Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
File: se1mdqhXWQtjZbdsVYDXD8qNuqY.mft (raw, json)
Hash identifier: DG9DXiXbzScORAqhQOTkbGYJ0g+2McsXGkCSXSJfMt0=
Subject key identifier: B8:4A:A6:E5:BA:9B:48:C1:99:55:83:D4:13:35:59:9F:A4:5C:E7:2E
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Certificate issuer: /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial: 0198D4A801C0FF2F9E3845E27DF12009449E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
Manifest number: 0BA4
Signing time: Sat 23 Aug 2025 02:00:36 +0000
Manifest this update: Sat 23 Aug 2025 02:00:36 +0000
Manifest next update: Sun 24 Aug 2025 02:00:36 +0000
Files and hashes: 1: BSc7Lfy8S9yDC-G_k8JPIbogXL8.roa (hash: VQaRc62T55aNNoJmxuELOMwkOtgTlKfCtu9D4IVulL4=)
2: se1mdqhXWQtjZbdsVYDXD8qNuqY.crl (hash: OwlQXG9bz7P8f/gLelTKnTUmPiHf+2nZ8laofbQcgHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:01:c0:ff:2f:9e:38:45:e2:7d:f1:20:09:44:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Validity
Not Before: Aug 23 02:00:36 2025 GMT
Not After : Aug 24 02:00:36 2025 GMT
Subject: CN=b84aa6e5ba9b48c1995583d41335599fa45ce72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b1:ef:aa:16:be:bc:e5:a7:3b:05:2c:02:8c:
38:21:ec:a0:13:43:dd:2e:3f:da:f0:f7:a1:a6:4d:
25:10:07:3d:e9:f3:fc:e4:aa:bf:70:d1:d0:9e:bc:
37:66:c9:4e:bc:64:ac:70:9a:86:f5:e4:1a:b8:ba:
08:c7:2a:55:db:55:94:af:f1:d7:6a:db:4a:9f:e7:
05:23:53:93:59:b5:1f:46:e8:c9:4d:b8:bb:ac:d8:
77:29:cf:72:38:04:88:b2:6c:f1:7d:e9:b3:81:f1:
73:b7:55:57:85:f1:e8:f4:d6:c7:36:d1:a9:05:bc:
15:20:50:be:c5:7e:57:ac:c5:3b:c5:e1:3d:1e:1b:
86:fc:d3:68:a2:85:68:42:11:5f:5a:fe:8f:ff:13:
e7:f1:46:63:1b:26:62:13:69:e8:66:61:77:23:0b:
b7:5a:29:b4:a6:73:d7:c6:cb:2d:ba:21:32:ba:90:
6c:e3:d8:fe:c2:73:a0:49:a5:d8:cc:1e:fa:47:18:
3d:b1:0e:00:fc:4c:b1:e2:d5:9a:46:e9:c8:ee:78:
fe:98:e2:1a:07:bb:a9:60:fd:96:c8:6b:42:58:39:
89:6e:f0:f9:a3:ef:d8:03:2f:94:c2:ae:36:3a:de:
e1:92:b6:65:d0:91:4d:b4:47:b3:b5:fe:92:ec:51:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4A:A6:E5:BA:9B:48:C1:99:55:83:D4:13:35:59:9F:A4:5C:E7:2E
X509v3 Authority Key Identifier:
keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:32:a8:6e:6e:55:66:6e:5e:83:ed:f6:9b:29:f7:80:e3:54:
5e:05:51:12:a5:d5:93:c7:1c:67:94:a5:db:2b:8d:9c:1e:0f:
78:5e:44:31:61:45:7a:39:a4:20:a6:b6:d7:20:31:76:25:b9:
bd:51:00:24:20:a0:99:ab:dc:db:73:78:e0:36:3a:80:b8:93:
a5:b1:26:31:ea:33:a7:6b:7f:e4:fe:52:d1:9c:fb:e5:ce:27:
0c:73:38:e0:c2:bf:e5:74:76:41:9d:d4:97:be:3f:4f:f3:3d:
c2:81:c1:48:24:f8:b0:49:45:16:cd:49:ec:6b:11:12:97:ce:
f1:d4:2e:0b:b4:35:49:c5:f4:a0:a1:10:25:f1:0f:54:a4:6b:
05:32:a5:2c:5e:d7:e0:10:d9:72:ae:28:40:73:44:1c:13:d3:
36:8a:c7:6c:90:1c:25:95:e9:da:ef:e5:d5:07:4b:63:96:ba:
39:da:4a:b7:b0:5a:26:8b:5a:7f:3c:7a:1f:15:53:3f:9f:7b:
e0:48:de:d2:ed:5c:a1:10:0a:12:3b:ad:6f:48:61:bd:87:6f:
0a:2a:68:2d:65:a9:a2:de:6e:4c:25:de:7b:7b:fc:1f:4e:34:
7a:19:2f:de:a3:25:ad:c6:42:00:76:de:8e:24:4e:2d:eb:b8:
c3:e2:c4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:06 2025 by rpki-client