Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
File: se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft (raw, json)
Hash identifier: 9TB6uxTc7xRYyP5TNP4q1OMpmz2aQ2WkALGuL3LswAM=
Subject key identifier: E9:7D:26:32:CB:F5:82:7E:00:67:AA:90:52:7A:92:86:43:20:87:45
Authority key identifier: B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
Certificate issuer: /CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
Certificate serial: 0199FDD9CFFDCC06D1F48260F8D0ABB19E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
Manifest number: 1061
Signing time: Sun 19 Oct 2025 19:02:14 +0000
Manifest this update: Sun 19 Oct 2025 19:02:14 +0000
Manifest next update: Mon 20 Oct 2025 19:02:14 +0000
Files and hashes: 1: se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl (hash: 3WwIfHSkByqA7/La/rftsr7eRwyrEi4Gdo65hddbNH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:cf:fd:cc:06:d1:f4:82:60:f8:d0:ab:b1:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
Validity
Not Before: Oct 19 19:02:14 2025 GMT
Not After : Oct 20 19:02:14 2025 GMT
Subject: CN=e97d2632cbf5827e0067aa90527a928643208745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:e7:fe:4e:87:d5:f6:57:25:37:72:9a:d6:
94:cd:86:0d:48:23:1c:63:e6:18:51:90:b9:65:b7:
9d:d5:da:89:d7:87:c0:b2:26:cd:a3:db:b0:88:8f:
0d:8f:b9:89:6d:2d:f5:82:53:d1:51:97:91:90:86:
66:7a:1c:69:fe:fb:79:79:02:20:39:96:7a:8f:0e:
31:5c:82:0e:b5:c2:37:c7:85:99:2d:0c:e0:d4:af:
6a:13:bf:2a:86:8d:39:1d:35:5f:ab:3b:9c:dd:82:
fc:c4:5c:23:17:fb:cf:f0:e6:41:6c:7b:08:91:d4:
9a:f5:4c:ac:22:d0:2e:22:0c:96:ea:e9:6a:75:2b:
ef:53:c1:22:91:5f:5c:e1:ce:7f:02:95:b3:9a:2f:
a5:6e:43:56:54:31:32:52:d5:28:49:5b:16:bd:22:
d0:e4:a6:ef:8b:ce:16:77:33:c1:b6:d5:5a:7f:da:
83:3c:32:d8:a7:c0:f7:86:3f:f4:69:77:40:ea:8c:
28:14:96:30:ab:5a:d5:99:5d:5f:79:f4:fd:ca:fc:
a6:d6:42:85:11:d9:a2:3a:6c:98:21:39:55:6c:e7:
b9:d5:cb:8e:11:bd:18:53:a0:69:ff:c5:40:6d:eb:
3b:87:e1:58:8b:90:3f:47:10:30:a2:6b:c1:9e:90:
ba:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7D:26:32:CB:F5:82:7E:00:67:AA:90:52:7A:92:86:43:20:87:45
X509v3 Authority Key Identifier:
keyid:B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3f:c4:2c:db:19:f4:b1:f9:3f:21:3f:26:df:0f:24:79:14:
0c:8f:10:9f:2d:a9:2e:f4:75:bb:82:68:2d:3d:25:c7:2d:72:
ef:d8:75:e6:11:65:43:c4:54:da:88:43:8d:55:63:72:78:7d:
e6:56:aa:e3:5c:6c:e5:98:87:af:ed:15:d6:e5:9b:81:07:d3:
11:8d:7b:c3:1a:70:1c:9d:aa:1f:6f:58:82:9f:17:26:b3:1e:
b5:15:4b:5a:52:96:72:d3:54:0a:f0:dd:15:89:4d:84:0b:60:
b5:f5:c4:b9:6b:5a:9a:fe:eb:28:9d:59:db:44:50:a9:32:dd:
d3:0b:56:28:8c:4e:4f:8e:9d:d6:46:fc:15:28:2a:e8:5e:59:
ae:38:ec:10:1b:92:0f:f2:30:87:fa:3d:ee:f6:3c:56:57:e6:
12:e4:de:33:ed:b0:3a:40:99:a1:d1:71:bd:a1:13:c1:48:42:
c4:55:2f:d5:d6:3c:bf:79:9c:ae:d5:17:1a:5d:f5:8a:2f:2d:
e2:60:61:8d:69:4c:e9:09:8b:31:df:e2:ee:82:bf:39:83:6b:
e3:ed:b1:02:48:fe:b5:19:b5:d1:33:09:5a:6b:ce:ec:35:5b:
7f:3c:c7:2e:47:b7:e6:c9:1c:74:7c:29:b4:01:3d:22:48:84:
3e:42:77:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:01:43 2025 by rpki-client