Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
File: se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft (raw, json)
Hash identifier: AmASvhsD9GpsSOQh7StHZ2ZNXuQhxLLaCgMFq4KpGRM=
Subject key identifier: 04:A8:F2:12:CA:C1:09:A6:3C:46:C5:1C:AF:BE:19:33:3F:38:7D:59
Authority key identifier: B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
Certificate issuer: /CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
Certificate serial: 019A71B8752DB53212F9DF8AFE82AC7B0E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
Manifest number: 109D
Signing time: Tue 11 Nov 2025 07:01:45 +0000
Manifest this update: Tue 11 Nov 2025 07:01:45 +0000
Manifest next update: Wed 12 Nov 2025 07:01:45 +0000
Files and hashes: 1: se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl (hash: 85aruWl3tMPabsU3ho+VBK2tgo2MhcVQnSf07EBNgsE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:75:2d:b5:32:12:f9:df:8a:fe:82:ac:7b:0e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
Validity
Not Before: Nov 11 07:01:45 2025 GMT
Not After : Nov 12 07:01:45 2025 GMT
Subject: CN=04a8f212cac109a63c46c51cafbe19333f387d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:87:24:db:26:e7:00:ef:19:b9:05:81:c6:
44:3e:09:3e:5f:5e:f9:15:34:81:d6:80:db:ef:79:
81:5e:8e:10:8c:dd:de:f7:4e:a8:f4:49:a4:c9:91:
0a:0a:57:ea:25:a7:04:73:0f:f8:ac:0c:07:9f:e2:
6c:5c:1a:1f:9b:fb:c0:c1:cd:b4:6a:28:60:fe:b4:
6e:31:f7:14:f8:05:72:74:26:47:c8:65:c0:b8:a1:
62:b7:c8:34:af:8b:40:75:97:6e:e3:bb:cb:80:9e:
7e:8a:c2:f7:b6:e2:c6:e9:ff:18:1b:8c:cf:2e:70:
14:03:f6:3c:bc:00:51:30:fb:77:7f:8c:11:06:89:
41:58:a1:84:98:8d:48:92:3c:c7:f3:bb:73:0e:b0:
51:70:60:bf:2e:0c:43:39:90:af:bf:89:d0:df:ab:
33:61:d5:c0:b9:0b:5d:8e:21:e1:2b:96:3d:8f:db:
35:1f:db:86:85:f9:17:e6:2f:f7:36:7a:8d:98:3e:
7a:c6:b1:97:78:08:a9:16:49:5d:2e:7c:ba:ee:0e:
a7:1c:50:82:4e:52:25:92:e6:85:f3:ca:dd:43:af:
a0:12:c6:e1:6f:90:77:54:06:04:92:47:b6:45:d3:
e5:1c:d4:aa:be:3a:58:4f:3a:1f:65:9f:3e:fa:b0:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A8:F2:12:CA:C1:09:A6:3C:46:C5:1C:AF:BE:19:33:3F:38:7D:59
X509v3 Authority Key Identifier:
keyid:B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8c:e1:47:4d:4e:ec:db:c7:94:0d:0a:9a:0a:5f:44:69:2f:
a8:01:46:e4:85:19:b4:a4:60:a0:64:40:f5:66:e9:a1:8c:4a:
a6:c7:08:28:4d:06:d8:64:40:1f:98:03:2a:8f:09:c0:fb:a0:
b5:5e:20:ac:f1:f9:d1:04:23:61:a7:03:b8:14:42:97:02:53:
7e:e3:ac:ac:d2:07:82:03:90:db:61:c0:21:4d:1c:b0:f4:0c:
28:a7:94:ba:1e:f7:cd:2b:a9:0d:14:8d:64:b8:fe:01:8b:c5:
81:89:4e:75:f8:c9:9a:7a:93:e1:b3:03:34:41:80:75:b3:c2:
6c:61:3b:2e:b3:7d:fc:85:2a:91:db:3c:9e:2b:41:4a:8a:4e:
2f:61:d8:1d:99:0b:fc:c5:1b:0e:38:6c:39:3b:21:10:a3:52:
18:39:f6:77:19:83:87:ba:70:5c:c6:be:f0:cf:27:fe:86:4c:
c4:4b:51:b2:ba:9a:7b:3e:34:00:13:e2:04:a0:23:ba:24:39:
6e:e8:25:e5:62:5e:e2:35:cb:eb:68:5b:c4:52:4b:1f:69:72:
00:f5:01:61:0d:e1:4c:88:0e:ce:72:79:2a:d4:f4:46:ca:38:
d3:f5:74:27:88:93:ad:49:51:90:86:66:8f:f3:98:c6:b1:4a:
0b:c0:02:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:41 2025 by rpki-client