Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
File: se1mdqhXWQtjZbdsVYDXD8qNuqY.mft (raw, json)
Hash identifier: iD0601xQbtL8+IduiRQb7kK/+ctatLS3yeZzUKhBrOU=
Subject key identifier: FD:FC:B5:6B:0B:51:30:5B:1A:8D:4C:E9:8F:70:62:68:4B:74:7B:44
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Certificate issuer: /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial: 01974CA0329234F5B28230D425F6E909204F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
Manifest number: 0AD9
Signing time: Sat 07 Jun 2025 23:00:56 +0000
Manifest this update: Sat 07 Jun 2025 23:00:56 +0000
Manifest next update: Sun 08 Jun 2025 23:00:56 +0000
Files and hashes: 1: BSc7Lfy8S9yDC-G_k8JPIbogXL8.roa (hash: VQaRc62T55aNNoJmxuELOMwkOtgTlKfCtu9D4IVulL4=)
2: se1mdqhXWQtjZbdsVYDXD8qNuqY.crl (hash: zz4RWqxqQl3xC+I/mrZ9h0DQcIFSrMLfa5KmQuJaKbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:32:92:34:f5:b2:82:30:d4:25:f6:e9:09:20:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Validity
Not Before: Jun 7 23:00:56 2025 GMT
Not After : Jun 8 23:00:56 2025 GMT
Subject: CN=fdfcb56b0b51305b1a8d4ce98f7062684b747b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3e:37:69:1c:17:9e:33:30:84:af:aa:4a:19:
c5:d0:06:fc:ff:76:12:eb:50:35:51:d2:66:26:51:
26:19:82:f9:1a:7e:11:12:91:80:74:a6:d2:ef:ba:
33:6e:dc:ef:8d:2c:96:57:56:3a:aa:3c:4e:18:1c:
03:ef:85:75:3c:6b:ff:51:a2:f4:f3:9c:4f:5f:82:
ae:b2:cb:0c:c8:dc:c6:3d:12:6a:4b:03:b8:20:50:
fb:4b:bc:2d:84:54:e8:c5:76:1e:0e:f7:d0:8f:0d:
e4:e8:61:bb:99:30:97:bc:b9:d2:d0:66:a2:8d:dc:
7c:fd:eb:1b:6c:21:08:9d:f8:90:4e:4b:c4:ef:c4:
db:fc:dd:b2:fc:c8:0f:32:d6:db:0e:6b:6b:8b:31:
27:2d:40:44:6b:db:43:23:a0:72:55:c7:56:a7:48:
88:36:da:1d:fe:83:72:78:07:e3:21:24:1b:05:77:
09:7d:d1:cb:42:4f:ba:54:96:ca:96:2d:1a:14:c4:
0d:c7:28:c0:47:c1:ee:62:9d:e5:76:14:1f:36:e9:
1e:42:39:44:3d:1a:49:e9:30:5e:17:3f:a1:9e:2a:
4b:94:36:7d:40:f0:b1:6a:f5:f1:4c:b4:6c:ec:56:
cb:e6:d2:35:b8:0e:3e:69:10:e8:d4:a9:9d:01:7c:
a4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FC:B5:6B:0B:51:30:5B:1A:8D:4C:E9:8F:70:62:68:4B:74:7B:44
X509v3 Authority Key Identifier:
keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6b:dc:2a:d6:1a:54:a3:fc:6b:cf:14:b2:9b:ed:75:19:0b:
d3:2b:dd:ce:de:b1:b6:63:58:fc:ee:69:dc:ec:76:f9:9a:49:
4e:84:90:9e:80:93:d6:f3:b5:a9:46:78:2d:2e:7c:fc:e3:ad:
76:b5:12:75:ab:56:97:cc:41:3e:1d:11:e8:67:e6:d6:e5:a9:
80:24:c3:e4:bd:e9:cc:ac:c7:6c:5e:b3:31:13:60:c3:08:5f:
e1:85:94:e7:29:4a:92:22:19:78:13:e2:12:82:dc:57:6f:1b:
4f:9f:b4:ba:2b:4e:fa:a7:66:75:c4:76:4f:56:37:0d:b4:e4:
70:91:8e:e4:b5:b1:c7:1f:63:bd:33:4b:6a:bf:de:59:39:41:
84:84:d5:d0:f6:55:26:51:d5:6c:6f:d2:b4:79:bb:fe:6c:54:
dc:86:80:f0:62:b9:61:0f:86:40:b0:b1:af:10:41:f7:48:b2:
2f:bb:86:ab:8f:98:4c:3d:2b:1c:13:eb:5c:f2:8d:80:1f:73:
27:61:ef:0a:c7:cd:ce:a6:50:de:7f:3d:2c:b6:69:0f:17:30:
0c:93:e6:5a:9e:e4:ae:97:46:d9:61:28:8a:dd:c5:8b:90:de:
c2:43:ea:b8:14:ef:d6:02:00:ed:34:6e:6d:64:4d:e9:fe:b3:
0d:ff:04:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMoDKSNPWygjDUJfbpCSBPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZWQ2Njc2YTg1NzU5MGI2MzY1Yjc2YzU1ODBkNzBmY2E4
ZGJhYTYwHhcNMjUwNjA3MjMwMDU2WhcNMjUwNjA4MjMwMDU2WjAzMTEwLwYDVQQD
EyhmZGZjYjU2YjBiNTEzMDViMWE4ZDRjZTk4ZjcwNjI2ODRiNzQ3YjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T43aRwXnjMwhK+qShnF0Ab8/3YS
61A1UdJmJlEmGYL5Gn4REpGAdKbS77ozbtzvjSyWV1Y6qjxOGBwD74V1PGv/UaL0
85xPX4KusssMyNzGPRJqSwO4IFD7S7wthFToxXYeDvfQjw3k6GG7mTCXvLnS0Gai
jdx8/esbbCEInfiQTkvE78Tb/N2y/MgPMtbbDmtrizEnLUBEa9tDI6ByVcdWp0iI
Ntod/oNyeAfjISQbBXcJfdHLQk+6VJbKli0aFMQNxyjAR8HuYp3ldhQfNukeQjlE
PRpJ6TBeFz+hnipLlDZ9QPCxavXxTLRs7FbL5tI1uA4+aRDo1KmdAXykiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP38tWsLUTBbGo1M6Y9wYmhLdHtEMB8GA1UdIwQY
MBaAFLHtZnaoV1kLY2W3bFWA1w/KjbqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2UxbWRxaFhXUXRqWmJkc1ZZRFhEOHFOdXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yNWI2YjUtMjhkNy00Njk1LWI0ZGUt
OGJkZjI5MWQ5M2QxLzEvc2UxbWRxaFhXUXRqWmJkc1ZZRFhEOHFOdXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yNWI2YjUtMjhkNy00Njk1LWI0ZGUtOGJkZjI5MWQ5M2Qx
LzEvc2UxbWRxaFhXUXRqWmJkc1ZZRFhEOHFOdXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2vcKtYa
VKP8a88UspvtdRkL0yvdzt6xtmNY/O5p3Ox2+ZpJToSQnoCT1vO1qUZ4LS58/OOt
drUSdatWl8xBPh0R6Gfm1uWpgCTD5L3pzKzHbF6zMRNgwwhf4YWU5ylKkiIZeBPi
EoLcV28bT5+0uitO+qdmdcR2T1Y3DbTkcJGO5LWxxx9jvTNLar/eWTlBhITV0PZV
JlHVbG/StHm7/mxU3IaA8GK5YQ+GQLCxrxBB90iyL7uGq4+YTD0rHBPrXPKNgB9z
J2HvCsfNzqZQ3n89LLZpDxcwDJPmWp7krpdG2WEoit3Fi5DewkPquBTv1gIA7TRu
bWRN6f6zDf8Eyw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:14:39 2025 by rpki-client