
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft
File: SeuKtOPXneJ90f1pIZbi454aO6M.mft (raw, json)
Hash identifier: 8fs+O93n2MG3QMUrcqGxaYiagqkGopPcBbBoyG4pEBs=
Subject key identifier: 1F:C9:2F:2C:12:60:CA:C6:8C:9C:58:0C:36:9A:1D:DD:C0:92:65:8C
Authority key identifier: 49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3
Certificate issuer: /CN=49eb8ab4e3d79de27dd1fd692196e2e39e1a3ba3
Certificate serial: 019A7293280422210BF41619C92ABDEA46FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft
Manifest number: 1432
Signing time: Tue 11 Nov 2025 11:00:37 +0000
Manifest this update: Tue 11 Nov 2025 11:00:37 +0000
Manifest next update: Wed 12 Nov 2025 11:00:37 +0000
Files and hashes: 1: 4HGP5_Atly362ltpVWnT7X4r6Jo.roa (hash: SfLf19aMSy7qHdL6R0k0eaaiEIAvEDmplX9GloqeBUg=)
2: SeuKtOPXneJ90f1pIZbi454aO6M.crl (hash: DY4TUOMO0ia9argamlpb2UvylqeKQe3nyphfTnBqIWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:28:04:22:21:0b:f4:16:19:c9:2a:bd:ea:46:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49eb8ab4e3d79de27dd1fd692196e2e39e1a3ba3
Validity
Not Before: Nov 11 11:00:37 2025 GMT
Not After : Nov 12 11:00:37 2025 GMT
Subject: CN=1fc92f2c1260cac68c9c580c369a1dddc092658c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:00:43:c5:13:a9:e4:84:28:e8:23:ae:37:e7:
7f:ce:bf:ff:f6:38:a1:dc:85:af:d2:7f:49:8a:90:
96:51:e9:36:bc:8b:34:b3:89:df:5f:90:10:62:f8:
2f:b1:71:1e:b7:6d:9a:63:28:d1:1a:52:a2:ff:73:
1b:20:1c:5e:4c:db:4c:50:4e:b1:78:44:d1:25:24:
24:e3:16:7e:b5:6d:e1:df:22:2f:ba:e0:9a:8b:eb:
2e:4c:1d:31:05:05:ca:70:d6:03:f6:b0:8f:0c:54:
e8:11:17:a9:8c:6a:c9:16:ea:6e:3c:b2:5d:34:ca:
b3:52:b5:69:25:24:27:a9:eb:66:33:0f:3d:d1:0b:
8d:01:37:75:99:9e:bc:51:ed:47:a8:07:06:ae:4e:
5a:b6:b3:09:bc:5b:52:1a:27:9c:82:0a:84:f0:40:
e3:20:05:08:c0:95:76:95:65:ce:0e:8d:55:9a:e7:
ec:84:74:64:49:b5:c4:7a:58:89:22:38:93:94:98:
3c:c4:9a:23:96:f0:b5:3c:59:c9:2d:a8:fb:56:26:
3e:2c:89:6d:f8:a3:ee:5d:42:fc:23:8f:df:bb:c2:
84:d5:72:85:e2:84:4b:a4:9d:5e:a9:07:a7:44:f7:
9a:33:d6:59:63:08:ce:96:b8:ff:a2:6c:b6:9d:10:
72:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C9:2F:2C:12:60:CA:C6:8C:9C:58:0C:36:9A:1D:DD:C0:92:65:8C
X509v3 Authority Key Identifier:
keyid:49:EB:8A:B4:E3:D7:9D:E2:7D:D1:FD:69:21:96:E2:E3:9E:1A:3B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeuKtOPXneJ90f1pIZbi454aO6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/eba226-6766-4c56-9e3e-7b44e0a15ba0/1/SeuKtOPXneJ90f1pIZbi454aO6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:3f:f1:85:11:20:56:ae:16:8f:11:6d:c1:bd:6f:38:53:fb:
9a:5d:a9:96:75:84:2f:4d:65:49:0f:34:c3:4b:d1:0f:28:26:
d9:56:4b:ea:dc:3a:4b:92:5d:a0:ed:54:a5:bc:83:25:58:fd:
db:1b:c0:b9:41:3c:40:2d:1c:bc:69:8b:a7:4b:03:fe:67:af:
7c:cc:15:d6:86:4d:5c:cb:75:88:12:ab:04:e7:93:8c:d7:92:
ea:53:b8:66:32:9f:c3:38:46:bc:fe:4a:d4:c7:aa:8e:02:e4:
e5:a6:73:98:8b:22:5e:9e:71:0e:bd:8f:25:f1:4d:6e:41:64:
70:3d:e4:69:0a:68:3d:83:aa:4d:15:a8:ba:a1:f8:f4:ad:1d:
a3:90:93:1c:15:87:76:d4:70:e2:4d:ae:81:8c:c6:36:c4:96:
b3:c4:5f:19:b4:03:c6:c3:f8:d5:ec:da:89:e4:18:ec:59:97:
3c:98:10:6a:cd:38:6a:4c:18:b2:e1:0c:6e:8c:1d:64:2e:0a:
55:bd:51:50:ea:7d:d1:f5:89:51:17:ed:2a:09:b4:cb:f0:86:
b2:59:ce:7d:bd:24:db:53:4b:42:84:01:a0:64:3a:c5:fe:40:
0e:87:d7:f3:dc:39:b8:a0:fb:aa:ea:87:1f:aa:2d:ae:75:53:
86:45:f2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:19 2025 by rpki-client