Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
File: SepQocYggnYq_aAH1vyLS9sFdJ8.mft (raw, json)
Hash identifier: IwBZTfawkmXBek8DAZaN+iZgLUrGX8EU50PwemNPzUc=
Subject key identifier: B7:13:1D:B5:64:E1:D2:82:E9:02:B4:00:10:04:30:E6:BA:18:CC:5F
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 019A70A4DA9DB828BDB26BA9222EFEB9EF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:00:43 +0000
Manifest this update: Tue 11 Nov 2025 02:00:43 +0000
Manifest next update: Wed 12 Nov 2025 02:00:43 +0000
Files and hashes: 1: BHvEiTbi4Pq6B9PpmT5f6n87vL4.roa (hash: s+QevCZ3wcDACFh+jWTrJPdapoQkuOB0iQkRIdmgUkk=)
2: Nvgx0NStgiF6lAwa5XAPUa97GUc.roa (hash: HepcNDvL/nGXjv68tFuvUcj3BhJTbTJLihV6JiWEI70=)
3: SepQocYggnYq_aAH1vyLS9sFdJ8.crl (hash: jdd2E0h7aUCI1DSjRl2SeyzPLiYPe5l16QfcowrXSd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:da:9d:b8:28:bd:b2:6b:a9:22:2e:fe:b9:ef:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: Nov 11 02:00:43 2025 GMT
Not After : Nov 12 02:00:43 2025 GMT
Subject: CN=b7131db564e1d282e902b400100430e6ba18cc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:cd:75:df:4f:3a:21:e9:35:70:1a:de:7c:
e6:f0:7b:f9:71:13:76:62:37:23:72:cc:a4:3d:20:
0f:cd:70:92:58:e5:46:21:d9:b5:9c:68:d8:bc:ac:
de:74:92:e5:18:a9:21:a6:34:e3:b0:16:66:7f:fa:
8a:00:2e:ba:cf:b2:e6:6d:fe:b4:12:a1:11:3b:77:
2b:7e:13:23:31:c8:b2:4a:94:25:d8:d9:40:93:c1:
7e:04:b6:5f:30:c9:7d:e0:3a:7d:e9:c0:86:c1:c5:
74:3a:5c:ec:0e:10:86:df:eb:26:0f:fd:44:6f:35:
d2:cc:56:10:db:cf:22:e2:44:58:06:34:b2:36:c1:
55:73:cf:7b:8c:5f:1b:12:4b:7e:26:2b:b7:e6:a1:
37:e2:40:c8:59:00:f1:b5:12:95:5e:b8:d6:b0:56:
c0:cc:29:0d:9f:9f:4c:51:0c:95:75:e1:8f:28:c1:
dd:16:dd:fa:d3:72:ee:e0:9a:20:38:6e:60:c9:2a:
c3:32:81:0e:74:9f:22:5a:b0:04:80:f8:9c:e9:40:
74:a4:dd:f3:ef:37:56:52:00:ce:5a:52:5d:d6:26:
ca:70:b9:49:be:62:29:17:26:53:49:aa:25:b0:68:
ae:a5:f8:aa:d2:9f:87:ea:3b:08:cd:f7:0b:f9:a0:
c9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:13:1D:B5:64:E1:D2:82:E9:02:B4:00:10:04:30:E6:BA:18:CC:5F
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:4e:d1:d9:9c:bd:46:8d:90:33:08:13:98:b4:50:03:18:71:
ca:a6:00:f4:29:f4:6d:95:6f:e6:6a:0f:d7:73:e6:11:0b:e4:
c1:f3:3c:b9:5d:e6:cd:ce:0c:81:69:a9:c8:22:f9:5b:92:2c:
56:6e:1c:97:02:07:cc:e1:b3:41:7b:81:55:7c:2b:91:9a:a0:
8a:7a:49:9d:03:d7:6a:bf:07:72:4a:62:7d:ba:a9:5a:37:c3:
1b:58:aa:d0:de:d0:3b:fc:bf:2a:71:76:51:48:db:cb:b2:31:
64:11:98:e9:30:d6:54:c8:b1:9d:a5:52:98:df:2e:49:ec:b4:
8f:9d:c5:06:d3:89:7a:ff:8c:cb:79:05:75:71:72:82:00:56:
85:5e:b3:6d:5c:77:ed:d3:d1:9d:30:78:41:9f:6a:2d:17:ff:
d0:88:fa:de:81:e5:d4:73:81:71:2f:23:8d:25:10:63:cf:fb:
aa:7e:48:7b:b5:41:fa:2e:8e:db:cb:c4:8b:7a:81:6e:e4:28:
38:af:f0:05:eb:19:96:97:2f:9e:ab:2f:07:4e:42:2f:d4:0f:
e9:5b:ef:2f:77:40:85:3b:02:bd:9c:a0:10:35:a6:98:55:e8:
5e:4a:66:9d:73:55:fb:8d:0a:b3:83:78:37:6a:d8:2e:bf:0d:
d9:0f:60:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:30 2025 by rpki-client