Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
File: sejPc4YgDf2psGfbnHfTBmDXTNo.mft (raw, json)
Hash identifier: 6LVGXPtMiUUtL0SBFFmPH6IW0tqDP7PXvmKj0OVrbbA=
Subject key identifier: 67:0E:FB:FB:42:EF:34:5A:14:48:A1:9C:22:64:26:DC:0A:13:BB:65
Authority key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
Certificate issuer: /CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Certificate serial: 0199FD33E7F61567E081805D39118E13D3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
Manifest number: 0BFC
Signing time: Sun 19 Oct 2025 16:01:01 +0000
Manifest this update: Sun 19 Oct 2025 16:01:01 +0000
Manifest next update: Mon 20 Oct 2025 16:01:01 +0000
Files and hashes: 1: AXjvsvQT0QHgjGJCOykWGFNYr-c.roa (hash: 7RT23qfYCEUyYP4ewoJmIzu1W/Zc3geSmO8k80S5/ts=)
2: sejPc4YgDf2psGfbnHfTBmDXTNo.crl (hash: Y2LPsfB4AERY35XPjOI0x6o3XPAlpi62Uro7auPkMCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e7:f6:15:67:e0:81:80:5d:39:11:8e:13:d3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Validity
Not Before: Oct 19 16:01:01 2025 GMT
Not After : Oct 20 16:01:01 2025 GMT
Subject: CN=670efbfb42ef345a1448a19c226426dc0a13bb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:da:00:23:d5:aa:11:a9:30:f8:de:15:f7:55:
30:6a:bb:29:45:2f:68:a3:ac:25:fd:82:ea:b5:0d:
85:14:4e:e5:a5:ed:7f:c7:36:d9:21:07:34:7e:19:
08:8e:3c:f8:db:9b:14:a1:49:8e:e2:0a:69:37:58:
5a:8b:92:e3:59:6d:0d:62:11:0d:15:b7:20:9a:28:
9a:bf:10:93:04:98:53:05:90:bc:26:4d:23:af:e5:
dd:3f:0d:c8:85:ec:08:81:a6:fb:06:3e:ab:3c:30:
8d:05:f1:8e:fd:b8:35:a6:26:c3:91:79:c3:24:49:
2e:9e:1f:4a:02:c2:f7:c9:40:4b:c0:b0:1c:53:8f:
d6:97:9f:01:e5:8b:35:c7:a8:2c:9c:bf:26:88:dd:
ff:f3:03:b8:85:58:d3:e3:6f:a4:b1:47:a8:a8:cc:
67:d2:bb:8c:94:89:52:aa:d4:81:ae:af:5c:4d:62:
bc:79:3d:33:eb:4c:bf:46:9f:9a:cb:1e:39:3a:01:
91:e3:a0:67:30:3e:cf:af:a8:fe:2d:95:14:cb:ad:
06:00:8e:96:cf:55:15:eb:ad:9c:f7:68:9d:ba:50:
a7:1b:34:8c:57:aa:09:8b:c4:c8:29:80:03:fb:46:
c2:92:75:2a:72:74:42:2d:97:b0:a4:67:0e:0a:88:
6a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0E:FB:FB:42:EF:34:5A:14:48:A1:9C:22:64:26:DC:0A:13:BB:65
X509v3 Authority Key Identifier:
keyid:B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:07:ef:e0:3f:46:d8:2f:80:2f:ed:64:5f:1a:9e:e0:fc:83:
3d:c4:d3:a3:57:fb:89:48:85:9b:ee:c2:24:01:f1:71:9c:b4:
b1:b1:bd:f8:87:0c:ad:ef:95:ef:02:3a:8c:7e:f1:0f:03:67:
8f:9a:fe:4b:9e:7f:d7:2c:a6:bf:ef:c9:19:21:29:30:b8:6a:
8d:84:f3:81:9f:ee:d6:2e:e2:18:1c:35:21:fa:4b:14:75:2d:
a6:b6:4c:18:e5:3b:94:36:d6:55:fe:a4:ab:a3:fd:33:19:fc:
df:3d:1d:4a:51:22:55:96:8f:8c:1f:7a:c9:50:67:43:8e:f6:
76:b0:73:5f:dd:92:c9:a9:d2:72:9f:cf:18:89:85:e2:9f:ec:
8c:15:b5:4c:8c:1f:e5:64:65:ed:89:c2:2e:75:ba:92:77:9d:
9b:3b:65:36:95:91:39:9b:48:e5:d5:9e:57:8e:f3:a1:28:d4:
08:1a:e1:b4:5a:71:54:ba:74:a9:5a:33:6b:98:97:a4:e3:e6:
32:43:1d:d2:dc:44:70:4b:24:ff:3e:fb:d7:96:7a:cb:0c:27:
09:69:ca:cc:1f:d3:14:bc:8c:bd:a0:df:6c:d3:91:3b:22:5b:
aa:ba:ae:7a:6b:dc:00:c5:6f:f6:d9:a6:bf:cb:e6:f5:db:f3:
c5:2e:8d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:30 2025 by rpki-client