Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
File: SeMF15ys2--_HoMrNNfAa7tfYno.mft (raw, json)
Hash identifier: okgAWvaim+Y2yOZiyxSCKfNi4369EywXlAGHrgK2tWo=
Subject key identifier: C7:C8:40:9D:33:D4:D6:AE:20:12:C8:98:5F:14:A6:68:48:6E:10:03
Authority key identifier: 49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A
Certificate issuer: /CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
Certificate serial: 0199FBEA940D3868F64C70744A84A464F954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:01:18 +0000
Manifest this update: Sun 19 Oct 2025 10:01:18 +0000
Manifest next update: Mon 20 Oct 2025 10:01:18 +0000
Files and hashes: 1: SeMF15ys2--_HoMrNNfAa7tfYno.crl (hash: duE0fuDG6tMRlD8lNB+tN/dygqzNUYfz+vn3U1xx8w4=)
2: aCk5yRvbKuue3ENXzksiDKszHOM.roa (hash: gF9bCRgORNZDjS/+hA/hEjcZSXZaNJqm2ogN9Lhnwwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:94:0d:38:68:f6:4c:70:74:4a:84:a4:64:f9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e305d79cacdbefbf1e832b34d7c06bbb5f627a
Validity
Not Before: Oct 19 10:01:18 2025 GMT
Not After : Oct 20 10:01:18 2025 GMT
Subject: CN=c7c8409d33d4d6ae2012c8985f14a668486e1003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:ce:b4:b2:c3:69:ff:a6:46:e0:1e:f9:d2:
f0:d0:39:0e:8d:df:37:9d:4f:3f:f9:a5:b9:05:e4:
cf:7b:58:fc:fb:e0:15:d7:e5:5e:04:81:0d:54:d4:
ab:3a:0f:6d:e5:83:28:dc:f1:ec:a7:44:4d:6a:a3:
11:2d:3b:3b:bb:81:6c:e6:97:94:16:cd:59:dc:85:
34:e5:53:04:32:c2:55:99:b7:6b:14:77:3c:4b:f5:
e0:63:2f:1b:2c:93:52:8b:5f:55:a7:a3:02:47:f2:
18:a7:0d:be:aa:9e:94:30:d8:5f:3f:55:14:ef:e7:
c8:91:e8:09:cd:1c:e8:e0:4c:e7:20:f0:99:77:67:
54:7b:e8:2a:73:c9:47:67:50:44:c0:8c:64:a0:1e:
11:9c:f3:ba:ef:8b:7b:50:a6:e3:19:c8:53:f1:e3:
34:66:21:72:1a:68:2f:67:5d:ac:5d:87:f9:9b:d3:
2d:e9:e9:d2:6a:5f:26:07:51:8f:6b:8c:e4:33:ee:
d2:d6:f7:4e:9a:25:71:fb:ee:4c:94:36:aa:e9:4b:
ac:64:d9:fc:f2:57:e5:26:30:01:99:56:ad:dd:cc:
af:59:ed:39:32:09:77:6d:79:17:12:69:ec:00:80:
e5:7c:c4:b4:84:bd:1b:f5:20:f0:24:f9:8a:e4:5b:
a1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C8:40:9D:33:D4:D6:AE:20:12:C8:98:5F:14:A6:68:48:6E:10:03
X509v3 Authority Key Identifier:
keyid:49:E3:05:D7:9C:AC:DB:EF:BF:1E:83:2B:34:D7:C0:6B:BB:5F:62:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeMF15ys2--_HoMrNNfAa7tfYno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dbf997-cdba-4930-8553-fd0989487b16/1/SeMF15ys2--_HoMrNNfAa7tfYno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:00:d9:b6:6d:90:07:5f:03:e9:b4:ca:c0:83:b6:ea:51:64:
aa:27:32:f2:62:cf:04:d7:b8:c4:76:cf:f1:17:70:0b:73:ec:
98:8e:09:45:83:ca:f2:0f:c0:ab:cf:95:cc:3d:d7:e3:b9:19:
b4:be:16:8a:20:75:c2:ea:44:8d:14:ae:ba:63:4b:47:85:34:
e8:cf:5b:a3:9b:16:04:71:70:77:f3:95:82:b1:d7:82:89:55:
d0:6a:8f:c5:14:89:44:13:73:a9:1c:e8:64:f0:4e:12:a0:e0:
98:40:11:4f:fb:32:d3:7c:09:84:59:40:f9:fa:1d:e2:9b:9f:
dc:90:20:e1:72:7f:33:7d:49:69:0b:59:90:0c:0c:a0:2b:c0:
e3:ae:85:09:b3:65:95:de:bd:a1:69:81:5f:10:51:bd:31:b8:
fe:7a:b5:c1:b2:fd:45:82:7f:ae:11:69:6e:2e:90:11:4b:61:
4a:b9:15:28:8b:f3:70:e9:88:02:e8:b5:d8:df:db:fd:9d:29:
a2:ee:3a:76:0b:46:ed:68:41:06:f0:18:61:1b:36:89:c6:3a:
f2:20:89:47:b1:47:b1:cc:ed:b2:fa:1e:4a:c2:b7:6f:91:7d:
0d:3c:18:1f:f5:1b:99:bb:b3:d1:b4:72:8e:6f:cf:9b:d6:82:
fc:b2:69:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:25 2025 by rpki-client