Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
File: SEQEnTlhdqG16ziFSNm-PrPn1lE.mft (raw, json)
Hash identifier: p8I8FEPqZhrnWrvnPjla3A6Nx4+AglG8fO9mEtcGaMs=
Subject key identifier: 74:64:24:F4:A9:2F:BC:BA:5C:32:27:96:54:ED:96:33:7F:2D:CB:04
Authority key identifier: 48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51
Certificate issuer: /CN=4844049d396176a1b5eb388548d9be3eb3e7d651
Certificate serial: 019A72263EE7B72DB04123935344786651A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
Manifest number: 0CEC
Signing time: Tue 11 Nov 2025 09:01:40 +0000
Manifest this update: Tue 11 Nov 2025 09:01:40 +0000
Manifest next update: Wed 12 Nov 2025 09:01:40 +0000
Files and hashes: 1: SEQEnTlhdqG16ziFSNm-PrPn1lE.crl (hash: F53OzwBwkc12Mml3qrY3VH/dvDkPSKIYYnps0F9Sktk=)
2: T5aESWxAVXZQCKU4hKQ7Mbe0-gU.roa (hash: /yZIDrhN4+3klzibXSLP0BAGEXpbbrny28/lcBpDjcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:3e:e7:b7:2d:b0:41:23:93:53:44:78:66:51:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4844049d396176a1b5eb388548d9be3eb3e7d651
Validity
Not Before: Nov 11 09:01:40 2025 GMT
Not After : Nov 12 09:01:40 2025 GMT
Subject: CN=746424f4a92fbcba5c32279654ed96337f2dcb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0a:82:da:e0:02:6e:e5:0a:9b:1f:4a:c1:90:
38:4b:c7:b9:92:0c:7a:d8:76:6e:65:66:ef:aa:9b:
23:8c:37:69:5a:f6:c2:5d:e2:da:6f:68:55:a8:69:
04:55:98:a6:db:e5:ff:18:d2:50:89:e4:75:f9:fc:
05:93:75:5e:9a:72:ac:dc:0b:50:47:4e:c9:3e:cf:
e7:b4:d0:cc:39:b7:d7:8a:be:a0:94:77:ae:6d:3d:
38:6c:e6:a6:6c:25:e0:ed:d5:b1:47:2c:35:2a:3b:
12:2f:b1:5c:55:b7:a7:dd:06:f6:03:bf:12:c7:ae:
35:21:65:74:99:6f:ee:58:a6:16:f8:c4:d2:d9:10:
ee:19:f4:46:13:6b:56:93:1d:4c:c8:9a:67:51:ff:
3f:98:b1:e6:fd:26:d7:53:e1:6a:1b:03:3a:15:3c:
aa:c9:f3:61:0c:36:1c:91:22:6d:b0:77:60:5a:ac:
8d:f7:84:aa:d5:2f:27:49:06:d5:57:b4:b7:a2:2f:
81:ca:18:c2:a5:de:a9:c5:64:0e:6b:b9:05:25:41:
69:8d:9e:97:10:71:2d:9a:67:a5:97:d9:6f:37:aa:
cb:40:59:69:f5:5b:a4:da:ed:de:f2:06:ce:64:0d:
df:cc:81:ce:76:39:f0:c9:99:a4:27:67:45:e2:55:
33:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:64:24:F4:A9:2F:BC:BA:5C:32:27:96:54:ED:96:33:7F:2D:CB:04
X509v3 Authority Key Identifier:
keyid:48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:82:46:44:bc:b4:76:8b:b2:9d:ff:ca:1a:f9:a2:94:82:7f:
0a:d7:03:ed:2d:42:82:17:dd:09:a6:a3:8d:3f:b0:cc:6d:7e:
bb:6f:cc:57:0e:a4:db:07:73:5b:a1:fa:cf:bf:70:3a:54:a7:
97:f5:bc:be:16:30:ed:60:db:21:d6:c2:72:9b:3d:2b:64:2f:
4d:1d:9b:38:76:e7:e8:8c:dd:30:48:b0:e3:38:d4:3e:4f:69:
ab:2f:c9:59:2c:be:e9:a0:35:59:3b:86:72:ae:d3:db:3e:13:
ea:bb:58:78:96:32:d4:28:b3:ef:1a:1e:5d:a6:9b:7c:8d:f1:
9f:5b:c3:f5:cd:5a:b1:5c:17:44:ee:17:1c:9a:8d:0d:8d:f6:
be:d0:c8:33:df:fb:08:23:23:8f:da:72:25:c9:93:05:ba:e1:
86:2d:19:9b:20:0c:bb:9a:41:68:4a:8c:a6:fa:3b:46:35:09:
ec:98:4f:c5:d5:92:1d:69:a0:38:36:76:47:a6:0a:41:75:e8:
03:7e:ac:b4:22:99:04:ae:54:2b:7f:59:ca:4a:a1:33:11:f1:
8b:da:b0:a7:c3:77:b4:d6:0b:d2:1b:b4:77:0e:05:45:f8:9e:
6f:96:34:7a:ec:6c:01:e9:d7:53:cc:b8:ea:43:41:2b:7b:d0:
41:69:4b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:07 2025 by rpki-client