
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.mft
File: SeUU57fWfZM3ObUWHT1iTzwjmvk.mft (raw, json)
Hash identifier: 7AYVoAzXnbCUtBmx1XE92eFPeWk6PnVL/zf4AZRT4cY=
Subject key identifier: 06:27:F5:FF:E2:11:0B:0D:CF:0E:DE:E6:A0:3E:53:EF:6E:57:60:99
Authority key identifier: 49:E5:14:E7:B7:D6:7D:93:37:39:B5:16:1D:3D:62:4F:3C:23:9A:F9
Certificate issuer: /CN=49e514e7b7d67d933739b5161d3d624f3c239af9
Certificate serial: 0199FB7CC6057CF03715C87F64D6E3DB42C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUU57fWfZM3ObUWHT1iTzwjmvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.mft
Manifest number: 3F
Signing time: Sun 19 Oct 2025 08:01:22 +0000
Manifest this update: Sun 19 Oct 2025 08:01:22 +0000
Manifest next update: Mon 20 Oct 2025 08:01:22 +0000
Files and hashes: 1: 6QyQI-UDdi5VvsW7wlBSbMul1zE.roa (hash: y5T4O4QEdcHKwszAqbm3ZgBGBRWTXgNEu9vHIrgVcwo=)
2: SeUU57fWfZM3ObUWHT1iTzwjmvk.crl (hash: Q6T2M8NoNV3oYRaSrJvOotwEDriZzmhBF6uwDuCD5w0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUU57fWfZM3ObUWHT1iTzwjmvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c6:05:7c:f0:37:15:c8:7f:64:d6:e3:db:42:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e514e7b7d67d933739b5161d3d624f3c239af9
Validity
Not Before: Oct 19 08:01:22 2025 GMT
Not After : Oct 20 08:01:22 2025 GMT
Subject: CN=0627f5ffe2110b0dcf0edee6a03e53ef6e576099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:2e:85:ac:68:2c:57:6f:51:d6:57:d3:8c:
ca:dc:5b:17:e3:ef:56:8d:a2:76:44:f0:26:25:07:
be:c5:c9:f7:a4:b7:da:03:13:0c:e8:27:e0:65:d5:
4a:88:3a:b0:36:86:8d:88:78:cd:30:fa:b8:a5:45:
05:2d:9c:a1:0c:9b:9f:50:eb:72:d6:c9:ca:dc:64:
c0:9e:be:a2:44:d8:95:cd:ad:b5:07:0d:fa:77:32:
0b:82:26:c3:83:30:75:7f:16:66:87:5a:c5:d0:9f:
4b:da:39:57:f2:8c:37:32:e1:4d:95:5a:ed:9b:4b:
81:e8:07:35:34:ee:7f:f5:9d:e7:1b:63:81:19:c3:
e9:97:57:a9:41:78:b7:a6:17:bf:0e:b1:cc:2d:16:
77:24:24:7a:74:b0:b8:57:24:55:aa:d9:26:2d:d7:
b5:ca:1c:9f:42:48:0e:26:4b:be:7b:95:00:7c:e4:
ca:d4:86:d6:62:35:80:7f:af:25:62:0b:3c:42:83:
3b:38:dc:3b:0a:66:c2:49:9a:8f:72:bf:60:c2:c1:
b8:48:71:39:ce:74:75:78:65:42:0c:74:0f:b2:33:
97:d6:c8:28:9a:ab:d7:c1:45:b3:e7:3b:52:fd:f0:
62:b7:10:61:0f:1b:56:8a:1d:d7:8b:a4:e7:fd:99:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:27:F5:FF:E2:11:0B:0D:CF:0E:DE:E6:A0:3E:53:EF:6E:57:60:99
X509v3 Authority Key Identifier:
keyid:49:E5:14:E7:B7:D6:7D:93:37:39:B5:16:1D:3D:62:4F:3C:23:9A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUU57fWfZM3ObUWHT1iTzwjmvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:67:ce:ed:88:3e:70:54:4c:7f:f9:bb:e2:1a:e7:b7:74:81:
10:32:46:c9:53:0b:42:24:76:86:6e:57:1e:3d:90:a7:d3:8b:
a9:c4:ba:e5:c6:70:b4:f2:99:3c:34:ff:b5:fe:5a:11:e1:27:
dd:c0:f3:4b:6b:9b:74:46:b4:1f:12:45:a5:6e:2c:a2:34:c2:
b2:e6:ee:f2:6b:19:4d:d9:a2:8a:ff:26:1a:83:bf:45:21:f2:
a9:cf:74:1a:6a:6e:5e:8a:cb:03:6e:8e:00:c7:e8:ab:fc:d3:
a1:db:6e:44:b4:1c:58:9d:bf:6d:c3:63:85:e2:c4:1b:2d:92:
3e:e1:8e:fe:ca:e1:37:93:50:a5:62:d9:50:6e:b4:00:8a:73:
8b:9a:f1:61:84:53:37:59:f7:12:9c:02:57:ed:f9:84:11:e7:
66:a1:a3:cb:43:20:18:60:ae:2b:80:2e:be:dd:17:eb:6f:64:
32:62:3a:f3:30:1a:76:80:55:a6:65:6e:c9:11:bc:47:2f:8b:
f8:14:61:1b:1b:f2:29:bd:36:c8:ac:7e:00:42:84:37:0f:3d:
42:9e:df:09:0e:41:73:80:0a:f6:47:0c:5a:6f:9a:91:a5:87:
84:8f:f9:23:5f:9f:6f:08:79:8a:e0:93:61:52:0c:66:74:39:
0b:ef:82:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:41 2025 by rpki-client