Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
File: sEAqOILi-MUlQrB73sCypQ1ZgNs.mft (raw, json)
Hash identifier: DTJBt518Z1O8ns44X0f92jsL3yCOEH7Wc4KCs9vcvyg=
Subject key identifier: F2:B8:33:EE:F5:CD:2A:AB:52:FC:C8:14:BE:4C:6B:15:52:61:45:C6
Authority key identifier: B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
Certificate issuer: /CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Certificate serial: 0199FA69D34CFDFECEAF06EECF9C0326E73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
Manifest number: 0FBA
Signing time: Sun 19 Oct 2025 03:01:03 +0000
Manifest this update: Sun 19 Oct 2025 03:01:03 +0000
Manifest next update: Mon 20 Oct 2025 03:01:03 +0000
Files and hashes: 1: sEAqOILi-MUlQrB73sCypQ1ZgNs.crl (hash: yZHlYm2wiCI3AUa9fXzJJ66FqqxDLylRQDpvtq6W/Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:d3:4c:fd:fe:ce:af:06:ee:cf:9c:03:26:e7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0402a3882e2f8c52542b07bdec0b2a50d5980db
Validity
Not Before: Oct 19 03:01:03 2025 GMT
Not After : Oct 20 03:01:03 2025 GMT
Subject: CN=f2b833eef5cd2aab52fcc814be4c6b15526145c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:5c:d7:cc:b6:94:13:d5:51:9b:ea:d5:5e:
1c:86:c4:27:99:10:e7:ec:61:66:4b:c8:ac:59:04:
2c:a4:4b:03:89:4d:02:fa:e3:7d:c2:8b:cb:55:b6:
82:01:b6:2a:6a:71:a0:a9:2d:e1:93:3f:cf:2e:8c:
16:3b:15:21:fd:ef:a7:8a:3c:b5:85:6f:fc:4a:1e:
91:f9:ea:21:b6:31:f0:c5:9d:62:a3:62:af:e4:d1:
58:d3:c2:7e:64:b8:8c:2d:31:2a:1e:9f:e8:e4:01:
4b:17:10:e9:b3:c7:53:65:b0:4c:c2:d7:04:87:96:
03:d0:45:ae:51:73:f8:88:ed:4b:94:24:02:1f:27:
a1:15:06:89:69:64:92:1e:c6:0f:d9:0f:0a:06:00:
7c:5f:5c:a7:19:08:97:72:5b:04:f8:c4:a0:3c:c4:
c4:40:f6:9b:a7:5c:66:c4:0f:af:26:b3:dd:99:94:
4b:22:8c:95:41:89:7f:54:75:35:57:a5:a4:fc:87:
cc:a1:db:4d:1c:c9:49:2d:b7:f6:a5:62:d6:ab:6f:
4d:94:9f:6b:01:35:b1:28:22:79:0a:a6:1d:e5:50:
af:af:cc:71:b0:8c:d0:71:9f:9a:5c:0c:61:63:06:
04:6e:6b:85:55:9b:a6:47:44:73:85:42:64:31:94:
00:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B8:33:EE:F5:CD:2A:AB:52:FC:C8:14:BE:4C:6B:15:52:61:45:C6
X509v3 Authority Key Identifier:
keyid:B0:40:2A:38:82:E2:F8:C5:25:42:B0:7B:DE:C0:B2:A5:0D:59:80:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEAqOILi-MUlQrB73sCypQ1ZgNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b974d9-6741-429d-9f1c-82c7921d0208/1/sEAqOILi-MUlQrB73sCypQ1ZgNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:db:f5:73:a3:f3:bc:33:c3:05:0e:a9:35:91:0f:dc:9b:d6:
6e:90:25:3f:29:29:d8:3e:d3:24:b8:c4:38:33:b3:9b:e1:27:
c7:fc:61:f4:2e:54:db:5e:d6:1c:e9:8e:70:ce:0d:69:c0:34:
bb:91:99:3e:d1:3b:33:61:6c:d6:ec:5d:7f:8e:5e:a7:c6:b0:
be:84:1c:02:db:63:4b:6e:7e:0b:74:18:d1:83:92:be:eb:58:
c1:e2:2d:d4:79:1d:0c:f3:fb:f6:48:58:6a:0a:4b:8c:34:28:
65:e8:5a:c7:e4:68:2b:51:35:a8:c4:e8:76:b6:75:64:0b:06:
9a:3f:d0:7e:b9:4e:14:6b:9f:8c:b9:31:16:2c:a2:27:f3:68:
36:21:ef:d3:e9:8e:4a:2d:f6:ce:a3:31:c9:c9:9c:3e:a6:0a:
97:34:e6:00:11:9c:45:d4:a7:b8:07:ab:28:af:e3:a9:34:2b:
13:65:5c:33:ee:24:b1:cb:3f:d8:19:8d:4a:0a:b5:5b:6f:65:
f0:40:6b:fb:d9:4d:0f:13:89:90:49:f6:ba:03:98:9b:50:8a:
0c:d5:05:29:8c:4e:b4:3b:3c:d6:50:6a:f6:f2:77:6f:88:a9:
81:74:5c:98:5f:91:09:12:44:a2:79:f3:33:01:73:7e:04:ba:
d3:ef:22:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:48 2025 by rpki-client