Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
File: SeRO7qJladDdvQ6GN_Es9QWk7ek.mft (raw, json)
Hash identifier: Ye7Mh9ui4GTrV9Xy0sbZvW7+VPjfwasQ8odSeHokq7g=
Subject key identifier: 8D:26:94:55:16:21:A1:0D:5D:B6:B2:28:53:F8:1B:42:64:91:DE:C1
Authority key identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
Certificate issuer: /CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Certificate serial: 0199FC219E2332D59FBE91CB3080BC382F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: SeRO7qJladDdvQ6GN_Es9QWk7ek.crl (hash: EYNrN/2v5H+dY+dslPWTvmNKyRvet14rxgySLp7KUdw=)
2: ZLZClTfuDKfBFAb78-Sh9gGUq9o.roa (hash: ZjgvTzOG0NWN+AmJ71kj5d0LbF11Gt0UdOZExqIqebk=)
3: ygmr0LjW6g8O2ji5kesu3ACK874.roa (hash: Fof0/v6mus5tChpoy38UTB0o2Mq7hczl/AM052BO+So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9e:23:32:d5:9f:be:91:cb:30:80:bc:38:2f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=8d2694551621a10d5db6b22853f81b426491dec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9f:32:08:3e:ee:5c:94:5a:59:34:aa:3d:e2:
ba:bb:f0:82:79:f7:c3:70:99:df:2c:96:6c:ab:16:
c3:4f:2f:7d:36:b7:0d:6d:2e:60:53:ae:92:3a:27:
7d:3d:9c:e2:25:4b:df:76:56:f9:62:3f:c7:25:b0:
72:4d:e4:09:d2:1f:e6:ca:a9:79:02:6a:74:36:f2:
18:44:d5:22:ab:6f:14:81:d9:7d:0c:59:10:b9:2b:
c5:f9:f5:88:83:4b:7a:0a:15:62:0d:ac:53:75:9f:
f5:71:3e:b2:f4:04:7a:c9:44:d0:b2:54:9f:40:ad:
48:09:b6:a3:0a:a6:84:31:90:e1:5c:36:5f:49:1d:
cb:04:4a:43:fe:b5:da:67:44:72:fa:41:74:25:20:
71:24:66:e9:ba:bb:23:c0:c8:4e:de:6e:5e:3f:d6:
fd:3a:cf:41:be:5a:bb:80:d8:dd:1e:c8:75:e6:f6:
b6:f0:76:16:49:e5:3b:4a:92:27:b1:5c:20:04:87:
6a:fe:2a:0f:91:8a:fa:db:5a:24:e9:c9:df:23:ed:
86:37:1b:c1:fb:50:b6:1a:ba:ea:45:34:e9:b4:59:
74:f1:80:58:d1:4a:65:f5:e5:00:a0:d6:fb:c3:d3:
b5:98:1e:b9:70:93:e9:7f:14:33:3f:59:94:2c:e4:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:26:94:55:16:21:A1:0D:5D:B6:B2:28:53:F8:1B:42:64:91:DE:C1
X509v3 Authority Key Identifier:
keyid:49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:13:e9:df:ab:63:14:1d:e2:f8:2f:e4:05:73:aa:2b:c7:12:
96:0b:89:27:7f:24:24:a0:cd:b4:57:ea:f9:6e:bf:9c:b7:06:
1a:9d:9f:2c:18:40:dc:e8:80:ff:f7:a1:92:e4:3b:98:20:57:
a5:ba:32:f5:ee:17:52:a0:ff:dd:12:df:b5:df:25:97:78:83:
e2:0f:14:69:4e:c0:3f:1d:f4:3a:99:17:37:ac:33:c2:e3:7a:
38:4a:67:6f:ee:18:f9:01:f4:5a:65:f5:90:43:fb:0d:74:57:
a8:e1:54:54:3d:29:87:ef:65:67:5e:d5:62:c5:1b:3e:8b:08:
bd:66:c6:2d:07:de:33:a3:70:94:2a:30:d6:51:29:49:72:e0:
a8:95:43:72:0c:81:ad:4f:69:6d:af:7f:15:19:0f:c7:57:3e:
62:d2:b8:70:f9:28:4c:a0:6e:21:7b:ee:0a:79:ac:9f:f9:63:
ac:a2:94:c1:a6:3c:c9:23:88:bd:c0:99:6f:9e:81:4b:2d:87:
2f:6f:57:78:3f:bc:72:32:75:1a:52:7f:25:62:fc:29:2a:42:
78:6d:59:a9:d4:dc:e6:ee:c1:8b:5d:f1:52:bf:5b:8a:b1:1f:
de:af:db:3a:3d:4e:9f:d4:0f:3f:26:b9:7f:cd:e4:9d:d2:4d:
ff:e5:d9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:17 2025 by rpki-client