Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
File: se4yDfBGSHfVF0XjFCMbVcg7aEU.mft (raw, json)
Hash identifier: mE+zXfQGnxVIjqDafo4TpDV+ZxbzXF1wCQbkJyBCOX4=
Subject key identifier: FD:DD:E0:5C:CC:0F:A6:00:04:F1:EE:48:99:74:D5:F5:09:5F:FD:E4
Authority key identifier: B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45
Certificate issuer: /CN=b1ee320df0464877d51745e314231b55c83b6845
Certificate serial: 019A3A5B51F2DE53921F0AA3E96B98A6063C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
Manifest number: 1695
Signing time: Fri 31 Oct 2025 13:00:54 +0000
Manifest this update: Fri 31 Oct 2025 13:00:54 +0000
Manifest next update: Sat 01 Nov 2025 13:00:54 +0000
Files and hashes: 1: lHJyuYCpT3G00KDqB6KZkqUUgW4.roa (hash: 2GVig2gGYeF+A3GrzHDyzSk+tMsVRojPDP29H+7XUT0=)
2: se4yDfBGSHfVF0XjFCMbVcg7aEU.crl (hash: 2qmcXelX0dkriwPaHKRsOc1JUH6wTsykRJ+jGC4ih0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3a:5b:51:f2:de:53:92:1f:0a:a3:e9:6b:98:a6:06:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ee320df0464877d51745e314231b55c83b6845
Validity
Not Before: Oct 31 13:00:54 2025 GMT
Not After : Nov 1 13:00:54 2025 GMT
Subject: CN=fddde05ccc0fa60004f1ee489974d5f5095ffde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:19:c1:ae:cd:00:58:c3:e3:1f:71:62:dd:e7:
f5:1a:ba:60:8a:cb:67:cc:30:64:5e:a9:e0:23:b5:
3c:7a:72:cb:a1:a1:d4:2a:8a:23:d8:b0:a1:96:4e:
a7:76:98:f7:bf:97:9f:1d:47:19:98:44:7f:48:6c:
f4:9d:36:99:bf:7b:c1:b9:7d:99:e9:47:65:af:93:
bc:ea:41:c4:69:16:7d:c8:e7:71:aa:0c:23:79:9f:
a8:6a:16:ea:97:a6:8a:9f:88:4a:e1:4e:7b:3c:da:
ed:15:a6:cc:d4:24:8e:c9:f3:ed:7e:10:93:ed:e6:
b4:47:e6:63:7e:a4:a9:07:4d:99:0b:46:9d:4c:c6:
7b:25:6c:a7:9a:c4:a0:43:a3:bf:2a:46:e6:38:d3:
f9:4f:ef:84:eb:24:d4:16:79:82:34:49:64:c8:1d:
02:71:9a:36:b2:ee:a7:9f:8a:d1:65:ba:de:dd:af:
5c:92:9b:8b:d4:33:62:af:4b:da:12:1c:1e:5f:5f:
eb:3d:3c:f4:58:a5:1c:68:b1:0b:e2:66:79:c5:27:
d5:f3:7f:3e:4a:60:0b:bc:93:92:75:4f:c2:ee:f1:
1e:72:2e:e0:73:e0:ec:3d:0f:df:77:d7:be:e0:08:
52:3d:a1:61:2f:06:c6:ac:ce:92:5b:45:5d:ac:64:
f7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:DD:E0:5C:CC:0F:A6:00:04:F1:EE:48:99:74:D5:F5:09:5F:FD:E4
X509v3 Authority Key Identifier:
keyid:B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:d0:fb:13:23:48:fa:e6:68:9a:49:e0:61:01:00:4b:76:25:
78:63:fe:b5:f7:34:19:d6:9d:e5:44:b9:70:6a:dd:cc:12:05:
68:dd:ae:3a:be:f8:93:96:6c:c1:79:1f:f6:77:fd:a4:03:cb:
c3:73:dc:4f:77:90:41:2f:dd:fa:47:f0:bc:80:49:23:f1:f0:
b0:8f:14:65:4e:29:6c:c6:a4:0f:a3:84:91:cf:6d:dd:d2:9a:
a5:0f:1e:0e:1a:e7:ef:75:07:4a:21:b9:60:8d:f9:ea:e6:03:
b1:46:64:91:6d:b3:a7:ba:ba:bf:98:59:49:83:5a:e0:7c:9e:
04:2a:c4:a3:12:80:a3:9b:1f:3d:d6:75:11:dd:f3:e8:3a:9d:
06:2e:a7:d7:dd:8d:33:45:48:66:39:fc:9b:53:b8:b7:a5:0f:
90:31:14:09:a9:2e:9c:59:5e:f8:53:96:44:68:49:f4:9e:0d:
8d:dd:14:fe:9a:13:e3:1f:39:92:77:c2:b4:e3:be:63:95:17:
46:e3:f6:40:39:8b:c4:eb:30:67:20:3d:82:45:e1:a1:20:52:
3d:28:12:2d:44:70:29:ca:85:2f:ef:8d:5b:8a:41:b6:03:df:
08:f1:19:c9:f1:26:8a:ff:bb:19:51:d6:eb:8d:3d:d0:89:03:
77:33:df:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZo6W1Hy3lOSHwqj6WuYpgY8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZWUzMjBkZjA0NjQ4NzdkNTE3NDVlMzE0MjMxYjU1Yzgz
YjY4NDUwHhcNMjUxMDMxMTMwMDU0WhcNMjUxMTAxMTMwMDU0WjAzMTEwLwYDVQQD
EyhmZGRkZTA1Y2NjMGZhNjAwMDRmMWVlNDg5OTc0ZDVmNTA5NWZmZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRnBrs0AWMPjH3Fi3ef1Grpgistn
zDBkXqngI7U8enLLoaHUKooj2LChlk6ndpj3v5efHUcZmER/SGz0nTaZv3vBuX2Z
6Udlr5O86kHEaRZ9yOdxqgwjeZ+oahbql6aKn4hK4U57PNrtFabM1CSOyfPtfhCT
7ea0R+ZjfqSpB02ZC0adTMZ7JWynmsSgQ6O/KkbmONP5T++E6yTUFnmCNElkyB0C
cZo2su6nn4rRZbre3a9ckpuL1DNir0vaEhweX1/rPTz0WKUcaLEL4mZ5xSfV838+
SmALvJOSdU/C7vEeci7gc+DsPQ/fd9e+4AhSPaFhLwbGrM6SW0VdrGT3vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3d4FzMD6YABPHuSJl01fUJX/3kMB8GA1UdIwQY
MBaAFLHuMg3wRkh31RdF4xQjG1XIO2hFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2U0eURmQkdTSGZWRjBYakZDTWJWY2c3YUVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wM2I0MDQtMmY2NC00YzdjLWFjNmMt
MjZlYjBjNjI5MGJhLzEvc2U0eURmQkdTSGZWRjBYakZDTWJWY2c3YUVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wM2I0MDQtMmY2NC00YzdjLWFjNmMtMjZlYjBjNjI5MGJh
LzEvc2U0eURmQkdTSGZWRjBYakZDTWJWY2c3YUVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx9D7EyNI
+uZomkngYQEAS3YleGP+tfc0Gdad5US5cGrdzBIFaN2uOr74k5ZswXkf9nf9pAPL
w3PcT3eQQS/d+kfwvIBJI/HwsI8UZU4pbMakD6OEkc9t3dKapQ8eDhrn73UHSiG5
YI356uYDsUZkkW2zp7q6v5hZSYNa4HyeBCrEoxKAo5sfPdZ1Ed3z6DqdBi6n192N
M0VIZjn8m1O4t6UPkDEUCakunFle+FOWRGhJ9J4Njd0U/poT4x85knfCtOO+Y5UX
RuP2QDmLxOswZyA9gkXhoSBSPSgSLURwKcqFL++NW4pBtgPfCPEZyfEmiv+7GVHW
64090IkDdzPf8g==
-----END CERTIFICATE-----
Generated at Fri Oct 31 19:16:38 2025 by rpki-client