Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
File: se1mdqhXWQtjZbdsVYDXD8qNuqY.mft (raw, json)
Hash identifier: U5G2FASeKRjKcxzoxe0MYzbb8dx8Z7XngFhU0fmtKP4=
Subject key identifier: FF:59:A5:28:89:F7:16:E3:54:BB:01:A3:16:55:18:F2:B9:73:4F:A6
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Certificate issuer: /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial: 019A5119939D3607A45D6A23DD22A5E761D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
Manifest number: 0C69
Signing time: Tue 04 Nov 2025 23:00:21 +0000
Manifest this update: Tue 04 Nov 2025 23:00:21 +0000
Manifest next update: Wed 05 Nov 2025 23:00:21 +0000
Files and hashes: 1: BSc7Lfy8S9yDC-G_k8JPIbogXL8.roa (hash: VQaRc62T55aNNoJmxuELOMwkOtgTlKfCtu9D4IVulL4=)
2: se1mdqhXWQtjZbdsVYDXD8qNuqY.crl (hash: X0dnptUMf4ZMN2neXPWNnZkpNh32tW4s4dvRYShbF4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:93:9d:36:07:a4:5d:6a:23:dd:22:a5:e7:61:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Validity
Not Before: Nov 4 23:00:21 2025 GMT
Not After : Nov 5 23:00:21 2025 GMT
Subject: CN=ff59a52889f716e354bb01a3165518f2b9734fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:12:32:2e:e4:ea:9a:34:63:ee:62:c9:47:7c:
ab:ee:88:b4:e6:61:43:54:75:61:a7:be:a4:3f:9d:
3d:62:6c:e1:8f:55:16:08:b4:f0:17:94:3a:6b:ce:
06:ef:97:84:cb:03:2f:7f:0e:98:32:43:fe:5c:85:
e5:42:01:b3:1e:e1:1a:e4:4a:e4:f3:0c:ee:75:77:
9f:4a:35:c7:d6:bc:54:70:28:ea:eb:06:5a:9b:96:
1d:3a:c9:d1:1c:26:80:2d:60:75:e6:95:a1:12:c7:
75:22:a2:41:51:9e:5a:8f:58:17:eb:0e:89:ea:15:
f2:42:3f:15:c4:03:bb:58:05:48:e7:76:e7:61:87:
ef:a0:a5:18:e1:d4:38:af:ca:a8:d5:aa:72:eb:83:
54:07:99:cf:47:e5:f2:36:f8:bd:7a:a3:4a:3f:ed:
32:7e:7d:04:76:85:87:24:5e:24:df:cb:1a:6d:93:
d5:33:75:67:82:22:ad:9e:e9:77:b5:11:86:bf:f2:
c9:44:14:ba:4d:b2:dc:61:40:33:4f:8d:fa:29:ab:
b2:c8:54:cf:8e:48:2b:12:3d:76:4f:61:80:f0:2d:
12:2e:ea:c7:0b:ed:54:3a:b8:54:06:b7:89:80:b3:
a4:74:b0:52:f0:2e:d2:8a:e8:fa:65:bb:d6:dc:b4:
95:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:59:A5:28:89:F7:16:E3:54:BB:01:A3:16:55:18:F2:B9:73:4F:A6
X509v3 Authority Key Identifier:
keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:30:12:60:db:3c:26:8e:be:b6:7d:4c:1f:fd:0f:0a:5c:bc:
24:37:87:a6:e7:1d:ae:33:6e:c2:e1:80:4c:ef:03:64:d0:bb:
2e:1b:ce:e2:30:75:f5:8a:af:9d:ac:ad:75:b0:89:bd:a5:33:
55:03:87:03:7b:51:20:a6:c3:96:53:18:0d:08:be:df:c6:0c:
95:8e:82:a6:fe:21:9c:18:00:da:ac:8b:2a:ed:70:bc:27:75:
1a:04:c1:ca:ab:33:91:07:40:ab:a5:c8:8f:53:25:9b:f5:b5:
9d:57:b8:02:3d:a1:98:c0:f5:aa:f9:d1:02:fe:b5:96:71:fb:
9f:b4:95:03:e1:2a:be:aa:7f:b5:69:90:98:77:da:e5:69:f1:
e8:75:d2:af:b1:e1:f5:78:ac:14:11:a0:97:9d:00:b9:39:b7:
c6:25:2f:38:41:3d:22:a1:df:26:8c:1b:c8:7a:07:14:5c:63:
74:1c:0b:59:48:91:96:74:50:9f:07:63:d1:0f:08:57:79:1f:
31:0f:09:7c:1c:d3:4a:66:7a:67:2b:10:f2:65:97:43:a6:bb:
16:88:b9:0e:0f:72:57:0f:ca:1d:b3:96:92:26:96:85:90:26:
d4:ce:12:b2:a8:cf:b2:38:d9:46:d0:2f:9f:18:2b:81:60:62:
d0:13:84:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:16:33 2025 by rpki-client