Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
File: seUmQF1FF0JHmU_u2y1-XdQHk90.mft (raw, json)
Hash identifier: gagUhWLv/GVXlbnfW88T74GEDOOHmOKL/WOZUsokaNE=
Subject key identifier: B0:4E:61:6E:E8:0C:41:58:D0:0C:DD:6B:F2:C3:46:DD:28:58:8F:D5
Authority key identifier: B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
Certificate issuer: /CN=b1e526405d45174247994feedb2d7e5dd40793dd
Certificate serial: 019A029075B6927A4E659F1ED3C35573BA90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
Manifest number: 1533
Signing time: Mon 20 Oct 2025 17:00:12 +0000
Manifest this update: Mon 20 Oct 2025 17:00:12 +0000
Manifest next update: Tue 21 Oct 2025 17:00:12 +0000
Files and hashes: 1: N0iMw4V3FnCIyfGVT9KTAjAa0V4.roa (hash: ieg3VFvZTZIlfpmG2a/ZhByTEF92xOsm5jd+caG7KwI=)
2: seUmQF1FF0JHmU_u2y1-XdQHk90.crl (hash: gOQLgeaDGs7XU6n5u4Ru6UeD1wA8RtLzuG+OFiN3ULE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:75:b6:92:7a:4e:65:9f:1e:d3:c3:55:73:ba:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e526405d45174247994feedb2d7e5dd40793dd
Validity
Not Before: Oct 20 17:00:12 2025 GMT
Not After : Oct 21 17:00:12 2025 GMT
Subject: CN=b04e616ee80c4158d00cdd6bf2c346dd28588fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6e:9f:4d:c2:86:24:48:1e:e4:74:7b:16:83:
66:fa:b4:90:35:a3:e7:48:f6:2b:95:ab:7b:9f:50:
39:e3:46:77:7c:62:cc:02:4a:ed:e5:f1:2c:0f:88:
3b:29:cf:5a:c4:e8:11:0a:a6:28:6c:6f:34:7e:ec:
c0:d4:12:fa:d8:7a:6d:b5:70:8c:3f:9f:aa:c2:ac:
60:82:d0:ce:27:93:13:cd:65:ad:bf:29:c4:68:dc:
86:8c:dc:97:b5:4c:15:20:00:f3:c4:df:08:f7:e6:
7b:77:cd:52:26:33:2b:1e:70:97:b4:21:01:a5:5a:
46:c8:a8:ff:6c:82:b0:a9:1f:64:1d:71:30:fa:28:
b1:7a:06:9e:37:fa:af:cd:23:ef:c9:e8:f2:93:65:
b0:6f:58:23:8d:64:0c:c5:c9:24:d3:0e:22:47:18:
8c:26:ed:0a:ea:d1:a7:80:13:8b:e2:42:a8:8a:bb:
62:89:17:d3:56:fd:8f:d0:8b:05:f8:2e:b3:55:4c:
63:50:58:18:16:ff:4f:79:de:43:98:bd:af:28:f2:
27:97:f9:65:3b:99:f3:2b:ce:c8:00:7e:d5:8f:87:
d8:ff:46:9d:9f:47:c7:f9:42:96:4a:2c:61:5b:0c:
ed:aa:f8:57:06:9d:fb:2c:91:b2:c9:2f:bd:be:21:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4E:61:6E:E8:0C:41:58:D0:0C:DD:6B:F2:C3:46:DD:28:58:8F:D5
X509v3 Authority Key Identifier:
keyid:B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:61:95:f2:e5:ca:0c:8f:95:d7:29:fe:c6:c3:18:bf:ac:e5:
dc:e6:35:a6:55:38:74:4e:31:09:7d:9f:af:39:8b:f8:18:14:
93:39:fd:6a:4b:d2:2a:06:f3:3d:36:cc:d3:79:d8:b2:b8:c2:
d6:3d:7b:7b:98:94:55:7b:a7:3b:ea:03:1c:8b:36:a8:c6:e8:
36:5d:33:3f:20:64:9a:0b:7f:fa:01:aa:48:2b:16:c4:13:b5:
81:3d:b2:d8:de:07:66:75:de:b3:4f:30:0b:9c:8f:d5:0b:06:
a1:78:15:12:90:19:61:82:13:07:15:1c:6a:39:a1:11:53:dc:
ff:09:90:69:2e:1d:3e:75:1c:fe:d6:00:41:62:3a:9a:1f:11:
cc:cd:f1:a5:f2:bb:ab:a5:e8:89:11:8c:b1:d2:fd:d4:00:00:
75:ee:e2:d3:34:42:82:3d:b7:2e:0d:bf:2b:59:79:6e:85:f0:
d9:db:6b:f3:d3:13:8c:f2:67:e8:c5:b4:52:f2:9c:07:24:42:
e4:2c:5c:eb:29:d3:2b:17:c1:0f:37:9a:78:95:51:9d:25:52:
e9:b6:29:7c:10:dc:69:da:04:bc:cd:7b:b7:b0:bb:ca:82:68:
69:99:63:c3:d5:a1:3e:81:e8:53:61:3e:51:c9:37:17:b2:af:
d1:8a:0a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:16:26 2025 by rpki-client