Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
File: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft (raw, json)
Hash identifier: pI5Bp+k4WDC4EfU/CNPGYdJcRTCJg5HzwnlbiUyBp2I=
Subject key identifier: 32:31:EF:7D:31:F3:57:99:EA:0D:65:14:06:30:E7:E7:81:66:F2:16
Authority key identifier: 49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
Certificate issuer: /CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Certificate serial: 0198D698654F69F3629C83AE1A1AECD61F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
Manifest number: 01F2
Signing time: Sat 23 Aug 2025 11:02:48 +0000
Manifest this update: Sat 23 Aug 2025 11:02:48 +0000
Manifest next update: Sun 24 Aug 2025 11:02:48 +0000
Files and hashes: 1: 2VOoNC3U3dbfOvp8BLzsJ1f-ifE.roa (hash: /4n1vWOP9xioYbfhWLfqMCZdtH551Gxmhk/RZPxKlZ0=)
2: 75LTo_jTlCg81UcwDjwfJUQMDKk.roa (hash: EkR0b+zKTp/aZ94o/SjZ2ZZg+QA0fvdyyS6BFZkQ6d8=)
3: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl (hash: HlWdDL9SEewV0X9LAJiIwXv3/BoTPY9ds+f73bYQRE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:65:4f:69:f3:62:9c:83:ae:1a:1a:ec:d6:1f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Validity
Not Before: Aug 23 11:02:48 2025 GMT
Not After : Aug 24 11:02:48 2025 GMT
Subject: CN=3231ef7d31f35799ea0d65140630e7e78166f216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:55:bb:02:08:af:18:09:ab:d7:c3:69:ec:bd:
e5:f1:7c:b3:b1:53:47:91:a5:79:10:65:49:0c:cf:
85:9e:50:70:92:fa:85:05:e0:06:22:8a:ec:a7:27:
47:d7:64:0f:ca:99:d6:d4:bf:c3:9e:9a:d8:b8:b3:
5c:ef:18:29:41:dc:6d:d7:e9:0c:30:27:23:d4:7f:
fd:c8:e5:bb:72:5d:41:61:18:a4:b9:64:72:2a:77:
15:e3:7a:19:39:07:b7:32:1e:29:ab:a7:7f:1f:e2:
47:60:b0:47:af:f1:e9:18:c1:d7:d8:cb:2a:a9:3e:
9d:b5:d8:6d:52:2e:93:38:d9:b7:b9:3d:db:ea:25:
46:d1:ea:b8:74:62:23:f3:6d:8f:54:a7:40:7b:24:
2f:08:53:23:04:da:7f:40:7a:03:b0:a4:72:81:11:
ab:dd:f5:f4:ef:06:1d:01:e6:66:98:36:e6:47:98:
9a:8a:c4:98:81:7c:8f:33:6b:86:bf:5d:95:e5:ac:
f5:f2:a2:73:84:ea:98:87:f3:51:b3:35:ea:cf:2c:
7a:20:9c:f7:6a:3e:dd:be:ef:05:65:bd:a2:8b:4e:
82:d3:5c:c0:a4:e2:84:48:aa:eb:21:0a:ee:73:40:
69:c2:f5:d8:fe:45:6a:69:e6:b2:a4:cf:bd:a3:e7:
9c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:31:EF:7D:31:F3:57:99:EA:0D:65:14:06:30:E7:E7:81:66:F2:16
X509v3 Authority Key Identifier:
keyid:49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:19:21:95:68:c3:3a:9b:65:2f:c5:5a:b4:d4:0a:77:b2:87:
45:a0:ef:a7:24:a8:23:88:db:7a:61:c5:5d:10:95:5e:4d:e2:
38:e9:56:14:cd:e3:3f:03:fb:76:d2:00:6d:5e:7d:8e:01:21:
74:70:50:fe:d5:c4:4f:ff:f0:d7:d5:27:dc:9e:a6:27:6f:f7:
b0:92:5f:63:c9:89:13:d4:b4:c7:f5:89:5e:28:12:40:4b:bb:
51:b4:ef:d9:2d:f8:db:38:a6:cc:89:f4:47:26:74:68:cd:83:
ee:7f:24:65:13:70:7c:93:58:c8:1d:c4:67:e3:ed:2f:88:54:
0e:35:cd:91:dd:3e:0f:24:d5:f7:d5:6a:fa:92:f0:8b:27:07:
69:d1:04:d4:82:6c:8e:7f:e4:6b:16:24:48:83:de:af:2e:6c:
ba:a2:c5:92:1e:19:6d:88:4b:eb:07:0e:ba:7e:cc:b9:98:02:
b1:69:19:20:8d:e2:4b:de:5c:12:14:92:c8:76:22:d7:7c:64:
d6:41:f3:5f:23:6a:6d:9b:f9:bc:1f:4b:37:62:f2:24:f5:cf:
f6:44:62:f3:b8:98:5f:9f:61:6f:d9:33:7d:30:9f:33:ee:fc:
7d:97:2d:a5:c9:58:5f:c6:f0:3c:57:fe:13:03:a0:a8:cf:68:
05:f4:ea:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:29 2025 by rpki-client