Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
File: SEQEnTlhdqG16ziFSNm-PrPn1lE.mft (raw, json)
Hash identifier: S93TdQa/dMRpx6sjDngdj4ZPQ37eMWmMQJwy2ZCmWPc=
Subject key identifier: AE:4E:F1:48:30:39:34:18:94:98:47:43:95:73:5C:AC:DD:0D:84:1C
Authority key identifier: 48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51
Certificate issuer: /CN=4844049d396176a1b5eb388548d9be3eb3e7d651
Certificate serial: 019A533F123B80E0EE627C9B0C7BDAB86763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
Manifest number: 0CDC
Signing time: Wed 05 Nov 2025 09:00:33 +0000
Manifest this update: Wed 05 Nov 2025 09:00:33 +0000
Manifest next update: Thu 06 Nov 2025 09:00:33 +0000
Files and hashes: 1: SEQEnTlhdqG16ziFSNm-PrPn1lE.crl (hash: o+dYr3GsF5JOZ7SI+gZr72mdIi8ThWqb/tQcP3CEFnk=)
2: T5aESWxAVXZQCKU4hKQ7Mbe0-gU.roa (hash: /yZIDrhN4+3klzibXSLP0BAGEXpbbrny28/lcBpDjcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:12:3b:80:e0:ee:62:7c:9b:0c:7b:da:b8:67:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4844049d396176a1b5eb388548d9be3eb3e7d651
Validity
Not Before: Nov 5 09:00:33 2025 GMT
Not After : Nov 6 09:00:33 2025 GMT
Subject: CN=ae4ef148303934189498474395735cacdd0d841c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9f:d6:e2:0a:bd:ff:96:77:c7:ec:68:96:a3:
b6:92:fd:66:73:1a:1c:99:eb:7f:af:f2:02:1b:8f:
49:36:0a:35:0c:c4:62:e2:e3:72:76:bc:07:be:32:
df:81:b3:3e:b7:92:bb:cb:31:08:c9:4b:76:3b:36:
a1:b9:85:a8:3b:34:f2:a2:e3:25:42:c6:98:5d:03:
79:2d:b6:89:c9:d8:97:75:45:f2:02:9b:c5:58:80:
98:5f:70:92:15:a7:df:14:5e:d9:41:90:4c:a0:a7:
2d:11:ad:01:98:2f:00:f5:e8:fa:1e:81:31:a8:c6:
6c:58:a0:ef:ff:4b:df:21:dd:39:6e:3b:9f:aa:31:
57:07:05:26:92:a7:8c:45:4e:89:20:90:b7:db:94:
25:7c:d0:c1:13:3e:d0:8c:08:74:3d:63:d2:27:69:
5a:ad:95:a0:02:c7:bf:76:59:92:92:71:6f:a6:f8:
da:ba:64:2a:05:f2:d1:62:06:49:32:30:9c:5d:db:
3e:de:e6:30:ca:e3:f3:ff:f9:69:46:94:97:61:cc:
a5:51:46:72:24:50:43:0a:07:6b:f6:79:05:5e:a2:
da:5d:b8:64:b8:bd:ac:d5:22:6b:2a:4d:ef:bf:30:
c4:97:9b:5f:ca:9c:3b:78:5a:e1:14:aa:56:63:6d:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4E:F1:48:30:39:34:18:94:98:47:43:95:73:5C:AC:DD:0D:84:1C
X509v3 Authority Key Identifier:
keyid:48:44:04:9D:39:61:76:A1:B5:EB:38:85:48:D9:BE:3E:B3:E7:D6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEQEnTlhdqG16ziFSNm-PrPn1lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c69174-c031-45fd-a9c9-11b24d113f22/1/SEQEnTlhdqG16ziFSNm-PrPn1lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d9:9d:8c:c3:6b:3a:bd:b3:0b:93:fc:ef:c9:13:3d:27:84:
c5:bf:65:02:ea:db:dc:e5:1b:34:d5:3c:30:14:76:a7:9b:f9:
49:d6:35:79:fc:9c:4e:9d:1d:99:da:2e:1e:05:1a:f3:9c:df:
34:13:c5:40:73:6f:da:4b:5d:ed:77:3a:a8:d2:d8:20:63:94:
92:25:33:c9:50:dc:63:12:ea:e0:99:ed:fb:3e:e8:c5:11:25:
91:78:2e:50:9a:d8:a8:f2:11:92:8f:bb:be:03:cc:d2:33:fe:
79:3b:c9:83:71:cf:74:44:50:7e:2c:be:58:da:f8:e8:27:a4:
23:9c:6f:5e:e6:d0:e9:4e:9f:de:fb:0a:12:97:5e:3c:2c:5d:
77:49:19:c9:ed:99:7a:44:cd:75:f7:27:36:a9:b8:33:48:33:
f9:43:41:13:bc:9a:1b:1d:6d:73:65:00:92:70:3f:20:a9:cb:
9d:e6:4d:c9:3a:b9:a2:3e:37:c7:23:fe:3a:1b:78:d0:21:31:
7a:00:95:4b:d8:0c:ed:7a:92:3b:72:dc:03:4e:20:9e:4a:4f:
ab:0c:d6:2b:01:c6:bd:df:fe:67:8d:e7:9e:73:1b:79:36:9b:
7f:8b:f3:0c:74:04:db:3e:fc:de:1b:75:0a:87:87:ff:11:13:
4d:b0:67:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:16:16 2025 by rpki-client