Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
File: se1mdqhXWQtjZbdsVYDXD8qNuqY.mft (raw, json)
Hash identifier: dIrLQAN6EKom/E0IgMEM+cWNqVQy+x3s9NaJ0H6aERo=
Subject key identifier: DA:69:43:E5:C1:06:ED:A3:56:6E:03:E8:6D:35:F5:6C:E6:7C:5B:51
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Certificate issuer: /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial: 0199FE10231CF524214AAE3258FE37D76C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
Manifest number: 0C3E
Signing time: Sun 19 Oct 2025 20:01:34 +0000
Manifest this update: Sun 19 Oct 2025 20:01:34 +0000
Manifest next update: Mon 20 Oct 2025 20:01:34 +0000
Files and hashes: 1: BSc7Lfy8S9yDC-G_k8JPIbogXL8.roa (hash: VQaRc62T55aNNoJmxuELOMwkOtgTlKfCtu9D4IVulL4=)
2: se1mdqhXWQtjZbdsVYDXD8qNuqY.crl (hash: ym4YKiQohvYQpoC4yGLrxMKad/ZK5vxfyuD3ylnKofg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:23:1c:f5:24:21:4a:ae:32:58:fe:37:d7:6c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Validity
Not Before: Oct 19 20:01:34 2025 GMT
Not After : Oct 20 20:01:34 2025 GMT
Subject: CN=da6943e5c106eda3566e03e86d35f56ce67c5b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:0f:3c:b6:a8:57:89:b9:6d:a7:6b:f2:b2:
56:4f:ce:dd:02:49:00:20:4a:a5:3a:54:f2:f7:47:
f1:e9:00:ce:e2:12:4e:27:4e:b3:43:70:eb:ec:21:
ec:92:9e:5e:23:b8:81:06:ff:3f:7a:49:b4:b7:b7:
d3:4f:b7:1f:a0:09:e1:4a:52:46:46:b5:c5:2c:c3:
aa:96:df:11:bc:92:8a:fb:55:5f:42:22:b2:cb:3d:
fd:53:27:7c:7a:d7:bd:44:32:df:34:52:4d:78:ca:
f3:1f:0f:af:dc:7d:6f:c6:63:f3:91:35:66:fd:6c:
72:7c:8e:95:e2:01:1f:a9:e0:49:70:6c:98:e6:fb:
a9:a7:03:51:b3:9e:88:d2:38:38:73:21:57:e0:e1:
7f:93:58:ab:7e:9e:41:11:77:a2:4a:61:74:f9:af:
55:75:4e:7e:b7:3d:52:e2:25:ea:1b:43:1d:5a:3d:
d3:01:6b:c5:fb:ae:52:84:a6:ec:eb:5c:7c:d9:1a:
52:ef:28:2a:d0:70:38:28:3c:a2:6c:8a:cc:e2:41:
91:18:fa:26:20:95:d4:03:dc:48:a8:81:a6:78:f9:
d0:6f:90:a0:0d:b2:49:63:9a:42:91:fa:9d:97:54:
0c:b5:3a:92:55:f3:8e:f5:85:96:0d:33:66:e8:5b:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:69:43:E5:C1:06:ED:A3:56:6E:03:E8:6D:35:F5:6C:E6:7C:5B:51
X509v3 Authority Key Identifier:
keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:40:94:f8:6a:dc:d1:0e:c7:38:3c:93:2c:91:b4:2a:6e:f3:
b8:71:45:11:c6:ba:25:e9:1a:14:c0:f9:6d:7e:67:90:92:30:
c1:e0:26:83:3a:72:86:a1:eb:1a:74:23:53:c8:fb:f6:ec:75:
58:7f:ef:28:07:d6:75:8b:32:ca:fb:9a:75:97:c4:3f:61:29:
1b:60:ba:a8:aa:48:3c:85:92:b2:6b:af:a3:5d:f6:9f:4a:fa:
7d:30:99:b1:63:ac:83:cf:90:95:d5:3f:c0:df:fe:67:81:78:
39:75:0c:ff:2c:54:42:42:56:19:90:f3:3c:96:da:2e:6c:12:
cf:a4:42:c2:19:d4:cd:c9:af:f3:d6:7e:fc:fa:e6:6f:7d:d8:
db:5f:2e:9b:5c:7a:71:75:e9:a8:a9:7d:ea:cf:5b:e1:79:1c:
0c:fa:48:0f:b3:6c:8a:c2:7e:47:b7:16:a0:40:ff:a8:a8:ce:
02:85:30:b6:8e:1a:6a:c4:63:31:a0:42:14:74:60:7b:ce:db:
12:c6:e7:f2:d2:ac:f9:c1:46:2e:4a:be:16:db:6a:a9:73:7a:
11:78:5d:64:71:c0:a4:ec:04:42:c1:cb:dc:2e:80:60:90:13:
4d:b4:09:fb:d6:55:82:b7:be:aa:05:b6:6a:9d:7d:dc:b5:11:
6d:02:4f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:12:07 2025 by rpki-client