Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
File: SEhV5wGTloY1rESSrXAqgkjgM-g.mft (raw, json)
Hash identifier: BKDH5KNkFxPYXruQnEixFtDCCMTUDaAaUo/j8zrGUxg=
Subject key identifier: EA:C2:2F:F5:1A:3B:30:3F:D8:86:95:27:92:F3:F5:FD:2A:C2:F1:E6
Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
Certificate issuer: /CN=484855e70193968635ac4492ad702a8248e033e8
Certificate serial: 019A71B823FBC94F9FDEB40CC135D439B5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: QZ0qtYVoe9eTyxZ80lBv-di1FfE.roa (hash: 25XKDnhztQCemAlFiOHm1I7VVswm+flqcSO7FBEPKO4=)
2: SEhV5wGTloY1rESSrXAqgkjgM-g.crl (hash: OoSGs5cuYS5Vd8XnWtM6+KZhn3B+rujAszJNioA5paU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:23:fb:c9:4f:9f:de:b4:0c:c1:35:d4:39:b5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484855e70193968635ac4492ad702a8248e033e8
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=eac22ff51a3b303fd886952792f3f5fd2ac2f1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:ad:59:2d:e2:f5:0a:7c:fd:04:c5:ac:ce:
f6:ef:66:4c:f7:1e:0c:93:20:01:ed:43:f7:26:48:
0f:5b:6e:1e:7f:20:74:0f:55:55:28:31:8f:5a:63:
09:35:26:9f:e6:15:1e:41:ef:29:16:74:64:bd:ee:
42:6d:0a:9e:49:ee:e6:7c:69:84:3e:e1:31:c6:05:
b6:4b:b1:d4:85:2a:8d:5e:e8:e4:12:27:c2:ce:9f:
66:6f:8e:0d:31:5d:40:7f:90:e9:d4:b0:d5:35:5a:
72:e0:50:0f:0e:87:e6:77:94:7c:14:dc:c6:4e:fa:
f3:2d:57:6d:bf:47:c4:b7:37:bf:e0:72:d2:e8:d2:
8b:3a:c7:92:7c:32:de:50:4a:4e:06:21:e2:4b:ef:
67:0f:c2:e1:3c:40:8f:11:85:30:28:bb:d0:7d:e6:
15:c7:67:b4:88:55:41:9d:3c:67:c1:b8:ff:7d:9a:
89:9e:17:3e:3b:81:a7:11:7e:54:d0:b8:8b:6e:c4:
7d:6a:24:95:f3:18:a5:8d:ab:07:aa:6a:24:dd:1a:
4c:1b:2e:cd:e0:8e:e6:4b:cc:63:29:3d:7b:8c:c4:
79:bb:ef:5c:26:c1:02:49:2f:89:25:d6:81:77:b8:
02:13:42:b0:de:4e:5b:56:c3:fc:39:df:60:fb:4d:
08:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C2:2F:F5:1A:3B:30:3F:D8:86:95:27:92:F3:F5:FD:2A:C2:F1:E6
X509v3 Authority Key Identifier:
keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:08:55:09:83:e1:5b:48:bb:cb:42:ab:51:cc:2f:d7:b0:71:
92:38:e0:60:f1:3d:9d:c2:e3:70:99:61:88:5a:a3:6c:31:13:
00:f5:7c:8c:aa:49:70:d1:e1:83:fd:66:d5:b9:e6:ab:f6:66:
c2:8e:ed:4e:bd:bd:db:fc:1d:68:dd:80:d3:86:63:53:22:b3:
aa:22:04:8f:15:aa:2a:e8:f0:24:a9:39:c7:31:d2:f9:b6:62:
3d:02:57:de:bc:93:be:cf:6a:74:33:8b:a2:58:3c:1e:eb:4c:
c1:fd:ad:36:67:56:81:58:c0:ca:11:9b:63:d1:87:bc:7e:66:
6b:bf:6f:43:2b:28:81:3d:6d:3d:ef:8e:e2:e2:3a:42:f9:de:
da:38:49:b1:39:09:3e:3e:ed:ef:b7:5a:0f:88:d9:4d:7c:4d:
70:4c:5b:e8:a1:34:56:43:4f:ae:d5:46:1a:bd:b5:6c:2b:6b:
a7:18:98:78:e0:42:a5:43:48:87:1c:5d:f1:69:20:80:d3:fc:
58:86:04:4d:ed:03:49:30:c1:cd:57:9f:9e:4a:44:68:12:4d:
7b:fa:31:5b:3e:68:84:38:50:2c:08:91:1f:07:36:74:9c:d2:
37:dc:9d:a5:9d:8e:3b:96:b5:4c:04:02:0b:22:10:6b:07:9c:
05:3e:70:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:43 2025 by rpki-client