Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
File: sEAqOILi-MUlQrB73sCypQ1ZgNs.mft (raw, json)
Hash identifier: zXJEul6FN/V717rDZwDgLSshCHShkF31CFzytnkxfTQ=
Subject key identifier: 07:25:A0:07:0A:9C:DE:D4:2F:AF:8A:DF:44:3C:C6:D8:17:49:90:EC
Authority key identifier: B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
Certificate issuer: /CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Certificate serial: 0199221EB54B29D23877DD2B847F993A5963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
Manifest number: 0F4A
Signing time: Sun 07 Sep 2025 03:01:01 +0000
Manifest this update: Sun 07 Sep 2025 03:01:01 +0000
Manifest next update: Mon 08 Sep 2025 03:01:01 +0000
Files and hashes: 1: sEAqOILi-MUlQrB73sCypQ1ZgNs.crl (hash: Rir1xv2fSJp9BmLO5IOrhc1J6254UkS+tPiVODoJqpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:b5:4b:29:d2:38:77:dd:2b:84:7f:99:3a:59:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Validity
Not Before: Sep 7 03:01:01 2025 GMT
Not After : Sep 8 03:01:01 2025 GMT
Subject: CN=0725a0070a9cded42faf8adf443cc6d8174990ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:68:13:56:26:e2:cb:3e:16:10:5d:77:8e:
29:20:e3:ff:f1:ba:03:86:62:2c:27:cf:4b:46:f5:
93:32:bb:5d:db:ec:ac:68:94:e3:2c:92:f3:33:8d:
97:b1:65:65:a0:3d:a8:0d:54:61:53:3d:7c:60:5b:
a1:6a:ca:48:10:df:44:36:ad:c3:77:f6:bd:b7:26:
77:79:41:52:76:6a:a4:43:43:67:77:16:72:0e:74:
b9:03:30:24:88:cb:2a:9f:57:c8:f3:cd:7c:17:0b:
a1:0b:18:53:ca:62:e1:f5:43:00:b8:3d:ed:dd:e4:
0c:e1:7a:be:c4:57:e4:99:12:55:4e:c2:e9:ac:b2:
94:4f:fe:9b:77:a8:d1:70:fc:da:8b:c1:c6:ad:85:
3e:6f:b5:1e:15:c4:93:f6:1f:e1:5c:91:e3:f0:6c:
59:56:a9:c2:89:81:f5:1c:bc:f6:08:0b:71:38:01:
98:37:0c:95:eb:8c:45:47:49:5a:5a:8f:87:eb:93:
7e:5a:65:0e:68:35:9b:38:7b:df:64:05:71:08:38:
65:5a:a2:92:fd:a5:c1:d2:93:aa:f7:fa:9c:bf:d3:
01:26:25:04:36:ac:d4:0d:04:c7:34:f0:2f:80:a4:
60:8c:11:32:f2:1e:a0:32:26:ac:5e:ea:09:63:b4:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:25:A0:07:0A:9C:DE:D4:2F:AF:8A:DF:44:3C:C6:D8:17:49:90:EC
X509v3 Authority Key Identifier:
keyid:B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:67:06:08:71:f4:61:c7:3b:cc:78:f7:73:b0:b8:3d:ff:1d:
4f:36:65:b0:98:6b:b6:7e:55:7c:1b:f4:60:94:ba:2b:bc:d6:
7e:42:18:ef:72:40:8f:9f:ef:07:a1:58:da:92:6a:35:d2:b9:
cc:05:92:a2:ef:0e:5d:20:92:f7:85:0a:be:fc:d5:f5:da:fc:
d4:00:25:77:c5:a7:18:02:dc:0b:ee:a3:9f:d4:64:c8:22:7f:
fa:ff:16:26:09:70:2d:7d:82:e6:3c:fe:ca:9b:5f:ba:9b:7b:
15:b5:f8:8f:66:79:b9:d5:a8:b8:0d:c6:c2:73:46:30:95:9e:
df:46:8d:1b:c6:0d:14:9b:9d:3a:ef:d2:53:f3:85:98:24:11:
09:ca:21:3a:15:22:29:e6:36:33:a7:42:62:f7:a7:55:5e:c6:
a6:f3:f0:f9:35:02:2d:13:91:fe:01:ef:51:5d:49:1f:db:1c:
0d:c4:a7:d9:58:b1:b1:9e:71:3d:f9:03:ac:d7:24:2e:e9:14:
57:03:58:95:25:23:ba:59:eb:eb:6b:d5:1c:4c:c9:1c:4a:11:
72:a0:c2:9d:bb:12:ef:45:02:95:93:fa:45:4d:f6:75:44:67:
a7:fd:4d:1a:f9:74:86:4a:20:6c:fa:2f:25:a5:ae:39:b5:fd:
8d:0a:46:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:43 2025 by rpki-client