Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
File: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft (raw, json)
Hash identifier: UbEtWjRdfsJGuFHM0JETgufRh3s1pTXB4isrx8yQSkc=
Subject key identifier: 79:20:3F:FC:55:61:41:8F:2E:7E:7B:9C:21:06:2E:4D:54:B3:4C:C4
Authority key identifier: 49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
Certificate issuer: /CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Certificate serial: 019A71EE6E8DC62574F10FE7AAF3F03A6471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
Manifest number: 02C7
Signing time: Tue 11 Nov 2025 08:00:42 +0000
Manifest this update: Tue 11 Nov 2025 08:00:42 +0000
Manifest next update: Wed 12 Nov 2025 08:00:42 +0000
Files and hashes: 1: 2VOoNC3U3dbfOvp8BLzsJ1f-ifE.roa (hash: /4n1vWOP9xioYbfhWLfqMCZdtH551Gxmhk/RZPxKlZ0=)
2: 75LTo_jTlCg81UcwDjwfJUQMDKk.roa (hash: EkR0b+zKTp/aZ94o/SjZ2ZZg+QA0fvdyyS6BFZkQ6d8=)
3: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl (hash: 6zrUbnGrO1nxir9tk1CoIaPEbB97oSzwzdC7u4tPQNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6e:8d:c6:25:74:f1:0f:e7:aa:f3:f0:3a:64:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Validity
Not Before: Nov 11 08:00:42 2025 GMT
Not After : Nov 12 08:00:42 2025 GMT
Subject: CN=79203ffc5561418f2e7e7b9c21062e4d54b34cc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5e:41:89:f0:36:90:24:5f:74:98:45:c2:74:
9c:42:b9:e2:9a:f6:f4:f9:bc:ab:6a:4e:f1:08:d5:
9d:e8:1b:28:2f:b0:3b:6f:14:f0:19:42:fc:5a:af:
af:e0:79:de:e0:37:09:f3:37:5b:82:5a:78:3a:85:
29:e1:48:98:41:df:d0:63:9d:37:9e:6c:da:7a:06:
1e:d5:f7:b2:4e:6b:c3:bd:28:ab:01:c3:57:39:b6:
52:a6:66:d4:6b:53:ee:25:29:4d:1c:85:16:bd:84:
ac:66:c5:38:59:a8:ac:bb:57:b1:00:6b:f5:55:d7:
8f:72:61:c6:cb:df:49:3f:58:9d:6d:00:e1:cc:b7:
6a:85:1d:87:6d:57:68:dd:43:d0:3d:3c:ae:55:2c:
3b:47:d8:97:0c:f1:bd:dd:f6:d4:04:8b:36:28:57:
eb:d9:b2:fe:81:6e:ad:a4:60:df:41:54:11:6d:bc:
f1:a9:4f:57:ea:67:6c:a3:c5:30:d9:26:58:0d:9b:
02:85:64:44:4e:f8:59:c0:af:e5:69:25:ac:ae:ac:
3c:0d:37:d3:b1:1a:fb:19:7d:47:3b:4f:4a:a3:bf:
09:58:b7:af:ce:4f:71:6c:ad:d9:bd:27:2b:b1:2c:
80:4b:e3:98:00:94:39:f9:f8:3a:4d:cd:ea:6a:b7:
3c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:20:3F:FC:55:61:41:8F:2E:7E:7B:9C:21:06:2E:4D:54:B3:4C:C4
X509v3 Authority Key Identifier:
keyid:49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:73:da:ec:50:f2:74:01:0f:f9:54:ee:b5:55:aa:ba:3a:e2:
de:3e:24:b5:73:ec:5f:27:1d:7b:65:90:bc:48:86:a3:66:82:
9d:1f:7c:bc:20:20:8a:c1:a7:7b:de:da:d0:f9:1b:b7:cc:65:
42:a3:6e:b8:94:b4:e5:2a:e3:9a:1a:73:54:5f:cd:eb:18:0d:
f1:cb:d5:90:60:1d:0d:d4:e3:2c:1b:62:c5:b4:12:e8:c8:2b:
a7:46:8b:9a:d2:bc:04:5d:21:4a:1d:3f:38:c7:0f:4c:ed:4f:
41:54:a1:88:d0:64:d9:39:97:71:d1:40:42:60:3a:18:b2:1f:
14:a9:7a:49:fa:f1:eb:69:bb:e4:5e:07:fc:f7:27:40:f2:30:
af:e1:01:22:a7:31:25:5b:e1:aa:1b:48:a6:31:36:41:2e:b5:
63:db:5a:ad:5e:24:0f:2c:20:f0:07:f2:9c:c7:39:66:ef:c7:
73:00:37:f0:2e:b9:82:53:ba:fd:a6:5f:98:5a:f6:84:8f:3f:
fe:72:cd:55:6b:f9:4a:e9:78:e7:3a:6d:6c:a0:39:69:11:8d:
03:6e:d8:2b:d2:a3:da:27:b7:45:78:e7:a3:6c:ec:85:be:21:
3a:ab:80:18:d1:93:fb:0f:21:12:a6:88:91:49:d1:0b:bb:7c:
c2:0f:cd:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7m6NxiV08Q/nqvPwOmRxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTk3NTNiNWQ5OWZjNmM5YmQ4MzViZDZlNGExNTMyMDFj
OWM0NDgwHhcNMjUxMTExMDgwMDQyWhcNMjUxMTEyMDgwMDQyWjAzMTEwLwYDVQQD
Eyg3OTIwM2ZmYzU1NjE0MThmMmU3ZTdiOWMyMTA2MmU0ZDU0YjM0Y2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA015BifA2kCRfdJhFwnScQrnimvb0
+byrak7xCNWd6BsoL7A7bxTwGUL8Wq+v4Hne4DcJ8zdbglp4OoUp4UiYQd/QY503
nmzaegYe1feyTmvDvSirAcNXObZSpmbUa1PuJSlNHIUWvYSsZsU4Waisu1exAGv1
VdePcmHGy99JP1idbQDhzLdqhR2HbVdo3UPQPTyuVSw7R9iXDPG93fbUBIs2KFfr
2bL+gW6tpGDfQVQRbbzxqU9X6mdso8Uw2SZYDZsChWRETvhZwK/laSWsrqw8DTfT
sRr7GX1HO09Ko78JWLevzk9xbK3ZvScrsSyAS+OYAJQ5+fg6Tc3qarc8YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHkgP/xVYUGPLn57nCEGLk1Us0zEMB8GA1UdIwQY
MBaAFEnpdTtdmfxsm9g1vW5KFTIBycRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VsMU8xMlpfR3liMkRXOWJrb1ZNZ0hKeEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kOTJjZmMtOTVlOC00OTllLWE2ZmQt
ZjFiNDdiMTJhNzVjLzEvU2VsMU8xMlpfR3liMkRXOWJrb1ZNZ0hKeEVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9kOTJjZmMtOTVlOC00OTllLWE2ZmQtZjFiNDdiMTJhNzVj
LzEvU2VsMU8xMlpfR3liMkRXOWJrb1ZNZ0hKeEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnPa7FDy
dAEP+VTutVWqujri3j4ktXPsXycde2WQvEiGo2aCnR98vCAgisGne97a0Pkbt8xl
QqNuuJS05SrjmhpzVF/N6xgN8cvVkGAdDdTjLBtixbQS6Mgrp0aLmtK8BF0hSh0/
OMcPTO1PQVShiNBk2TmXcdFAQmA6GLIfFKl6Sfrx62m75F4H/PcnQPIwr+EBIqcx
JVvhqhtIpjE2QS61Y9tarV4kDywg8AfynMc5Zu/HcwA38C65glO6/aZfmFr2hI8/
/nLNVWv5Sul45zptbKA5aRGNA27YK9Kj2ie3RXjno2zshb4hOquAGNGT+w8hEqaI
kUnRC7t8wg/Nxw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:29 2025 by rpki-client