Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
File: P-SE99D_9CD2t3E6k83LDFEAcmc.mft (raw, json)
Hash identifier: roPrCX+d8wq6gsK0pB23UwNr5IME1Y/q5KAyjcL3h4U=
Subject key identifier: D4:57:BE:C0:0E:F0:70:98:7A:AA:E2:6D:87:5D:74:50:49:50:75:8A
Authority key identifier: 3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
Certificate issuer: /CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Certificate serial: 019A26D4BDA8EE5175D615CDB4BABEE8FBAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
Manifest number: 06DF
Signing time: Mon 27 Oct 2025 18:01:07 +0000
Manifest this update: Mon 27 Oct 2025 18:01:07 +0000
Manifest next update: Tue 28 Oct 2025 18:01:07 +0000
Files and hashes: 1: P-SE99D_9CD2t3E6k83LDFEAcmc.crl (hash: GkuHITZ0fkJBp/dk2rMyKq49Rov6LoPfelr+umz49GM=)
2: jpj69C1ImXMr6CPUoeUXJLiCpDU.roa (hash: PqTZZfg3T7FxVQucLl2CplTcjxSHdbI++B7VwzFwuZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:bd:a8:ee:51:75:d6:15:cd:b4:ba:be:e8:fb:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fe484f7d0fff420f6b7713a93cdcb0c51007267
Validity
Not Before: Oct 27 18:01:07 2025 GMT
Not After : Oct 28 18:01:07 2025 GMT
Subject: CN=d457bec00ef070987aaae26d875d74504950758a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c5:f2:00:9a:10:2c:a4:3b:0b:60:06:c0:ee:
6f:cc:eb:9f:ac:5a:31:12:28:1e:8a:f9:03:9d:c0:
4a:20:ce:62:ff:31:a6:91:0c:ce:d6:37:66:68:7c:
32:e7:90:63:50:12:ed:ed:da:0c:24:01:27:c1:32:
12:fd:f6:7a:f7:83:07:3c:b8:29:55:86:2f:94:8b:
6e:f9:01:61:3a:64:46:4d:aa:70:b5:3c:00:37:b0:
38:ce:f2:ea:dd:da:8e:c8:9e:2b:41:dc:8e:ac:8e:
75:e5:5e:50:53:64:35:84:3e:4f:39:04:3d:49:f3:
81:25:44:60:06:a9:20:17:66:55:9a:9e:33:be:b3:
23:82:aa:e0:24:14:e9:8c:0d:e7:8c:63:bb:d9:4b:
9b:6a:53:13:22:ad:5f:5c:93:c0:0c:8f:e2:18:ef:
98:23:e8:ce:23:7b:cc:e8:5d:b1:09:0a:00:83:e3:
41:79:35:0c:5d:12:1b:32:d2:d0:d4:e5:b5:59:6b:
c2:bb:00:73:85:18:05:52:cd:5b:52:db:c7:cf:75:
7b:3b:98:9d:63:1d:b4:ff:01:c4:c8:2e:cc:4b:61:
8d:44:28:a2:03:16:84:ce:71:9c:5f:02:6d:f0:8e:
21:cc:70:7e:55:42:78:63:54:29:73:48:f2:0c:31:
2a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:57:BE:C0:0E:F0:70:98:7A:AA:E2:6D:87:5D:74:50:49:50:75:8A
X509v3 Authority Key Identifier:
keyid:3F:E4:84:F7:D0:FF:F4:20:F6:B7:71:3A:93:CD:CB:0C:51:00:72:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-SE99D_9CD2t3E6k83LDFEAcmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1b710b-d2f1-4e15-aa3c-93260693add5/1/P-SE99D_9CD2t3E6k83LDFEAcmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:de:4d:2e:4b:8d:46:54:60:03:4d:86:fb:70:e4:e4:2e:7c:
80:c6:e7:9a:62:bc:d5:a5:e8:46:c0:f3:07:cc:9c:b5:f2:45:
03:46:2f:6f:a4:ef:84:58:a2:ab:56:1a:f4:49:ad:53:80:ea:
fe:24:e2:f2:7e:b3:1b:7e:f0:73:6b:b6:ee:53:4a:86:34:39:
e0:fd:a7:20:97:5c:85:be:6a:54:51:a2:e4:22:31:39:d6:03:
0a:05:cb:fd:2b:ed:52:12:dd:7e:f5:18:a8:dd:16:bd:e5:7e:
ac:a7:7e:9d:88:02:20:c0:8b:dc:d5:ce:ee:6b:60:31:a4:7c:
94:41:5b:55:f7:ff:68:0c:88:ed:fb:58:02:82:45:2f:8c:63:
fa:13:8f:4e:a0:62:05:76:cf:49:23:b4:69:e8:c8:27:93:e4:
85:81:49:60:56:3e:b2:16:f0:83:96:20:cf:0b:aa:fb:31:33:
bc:1b:b3:5b:50:a8:e7:41:b0:71:16:fa:bd:b3:fb:e8:5b:ee:
5b:d2:2d:16:2c:ac:f8:54:96:c9:ad:6f:42:05:b2:a9:4a:d5:
2f:87:9f:fa:3d:44:9f:32:7c:04:53:a3:e4:03:65:17:56:7a:
66:63:d4:f4:ea:55:48:91:67:ab:a6:9c:c2:f5:7a:86:60:1b:
58:6c:7a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:39:47 2025 by rpki-client