Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
File: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft (raw, json)
Hash identifier: yd9VhnNTGvrJuLIfSANymE1Kl0767S90da/n8mYNewg=
Subject key identifier: 59:33:C8:93:E4:38:91:63:ED:8B:5D:BD:56:92:A3:11:12:DF:4E:5F
Authority key identifier: 49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
Certificate issuer: /CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Certificate serial: 019923D60180E77E69E82C1A56608DFEC9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
Manifest number: 021A
Signing time: Sun 07 Sep 2025 11:00:51 +0000
Manifest this update: Sun 07 Sep 2025 11:00:51 +0000
Manifest next update: Mon 08 Sep 2025 11:00:51 +0000
Files and hashes: 1: 2VOoNC3U3dbfOvp8BLzsJ1f-ifE.roa (hash: /4n1vWOP9xioYbfhWLfqMCZdtH551Gxmhk/RZPxKlZ0=)
2: 75LTo_jTlCg81UcwDjwfJUQMDKk.roa (hash: EkR0b+zKTp/aZ94o/SjZ2ZZg+QA0fvdyyS6BFZkQ6d8=)
3: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl (hash: vinynaNXYSUKoVklYXqvQnaMaKz9ritLLWTUJovKJUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:01:80:e7:7e:69:e8:2c:1a:56:60:8d:fe:c9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Validity
Not Before: Sep 7 11:00:51 2025 GMT
Not After : Sep 8 11:00:51 2025 GMT
Subject: CN=5933c893e4389163ed8b5dbd5692a31112df4e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:5b:97:c9:4c:27:26:96:1c:68:0e:5b:34:
bd:0e:40:1a:fd:31:80:d9:e2:ff:f6:53:f7:69:6c:
4b:23:81:a4:63:dc:74:54:fc:78:89:80:bf:c3:80:
bf:9c:12:5f:74:7a:6f:1f:d7:66:6d:00:6e:86:11:
42:5f:be:cc:66:d7:fc:ab:64:5a:b2:a3:8f:32:a3:
db:db:3f:b1:aa:a5:c6:0f:e4:60:c7:16:f8:42:9d:
33:9b:d3:10:47:31:19:87:86:1f:66:93:1d:8c:86:
e4:b7:e3:3d:12:f4:57:5f:07:ee:df:f3:51:27:ee:
07:cb:2f:ad:55:38:46:96:f4:8b:3d:9d:35:ea:64:
06:b4:24:eb:f7:a7:2e:08:1f:81:e5:2a:32:a0:b5:
f3:30:e8:10:4e:52:ce:65:e8:fd:f8:9e:56:be:d2:
0f:81:3c:56:16:8d:28:03:96:af:fa:f3:74:cf:20:
1a:f2:de:72:7c:da:21:f0:a9:d4:2b:f9:2e:5c:45:
7b:27:dd:84:56:0c:50:3b:20:cc:75:0b:4b:3b:ff:
c6:d6:ea:19:41:e0:f0:21:d7:2f:8a:99:e1:4c:e6:
4e:a9:c3:fa:36:98:29:fe:18:b3:f5:1f:c0:0b:48:
c4:b1:b4:2a:af:9a:6d:e7:e2:dc:d2:cb:30:48:c6:
6d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:33:C8:93:E4:38:91:63:ED:8B:5D:BD:56:92:A3:11:12:DF:4E:5F
X509v3 Authority Key Identifier:
keyid:49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:48:e8:1c:34:11:bc:e2:b5:03:d2:b4:75:b9:28:b1:30:11:
09:83:b3:7b:63:49:aa:36:1c:ae:65:50:e7:23:cd:ae:fe:02:
13:0b:f9:92:2b:ef:ef:6f:cf:ff:c7:3f:40:c0:e9:53:a7:31:
02:27:7b:35:aa:bc:dd:ae:0f:83:97:54:48:c2:ec:a3:6d:54:
3e:66:dd:d8:65:52:3b:a3:bf:92:a3:e4:d3:95:2e:26:83:57:
49:68:f1:7a:7b:9d:f8:f7:83:0e:fc:68:1d:0f:90:3f:0e:54:
dd:8b:41:31:c4:cf:6b:0a:fd:fa:25:94:71:58:e6:97:3a:ac:
c7:ef:88:e8:a1:e5:8b:e0:85:ce:c8:1a:d4:26:ef:7a:e5:7d:
b4:8f:98:2e:55:ff:dd:eb:df:45:00:7e:ac:2b:82:11:30:9f:
9e:b5:ed:a9:48:2a:9b:a0:a7:40:85:49:4c:35:9b:e0:9e:74:
57:81:a0:30:fb:72:f8:40:e3:d1:aa:3e:f4:5d:8b:06:f9:bd:
26:a9:d6:72:48:b5:ab:c5:08:ad:c2:d2:aa:06:c2:5a:e9:3e:
37:41:70:5e:50:47:ac:70:cd:c4:fb:b2:98:9c:a3:5f:f8:07:
2f:78:4d:a9:78:98:bc:34:60:bf:19:13:cc:f6:45:10:ca:d4:
ea:50:2d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:45:25 2025 by rpki-client