Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
File: seUmQF1FF0JHmU_u2y1-XdQHk90.mft (raw, json)
Hash identifier: URge6w3GXUjPa9byO3q9twoCkRquG5Mc9zKV7fGAnb0=
Subject key identifier: B2:93:32:34:52:C1:60:5D:64:B1:15:9C:1B:DC:46:E4:5D:7D:DD:2D
Authority key identifier: B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
Certificate issuer: /CN=b1e526405d45174247994feedb2d7e5dd40793dd
Certificate serial: 0197B96AF6452CD2A730979C3BA52A14A440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
Manifest number: 1404
Signing time: Sun 29 Jun 2025 02:01:24 +0000
Manifest this update: Sun 29 Jun 2025 02:01:24 +0000
Manifest next update: Mon 30 Jun 2025 02:01:24 +0000
Files and hashes: 1: N0iMw4V3FnCIyfGVT9KTAjAa0V4.roa (hash: ieg3VFvZTZIlfpmG2a/ZhByTEF92xOsm5jd+caG7KwI=)
2: seUmQF1FF0JHmU_u2y1-XdQHk90.crl (hash: C0JzUFqn7TDYE0Rqnx21ezDOWleF8KZK8NWMebmSJCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:f6:45:2c:d2:a7:30:97:9c:3b:a5:2a:14:a4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1e526405d45174247994feedb2d7e5dd40793dd
Validity
Not Before: Jun 29 02:01:24 2025 GMT
Not After : Jun 30 02:01:24 2025 GMT
Subject: CN=b293323452c1605d64b1159c1bdc46e45d7ddd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:32:3c:23:b4:92:8e:cd:7d:51:5a:c2:a2:69:
1a:58:32:6d:cc:76:f8:a2:ec:38:31:b8:97:00:b8:
1e:1e:08:96:9a:bb:f1:d3:d0:a7:ee:6b:dd:3b:87:
76:c5:b7:87:fe:b1:1e:1e:fe:8d:2e:61:8a:c6:20:
63:2d:84:c4:06:f8:1b:2a:60:e0:0d:14:2b:e5:0d:
87:48:09:77:37:70:2c:b2:08:d1:97:26:86:1d:e9:
5d:3c:88:8f:a0:36:25:b4:d8:cd:cd:7b:78:e6:16:
6a:aa:3f:c9:04:19:0f:83:fc:bd:ef:dc:24:64:25:
59:0a:de:49:9c:55:d5:b2:2d:79:55:4c:2e:7a:ce:
15:f1:c4:2a:5a:60:1e:dd:73:84:5b:d6:c9:a3:6a:
59:56:34:4c:69:6b:95:e1:59:02:06:bd:a5:65:6b:
c7:f2:cb:39:ae:69:90:76:56:7c:f5:c3:aa:cf:cf:
12:46:56:3d:e1:83:94:cf:c8:d8:59:8b:83:c3:0b:
99:c4:42:16:b7:aa:f3:77:6d:26:39:72:a9:c4:e0:
e7:dc:9b:6e:58:f5:59:e8:70:bd:b7:bf:cd:cb:a9:
48:47:a4:21:0e:d3:5a:45:f3:15:10:01:15:e8:74:
6e:e1:70:6b:b0:77:25:c5:32:aa:62:88:90:7e:1f:
fa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:93:32:34:52:C1:60:5D:64:B1:15:9C:1B:DC:46:E4:5D:7D:DD:2D
X509v3 Authority Key Identifier:
keyid:B1:E5:26:40:5D:45:17:42:47:99:4F:EE:DB:2D:7E:5D:D4:07:93:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/seUmQF1FF0JHmU_u2y1-XdQHk90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/38b4de-68c4-4df8-9e0c-40ee5646c747/1/seUmQF1FF0JHmU_u2y1-XdQHk90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8b:d3:e6:ba:aa:f2:4e:34:97:2c:22:2a:8a:c8:fd:b8:88:
27:26:eb:a5:6d:ee:a4:be:8a:ab:8d:dc:3d:72:cd:40:88:fb:
fc:25:28:04:3a:81:b9:49:53:7a:dd:02:d4:a7:ca:8a:06:5a:
e1:e8:30:38:5a:3b:bb:3d:b2:36:70:3c:77:b0:8c:b9:f5:9c:
d0:61:51:3e:f2:8b:6e:65:6c:eb:df:2c:c0:62:73:e7:a2:a3:
1a:f7:5a:34:96:19:e6:c2:ee:85:ff:10:e6:d4:3a:c2:08:a2:
d6:95:b5:3b:a2:fa:bf:e7:6c:31:c6:7d:12:cc:79:be:17:02:
22:43:d5:d3:97:67:ff:a3:f6:66:9e:e8:de:64:cb:93:53:1c:
ae:3e:4f:d5:ce:3d:70:0b:7d:d2:b4:db:f7:49:2f:fe:29:2d:
7d:79:73:c8:af:0f:6a:cb:15:41:19:4a:dd:ed:52:cd:69:c1:
b2:6f:48:54:9e:aa:9a:6f:98:7e:06:7a:43:5f:b5:1e:2b:83:
d5:8f:47:f8:2c:b2:33:6d:1a:e8:cd:36:42:14:2b:6a:06:c4:
e7:b4:78:17:45:7e:e7:bf:e4:ed:b0:be:16:30:b2:0d:4c:46:
4a:ca:77:ba:fe:04:a6:f4:5d:c1:14:3c:d6:35:5a:38:9a:3a:
29:d2:70:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:19:39 2025 by rpki-client