Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
File: se1mdqhXWQtjZbdsVYDXD8qNuqY.mft (raw, json)
Hash identifier: C4ggtJ7boW8xylSFIXnFju4D/QrbeLOCoOT5aMQBudY=
Subject key identifier: 6A:2E:4D:EC:AC:09:D8:A6:04:79:0C:F1:94:EC:91:E1:54:BC:75:D0
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Certificate issuer: /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial: 019A71EEC4A867FAF817D4D25876657BFB46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
Manifest number: 0C7A
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: BSc7Lfy8S9yDC-G_k8JPIbogXL8.roa (hash: VQaRc62T55aNNoJmxuELOMwkOtgTlKfCtu9D4IVulL4=)
2: se1mdqhXWQtjZbdsVYDXD8qNuqY.crl (hash: smGOHb2IlEyMczwBmsx05PZb3qnfMStI+qXLkf/iWTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c4:a8:67:fa:f8:17:d4:d2:58:76:65:7b:fb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=6a2e4decac09d8a604790cf194ec91e154bc75d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:1e:cb:7f:1f:e6:4f:2c:78:8a:e4:55:18:
49:ac:e2:5e:3f:b7:06:00:bf:7a:0e:a2:51:9c:6c:
53:90:1c:ca:a4:8f:60:c7:7e:a4:d8:0e:01:bf:26:
52:39:e1:9d:bf:bd:70:cc:80:a7:2b:3e:2f:d2:f6:
ba:ee:21:fb:5f:d0:5b:6d:99:2d:52:5f:71:74:72:
6c:3a:8e:a4:9d:f8:82:de:78:07:47:b4:df:95:4b:
68:c2:86:ad:ea:33:35:d6:45:65:55:e1:4d:ee:c5:
45:78:ab:16:12:51:38:35:ba:23:32:8a:cc:a1:e8:
43:60:98:6c:43:2d:8e:42:45:38:b1:a9:1f:c2:49:
4c:49:a8:59:a2:94:ec:f4:c6:10:5d:27:28:80:17:
44:55:3b:0b:08:3e:2f:76:4d:f0:77:20:d4:64:ed:
c8:90:e6:f9:46:a3:00:68:b5:fb:f9:f0:29:ca:69:
f6:08:92:f9:bc:f0:69:e4:81:92:ed:3a:95:c8:e0:
3b:50:26:fc:1c:87:a4:6a:b4:3b:22:e2:d6:b6:3b:
76:43:08:e2:e8:3c:c2:b3:64:ca:4c:9b:36:73:48:
57:02:80:a6:ec:66:d6:f6:19:f9:69:d5:80:2a:83:
98:76:bd:bb:79:87:ff:c8:38:a5:b8:b5:e2:e5:33:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:2E:4D:EC:AC:09:D8:A6:04:79:0C:F1:94:EC:91:E1:54:BC:75:D0
X509v3 Authority Key Identifier:
keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:13:19:bf:63:92:d4:01:e4:38:0c:a8:eb:99:b4:8a:27:df:
e0:cc:ce:12:3c:37:2f:2f:eb:9b:70:77:bd:a9:b6:52:43:92:
86:cc:d5:c5:f2:67:92:c0:bc:67:7e:15:14:55:89:6c:cb:5a:
1c:b4:1f:c5:63:ed:e5:4f:c0:2e:74:fe:27:08:de:0e:65:be:
91:c9:a0:ee:cf:03:f7:c6:32:f4:5d:5e:b9:ac:3f:6e:16:b3:
c3:99:a9:18:3d:85:c7:6a:bc:73:89:87:5e:8a:4b:a5:40:c1:
93:1c:3b:39:ef:a8:4b:32:d2:92:f5:8c:e1:6e:14:17:13:62:
bc:fd:3b:f7:f8:29:07:62:99:85:8f:bb:aa:79:c4:af:14:13:
22:d9:09:56:28:60:c7:0a:14:b7:0b:63:0a:a6:fb:a4:a4:d1:
5e:74:72:45:e7:45:fe:00:86:e3:f0:9c:40:9a:ad:db:39:f9:
a8:58:d1:f0:22:65:df:15:cb:ec:5b:1b:fd:fd:fe:20:14:e1:
36:01:e8:56:d0:e2:65:41:bd:d4:97:8a:13:85:e2:ff:fd:1f:
b9:32:37:19:ad:87:9a:8a:dc:fe:09:41:8c:41:4d:04:b7:21:
d6:99:10:32:00:51:d2:4a:48:1e:ea:a5:d3:4d:9c:cb:58:91:
c7:47:88:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:03 2025 by rpki-client