Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
File: SeRO7qJladDdvQ6GN_Es9QWk7ek.mft (raw, json)
Hash identifier: Xs/2GzsTNR92qeRSedLmt4p/YjpBKbGDrMYiCKQApvI=
Subject key identifier: 20:10:D2:3A:F6:86:E3:63:E1:51:8C:E9:B2:09:81:BE:A3:CE:50:77
Authority key identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
Certificate issuer: /CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Certificate serial: 0199183FB79CD12EFA31F24499B49F8FB64F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
Manifest number: 1675
Signing time: Fri 05 Sep 2025 05:00:52 +0000
Manifest this update: Fri 05 Sep 2025 05:00:52 +0000
Manifest next update: Sat 06 Sep 2025 05:00:52 +0000
Files and hashes: 1: SeRO7qJladDdvQ6GN_Es9QWk7ek.crl (hash: IRgsWxHqJk0YoQW4wbk2TSPjm0mdIqAgyZJZhRODB+k=)
2: ZLZClTfuDKfBFAb78-Sh9gGUq9o.roa (hash: ZjgvTzOG0NWN+AmJ71kj5d0LbF11Gt0UdOZExqIqebk=)
3: ygmr0LjW6g8O2ji5kesu3ACK874.roa (hash: Fof0/v6mus5tChpoy38UTB0o2Mq7hczl/AM052BO+So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:3f:b7:9c:d1:2e:fa:31:f2:44:99:b4:9f:8f:b6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Validity
Not Before: Sep 5 05:00:52 2025 GMT
Not After : Sep 6 05:00:52 2025 GMT
Subject: CN=2010d23af686e363e1518ce9b20981bea3ce5077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bb:c1:3c:da:1b:93:1e:bc:d6:ce:66:7a:1d:
b1:f4:70:f4:76:e8:cc:7e:07:4a:98:3e:24:0f:37:
f6:7f:a3:4f:76:39:8b:44:68:d2:44:45:3f:fe:ba:
ab:9b:78:d3:63:32:b1:8e:e0:63:57:2d:b5:1a:9c:
2a:36:bd:fe:4e:e3:a4:a2:2e:66:a5:50:9a:dc:56:
1f:08:75:05:93:44:d6:0f:32:e9:f7:6a:56:48:e2:
0d:5a:9d:54:37:e9:91:32:76:b5:f3:15:10:6a:28:
b8:6e:bd:07:7a:d6:78:e0:f4:38:a3:7c:ff:3f:7e:
80:4d:db:2f:dc:72:2c:54:31:d0:3e:47:7a:9d:1e:
a6:8b:80:52:59:4b:70:7a:13:40:44:32:2c:35:c1:
00:1c:27:c3:bc:b1:6f:c7:3f:35:fa:c4:ae:f1:db:
d8:3a:47:21:c2:16:4e:8d:8e:84:dc:c5:d9:99:85:
29:e9:c2:d0:67:a4:fa:44:59:cd:5e:76:7b:f9:ab:
8a:ed:3f:8a:47:cd:6e:1c:e0:78:01:4e:08:b0:88:
db:bf:8e:5a:1a:ad:14:31:2c:9c:99:66:e1:7d:6a:
8b:00:62:52:7e:6a:9f:8a:9d:d6:d5:0a:f9:ec:3a:
4b:40:55:c2:c8:dc:3a:c6:29:3c:2f:67:52:8d:f1:
4b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:10:D2:3A:F6:86:E3:63:E1:51:8C:E9:B2:09:81:BE:A3:CE:50:77
X509v3 Authority Key Identifier:
keyid:49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1a:ba:a4:9c:5a:7a:d9:4b:84:c2:33:a9:2e:32:a4:14:b7:
94:42:17:95:da:e6:4d:d2:4f:82:c5:7a:7d:96:83:1c:5c:17:
4e:02:21:2e:e6:c2:75:52:f4:b2:40:a4:17:c9:db:f8:e4:a0:
43:8a:85:48:96:59:9e:8d:e4:56:b7:03:ca:13:17:b8:03:de:
5c:60:73:e8:7b:d2:35:fb:53:c2:b9:04:bd:f9:8c:60:b1:0f:
00:0f:5a:b7:0d:48:4b:02:e8:54:a0:c5:fb:41:6e:b6:d0:d8:
13:4a:ad:69:fc:f6:e3:5c:78:31:b0:fc:25:40:65:95:b8:d4:
ec:2a:0a:93:7d:26:1f:19:51:41:1d:49:dd:25:dc:59:39:0b:
3e:40:3a:4d:10:8e:ae:c5:cd:9b:ff:34:0f:ab:ba:84:39:9b:
fd:87:da:fa:fe:39:83:ff:95:29:27:ad:db:f9:ff:2a:e4:ae:
84:06:8d:2f:8e:a1:38:8a:f3:2b:dd:93:5c:14:55:96:a2:d9:
fe:ce:82:c6:1a:59:42:15:5b:a1:e5:87:45:db:1d:45:3b:12:
f1:1e:54:82:97:c2:4f:ae:79:fc:02:ac:0d:4d:54:2d:a2:ab:
35:ca:be:fa:20:6c:d0:dc:97:67:60:89:b4:e7:e2:1c:a8:42:
cf:ec:dd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:03:15 2025 by rpki-client