Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
File: SEhV5wGTloY1rESSrXAqgkjgM-g.mft (raw, json)
Hash identifier: 90pC4zGcTc6EuzNNsWTQrjFjX6l8fnPQ6SRmJQwDDi4=
Subject key identifier: AA:BF:28:11:69:3B:8A:E3:A1:D7:71:E7:EE:A4:1E:0F:EF:C0:A9:33
Authority key identifier: 48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
Certificate issuer: /CN=484855e70193968635ac4492ad702a8248e033e8
Certificate serial: 019854FC643E58899A87778258E89884A035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
Manifest number: 160B
Signing time: Tue 29 Jul 2025 07:01:23 +0000
Manifest this update: Tue 29 Jul 2025 07:01:23 +0000
Manifest next update: Wed 30 Jul 2025 07:01:23 +0000
Files and hashes: 1: QZ0qtYVoe9eTyxZ80lBv-di1FfE.roa (hash: 25XKDnhztQCemAlFiOHm1I7VVswm+flqcSO7FBEPKO4=)
2: SEhV5wGTloY1rESSrXAqgkjgM-g.crl (hash: KcNJTZZAbnv+9YUAgnPpwiLvEdcvfW8tNKTmcVWoGqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fc:64:3e:58:89:9a:87:77:82:58:e8:98:84:a0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=484855e70193968635ac4492ad702a8248e033e8
Validity
Not Before: Jul 29 07:01:23 2025 GMT
Not After : Jul 30 07:01:23 2025 GMT
Subject: CN=aabf2811693b8ae3a1d771e7eea41e0fefc0a933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:cd:01:19:72:69:5a:36:73:d9:ea:30:e1:
10:8d:2e:f8:cd:bc:14:1a:72:b4:e3:8a:73:a9:60:
50:79:c1:0f:1f:82:fb:28:dd:b5:fb:46:e2:3d:1c:
d9:ed:90:3b:72:5a:90:e1:f3:c1:76:68:4f:c4:0a:
77:43:b7:4c:09:98:35:da:20:74:b5:b2:3c:90:ae:
5b:a7:a6:01:ac:b0:e2:b1:90:be:f9:b1:e1:11:84:
2d:93:88:27:b1:d7:83:48:14:f9:e6:b9:d1:09:b8:
70:84:1a:67:bd:a6:70:9d:5e:00:cb:8a:90:a2:7e:
4a:9b:d6:c4:64:c5:c9:a4:2d:d0:7f:07:1a:49:16:
ef:a2:ec:3b:76:c0:e3:7f:f4:5a:61:b7:06:dc:06:
e0:89:5a:ad:e7:bb:32:47:9f:3e:d6:d3:eb:17:91:
57:20:06:cb:c0:bd:98:50:be:03:44:4c:96:af:ae:
10:6d:24:f3:44:1a:37:3c:3e:7d:e3:e1:b7:0f:ed:
40:0f:2d:a0:8b:7c:98:7c:83:45:97:1a:28:91:ac:
9c:de:11:78:70:d2:1f:23:2f:7e:7e:27:89:9c:e2:
aa:f0:7b:81:ec:42:0d:66:7e:dc:d6:dd:f8:2c:03:
f3:b0:a5:97:e1:b2:55:95:7e:b6:dc:75:00:67:f0:
5a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BF:28:11:69:3B:8A:E3:A1:D7:71:E7:EE:A4:1E:0F:EF:C0:A9:33
X509v3 Authority Key Identifier:
keyid:48:48:55:E7:01:93:96:86:35:AC:44:92:AD:70:2A:82:48:E0:33:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEhV5wGTloY1rESSrXAqgkjgM-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a76234-67d3-4831-a8c2-e2c3d32034c4/1/SEhV5wGTloY1rESSrXAqgkjgM-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:15:69:e7:8e:90:07:93:e6:37:01:01:b7:e9:a7:a5:f3:e8:
e2:36:83:7b:f6:3c:3d:76:32:85:17:3a:d2:1e:f2:5c:96:53:
f0:c9:bc:61:90:80:6f:8d:84:a1:cc:8b:9e:d7:b8:a5:77:e3:
bb:98:d5:ed:c2:31:c6:83:fc:05:e0:10:cb:8d:8e:06:00:75:
41:c8:61:fa:ce:53:8d:6c:e5:3a:ed:cc:65:eb:82:31:5c:b8:
4e:04:0f:5f:9e:66:22:73:c3:9f:20:ce:99:42:12:f1:7e:14:
b4:3a:aa:67:0c:b6:39:f7:74:eb:88:51:81:aa:04:2b:0d:1c:
4f:38:48:42:80:d4:04:f6:1f:4d:72:15:07:b1:f0:20:37:1e:
38:d9:bd:a3:d6:1e:37:bb:9b:08:cf:65:37:3f:65:83:46:6a:
dc:49:8e:75:35:0c:72:30:b1:37:1f:e3:fb:f5:89:fc:68:e6:
02:29:49:fc:07:70:eb:e3:22:a1:9f:48:b4:09:d3:cf:a8:fa:
f8:bc:09:92:4e:a9:dd:c5:63:12:57:94:76:7b:83:70:f7:27:
e8:dc:b4:2d:4d:66:8c:76:d8:49:b1:83:02:65:ec:15:17:75:
92:62:29:ab:e3:34:a8:ec:bc:d5:6c:6f:45:4e:8f:9e:eb:c8:
2f:5f:22:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhU/GQ+WImah3eCWOiYhKA1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4NDg1NWU3MDE5Mzk2ODYzNWFjNDQ5MmFkNzAyYTgyNDhl
MDMzZTgwHhcNMjUwNzI5MDcwMTIzWhcNMjUwNzMwMDcwMTIzWjAzMTEwLwYDVQQD
EyhhYWJmMjgxMTY5M2I4YWUzYTFkNzcxZTdlZWE0MWUwZmVmYzBhOTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5XNARlyaVo2c9nqMOEQjS74zbwU
GnK044pzqWBQecEPH4L7KN21+0biPRzZ7ZA7clqQ4fPBdmhPxAp3Q7dMCZg12iB0
tbI8kK5bp6YBrLDisZC++bHhEYQtk4gnsdeDSBT55rnRCbhwhBpnvaZwnV4Ay4qQ
on5Km9bEZMXJpC3QfwcaSRbvouw7dsDjf/RaYbcG3AbgiVqt57syR58+1tPrF5FX
IAbLwL2YUL4DREyWr64QbSTzRBo3PD594+G3D+1ADy2gi3yYfINFlxookayc3hF4
cNIfIy9+fieJnOKq8HuB7EINZn7c1t34LAPzsKWX4bJVlX623HUAZ/BaRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKq/KBFpO4rjoddx5+6kHg/vwKkzMB8GA1UdIwQY
MBaAFEhIVecBk5aGNaxEkq1wKoJI4DPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0VoVjV3R1Rsb1kxckVTU3JYQXFna2pnTS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9hNzYyMzQtNjdkMy00ODMxLWE4YzIt
ZTJjM2QzMjAzNGM0LzEvU0VoVjV3R1Rsb1kxckVTU3JYQXFna2pnTS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9hNzYyMzQtNjdkMy00ODMxLWE4YzItZTJjM2QzMjAzNGM0
LzEvU0VoVjV3R1Rsb1kxckVTU3JYQXFna2pnTS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRVp546Q
B5PmNwEBt+mnpfPo4jaDe/Y8PXYyhRc60h7yXJZT8Mm8YZCAb42EocyLnte4pXfj
u5jV7cIxxoP8BeAQy42OBgB1Qchh+s5TjWzlOu3MZeuCMVy4TgQPX55mInPDnyDO
mUIS8X4UtDqqZwy2Ofd064hRgaoEKw0cTzhIQoDUBPYfTXIVB7HwIDceONm9o9Ye
N7ubCM9lNz9lg0Zq3EmOdTUMcjCxNx/j+/WJ/GjmAilJ/Adw6+MioZ9ItAnTz6j6
+LwJkk6p3cVjEleUdnuDcPcn6Ny0LU1mjHbYSbGDAmXsFRd1kmIpq+M0qOy81Wxv
RU6PnuvIL18iIg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 14:46:47 2025 by rpki-client