Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
File: sejPc4YgDf2psGfbnHfTBmDXTNo.mft (raw, json)
Hash identifier: JnqMOu94jEGgqes+bM0KckHDIswmmu44oP8OAWYYvoM=
Subject key identifier: 6D:6A:A4:BC:27:94:62:C1:6C:A1:17:DE:E8:C7:DD:B4:4C:0F:A8:C6
Authority key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
Certificate issuer: /CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Certificate serial: 0197C192284286719746D1CFC93E5196134D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
Manifest number: 0AD4
Signing time: Mon 30 Jun 2025 16:01:10 +0000
Manifest this update: Mon 30 Jun 2025 16:01:10 +0000
Manifest next update: Tue 01 Jul 2025 16:01:10 +0000
Files and hashes: 1: AXjvsvQT0QHgjGJCOykWGFNYr-c.roa (hash: 7RT23qfYCEUyYP4ewoJmIzu1W/Zc3geSmO8k80S5/ts=)
2: sejPc4YgDf2psGfbnHfTBmDXTNo.crl (hash: UlWmmnGCESnMxcKhEDh0y8qwacfBQdfUpNr5ZHWnFXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:92:28:42:86:71:97:46:d1:cf:c9:3e:51:96:13:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Validity
Not Before: Jun 30 16:01:10 2025 GMT
Not After : Jul 1 16:01:10 2025 GMT
Subject: CN=6d6aa4bc279462c16ca117dee8c7ddb44c0fa8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:3d:99:49:b3:cb:07:a1:50:0a:51:79:9a:
e0:a2:ee:ad:84:60:cb:95:7f:5b:0c:c8:e0:db:34:
06:60:7e:02:21:b2:52:a5:65:90:a5:d8:36:a8:61:
87:4f:02:8c:21:bf:14:aa:13:5c:94:cc:01:46:be:
87:0b:bd:14:c0:8e:2f:c0:c6:66:d3:e6:ff:26:44:
4a:da:0d:de:93:c4:d7:b1:7a:06:2f:53:17:90:90:
d4:32:ff:2c:1a:ed:e1:05:ec:02:05:6a:d4:9b:36:
dd:72:19:68:19:8e:a1:8f:51:f4:4a:3b:7e:d2:22:
62:0c:34:df:f1:c9:08:dd:c8:9d:ec:73:e0:dd:a2:
75:67:e0:1c:eb:7f:58:af:4f:19:6d:ae:77:4d:c2:
7f:d1:55:6d:e2:b2:73:0e:f4:72:e7:18:cd:fe:a0:
56:54:74:67:7f:7f:1e:32:e0:32:86:22:a0:b2:9f:
08:14:3b:50:86:aa:3f:c9:70:29:9f:e5:71:85:a4:
08:fe:5d:0d:2c:c5:d0:80:f3:69:22:b2:57:2a:9c:
42:32:51:1e:f3:dd:57:e8:5b:1d:00:83:9a:5b:72:
f7:4c:06:9e:81:06:0b:67:59:d1:29:71:c6:fd:4d:
a6:9d:f5:c3:56:64:ae:91:1d:e9:ab:af:98:0a:6f:
8d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6A:A4:BC:27:94:62:C1:6C:A1:17:DE:E8:C7:DD:B4:4C:0F:A8:C6
X509v3 Authority Key Identifier:
keyid:B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ef:7b:b2:96:d0:37:b9:6c:64:c4:c0:34:35:87:41:2c:b6:
3d:f5:79:87:68:a5:a8:1f:f1:f0:5e:c7:7b:28:d3:66:66:38:
8b:23:bb:95:30:14:c6:50:fb:aa:95:a1:7c:23:c7:2a:47:52:
ca:3f:ee:90:4a:43:64:47:88:e3:de:c3:14:93:6a:93:9e:db:
14:e3:66:93:f6:80:ff:34:04:10:9f:bc:f6:45:be:81:da:19:
0b:6d:c1:9a:19:e5:a2:5c:f9:c4:fd:36:41:fb:fa:22:77:0f:
0c:33:19:2c:30:01:88:18:c1:96:17:41:be:84:f8:ca:88:a3:
e5:d5:f7:12:ce:62:f8:d4:46:fd:01:bb:70:9c:03:07:17:0f:
a4:49:02:da:b0:d1:0b:71:c7:96:8e:84:00:d1:d6:54:5a:ae:
53:7e:c4:ed:da:9b:27:96:a8:e9:08:3f:63:65:14:d0:ce:f9:
52:36:85:55:63:cb:d4:5e:bd:5c:38:d1:6c:a2:c1:2c:89:9f:
4b:5a:fe:6a:f5:92:ea:1e:e6:f7:c9:15:d0:b5:5c:9f:ce:6b:
0c:54:26:83:b6:43:4f:94:fc:f0:b0:53:d8:06:fc:92:98:2b:
3d:4b:4b:56:25:cc:e5:27:b1:a3:f3:aa:4f:5e:e2:4a:6f:a0:
d9:f3:27:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:39:52 2025 by rpki-client