Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
File: seUmQF1FF0JHmU_u2y1-XdQHk90.mft (raw, json)
Hash identifier: e/v2W5H0eN/TmrUPlIWiKtzqWDog9ww1PCOP5BaQM6A=
Subject key identifier: 8E:1E:8F:E6:ED:83:C6:CD:35:F2:D9:AB:78:4C:48:3D:78:DF:1E:18
Authority key identifier: B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
Certificate issuer: /CN=b1e526405d45174247994feedb2d7e5dd40793dd
Certificate serial: 019A72937B8F78A3927C81259774F7A4A762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
Manifest number: 156D
Signing time: Tue 11 Nov 2025 11:00:59 +0000
Manifest this update: Tue 11 Nov 2025 11:00:59 +0000
Manifest next update: Wed 12 Nov 2025 11:00:59 +0000
Files and hashes: 1: N0iMw4V3FnCIyfGVT9KTAjAa0V4.roa (hash: ieg3VFvZTZIlfpmG2a/ZhByTEF92xOsm5jd+caG7KwI=)
2: seUmQF1FF0JHmU_u2y1-XdQHk90.crl (hash: 9da0PNBVk6ALdyCqGQDc3ivhm5zzs5KlqRG2E1eDvH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:7b:8f:78:a3:92:7c:81:25:97:74:f7:a4:a7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e526405d45174247994feedb2d7e5dd40793dd
Validity
Not Before: Nov 11 11:00:59 2025 GMT
Not After : Nov 12 11:00:59 2025 GMT
Subject: CN=8e1e8fe6ed83c6cd35f2d9ab784c483d78df1e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:04:43:8f:6f:96:d1:4f:a7:95:1f:84:56:3f:
70:45:e4:76:5e:4f:aa:71:73:84:0d:e1:d2:75:5d:
bf:f1:96:78:9a:2b:b4:8b:e1:87:d4:8c:53:08:c9:
fc:e4:fb:c1:9f:c4:11:53:fa:52:58:8f:90:7a:13:
ad:d3:0a:1b:7c:96:72:4d:bd:0a:3f:91:26:38:36:
1f:e1:ce:88:60:a8:3b:27:dc:26:36:09:b0:2d:e7:
fa:c2:af:0a:26:20:08:c8:b0:e1:10:56:63:d3:5d:
a0:44:48:76:e6:d3:e9:26:80:b7:83:9c:ac:c0:fe:
b4:05:b0:00:9f:b9:84:1f:2b:9b:b3:dd:1b:c2:b1:
92:6d:45:fc:f2:b0:30:92:bc:22:2d:ef:e2:17:40:
8b:f9:66:8a:32:6e:fa:d9:37:45:4b:53:17:d3:b9:
c4:9b:c6:1a:76:af:24:39:a8:58:f9:74:df:17:b5:
a6:db:91:ed:06:2d:fb:75:4b:c2:79:62:30:31:2e:
6c:bd:3c:bb:14:c0:4a:fd:cd:ff:57:f6:36:35:f8:
a8:79:f2:4b:d6:98:09:c5:9d:18:37:72:de:6f:9e:
c9:90:8c:df:38:f4:f1:d2:b2:98:23:f1:89:fe:41:
ef:c3:86:9d:7a:c0:be:67:cb:f0:93:3d:60:e4:1f:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1E:8F:E6:ED:83:C6:CD:35:F2:D9:AB:78:4C:48:3D:78:DF:1E:18
X509v3 Authority Key Identifier:
keyid:B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:41:1e:40:43:0e:e4:5f:49:b1:09:32:2e:e2:ab:27:a3:8f:
9b:3e:10:df:c1:ae:02:03:f2:bf:10:01:97:c2:02:f0:4e:9d:
df:95:40:3e:fd:1c:22:80:fe:04:58:a7:26:2d:97:0b:cc:53:
c1:1a:bd:74:b5:b3:2e:ca:0b:64:34:62:f6:d1:7c:ec:af:05:
8c:64:4a:1e:41:02:08:d7:71:37:36:cc:67:ed:b9:7b:c2:28:
35:9c:15:a8:ac:66:9b:3b:aa:c0:d5:9f:5d:9a:e4:88:bb:e6:
0d:02:42:e3:8e:ab:21:2a:63:09:a1:44:65:9e:85:d1:55:79:
29:be:4b:e4:46:6c:87:e7:24:f6:06:57:98:2b:6c:66:86:9c:
d1:0c:cb:4f:43:6d:f3:54:02:81:ce:87:65:98:2b:c0:91:fa:
1e:8e:c2:7d:d5:f6:f5:5c:b7:13:0b:c8:08:a5:c1:cc:71:1f:
13:24:ad:e3:bc:54:43:14:77:3c:cb:73:e5:25:67:9c:6b:8e:
5d:06:90:28:cf:43:0b:17:75:1a:91:53:34:2f:2b:85:34:07:
69:ff:43:6c:c8:18:a3:d0:61:3d:5f:d4:86:df:46:0a:e9:24:
2c:c6:44:8c:10:1a:18:c2:9c:51:62:31:d7:b2:5d:8f:7a:27:
2f:5b:e4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:13 2025 by rpki-client