4nTdC9T0nsIw-r0R4.roa (hash: 0/AMhBxslSHnkSz/7atutBB8j75xjJ93LSUDUChOOQk=)
3: seWdsb2vITytIQJfd4-slhj9TpE.crl (hash: PWjuszqUeODappS/XBbGEcqFk2the8SLtBJJR0OEj60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:3c:6a:40:c1:97:64:78:34:ae:2c:72:99:11:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e59db1bdaf213cad21025f778fac9618fd4e91
Validity
Not Before: Jul 26 18:01:02 2025 GMT
Not After : Jul 27 18:01:02 2025 GMT
Subject: CN=b2ce1fb0365cce2210e751889265163402813143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:09:76:2e:72:e9:5a:3e:bb:06:1d:d6:89:c4:
07:56:a5:64:8d:70:da:a4:96:ab:87:98:59:60:d8:
b5:9c:a2:ee:0a:4c:e0:af:ce:d8:68:a4:e0:b3:15:
77:0c:b5:8b:47:a0:95:03:0b:11:d9:bc:56:80:5f:
2d:54:ec:e2:db:ff:06:0a:ad:3c:35:74:8e:db:50:
21:dd:7d:fb:3d:62:f0:c0:90:79:e4:c2:30:ce:9e:
a6:03:ea:f6:bc:79:33:ca:00:2c:7c:d2:fc:8a:d4:
8a:08:c1:09:62:5f:cc:a1:d4:70:64:c0:d3:87:bb:
08:7c:c7:1f:1c:b9:15:86:4d:53:65:25:00:66:c5:
e6:31:07:1e:9c:36:85:d8:c5:b9:b9:fa:72:73:3a:
43:f4:eb:e3:56:b1:bf:dd:39:fd:31:c7:61:14:84:
cf:d7:0f:26:09:98:44:13:9c:bc:e9:d1:39:62:7b:
2f:67:cd:66:93:57:66:d8:35:0b:a6:c5:60:17:ba:
18:65:2d:d6:51:d1:01:ba:8f:3d:46:63:2f:2b:8a:
a2:02:00:ea:c3:1b:0e:e4:49:6c:7e:94:e3:11:14:
fd:99:16:f5:14:8c:c9:e0:f5:87:07:d4:f9:f6:d0:
d0:32:6c:78:eb:f4:21:c9:6f:a4:ee:51:5e:b4:2d:
ed:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CE:1F:B0:36:5C:CE:22:10:E7:51:88:92:65:16:34:02:81:31:43
X509v3 Authority Key Identifier:
keyid:B1:E5:9D:B1:BD:AF:21:3C:AD:21:02:5F:77:8F:AC:96:18:FD:4E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seWdsb2vITytIQJfd4-slhj9TpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6725f8-9ab9-4102-83d3-bc49291b4aaa/1/seWdsb2vITytIQJfd4-slhj9TpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:4e:66:42:13:1b:19:08:87:a9:16:ae:14:1a:7b:b3:8c:65:
53:bd:74:59:35:63:53:92:df:40:19:b7:58:a6:f5:7c:e7:2a:
cf:68:bc:a4:84:3c:fe:d3:3a:d4:4d:88:8e:55:92:d8:cf:c1:
fe:fb:12:3e:12:48:d6:97:2d:3e:9e:5d:0e:77:4f:bd:0d:db:
37:33:ec:6d:dc:8f:d7:61:d1:d3:5b:28:1b:83:d9:ee:e5:82:
7e:26:bc:ef:ad:52:a0:39:f3:a4:45:1c:e4:2c:af:98:d3:96:
c0:dd:fd:31:3e:89:17:71:12:be:33:4d:11:a2:58:77:2f:d3:
55:59:5e:06:93:cc:05:c9:8d:f4:e0:61:c8:bf:b4:57:a5:1b:
a8:71:2e:72:c7:d3:35:d6:0d:d5:d3:9d:94:b9:a8:33:67:8e:
6b:88:88:60:0c:d4:a4:ad:b6:a4:6b:9f:a5:0b:df:89:cf:9e:
cc:8c:76:74:2e:3d:07:7c:a1:5a:0d:8d:ac:0f:b5:70:8f:44:
22:56:73:39:f5:cb:28:8d:60:0f:91:01:65:c8:ac:12:76:78:
79:76:36:d3:74:23:e6:f0:90:e8:30:b6:5d:36:c1:08:29:f9:
4c:cb:c8:cd:60:b5:e2:38:63:aa:aa:54:70:1e:03:69:93:e8:
55:06:c9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:34:35 2025 by rpki-client