Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
File: se1mdqhXWQtjZbdsVYDXD8qNuqY.mft (raw, json)
Hash identifier: cq8GE+hk3KE4RT8hbXilS3H76WG3EB+FEQ7wizmLWg0=
Subject key identifier: DD:70:AA:F7:93:DA:FA:03:A8:DD:E8:DD:43:78:B0:C7:CA:EA:DB:D2
Authority key identifier: B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
Certificate issuer: /CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Certificate serial: 019892FEFB9E2BCF9FEAFE887356A7EE183A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
Manifest number: 0B82
Signing time: Sun 10 Aug 2025 08:00:40 +0000
Manifest this update: Sun 10 Aug 2025 08:00:40 +0000
Manifest next update: Mon 11 Aug 2025 08:00:40 +0000
Files and hashes: 1: BSc7Lfy8S9yDC-G_k8JPIbogXL8.roa (hash: VQaRc62T55aNNoJmxuELOMwkOtgTlKfCtu9D4IVulL4=)
2: se1mdqhXWQtjZbdsVYDXD8qNuqY.crl (hash: m2IKHn+GJZeaOgkcNAAjC3ZF8ui0Bp78lTx9Zmmc2Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:fe:fb:9e:2b:cf:9f:ea:fe:88:73:56:a7:ee:18:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ed6676a857590b6365b76c5580d70fca8dbaa6
Validity
Not Before: Aug 10 08:00:40 2025 GMT
Not After : Aug 11 08:00:40 2025 GMT
Subject: CN=dd70aaf793dafa03a8dde8dd4378b0c7caeadbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1d:b2:6f:e4:c7:cf:ab:90:f2:af:f4:85:9d:
ee:99:4f:f9:0d:00:ef:cd:2a:cb:6a:97:54:15:6f:
c8:de:85:a3:47:bc:a1:93:e9:32:f6:fb:5a:58:9e:
87:14:89:64:d8:c7:86:96:bd:5d:df:0d:09:6a:00:
74:fd:61:66:67:4d:b1:22:bc:67:23:35:f7:f4:03:
6f:59:9f:1f:bb:7c:f2:c2:70:1b:1c:93:69:3c:ef:
f2:bf:8c:72:97:b7:0d:27:72:db:29:52:5f:b8:ff:
92:b1:2e:0b:61:04:1c:8b:e2:ef:9c:5c:aa:5a:1c:
17:98:02:c2:7c:1d:a6:25:84:32:8e:c8:3c:72:80:
02:22:53:df:a6:79:93:98:d7:32:69:9c:0e:f8:4c:
37:7e:72:ef:ee:39:99:81:51:ed:1b:d9:24:3d:f5:
8c:ba:9e:60:29:3c:f8:99:a7:20:d2:9d:dd:04:16:
f0:b5:4d:94:8f:7b:f3:43:66:57:d0:93:59:11:16:
84:12:85:6b:77:14:93:86:cf:5e:2a:1c:b6:9a:43:
6a:47:7c:cf:6e:be:90:84:00:44:ed:0d:77:cd:69:
2a:c4:65:25:a4:38:7a:50:85:52:aa:5b:da:89:09:
5f:d5:e9:89:8c:6f:5c:d6:a3:4f:fa:2b:90:0c:d0:
12:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:70:AA:F7:93:DA:FA:03:A8:DD:E8:DD:43:78:B0:C7:CA:EA:DB:D2
X509v3 Authority Key Identifier:
keyid:B1:ED:66:76:A8:57:59:0B:63:65:B7:6C:55:80:D7:0F:CA:8D:BA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se1mdqhXWQtjZbdsVYDXD8qNuqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/25b6b5-28d7-4695-b4de-8bdf291d93d1/1/se1mdqhXWQtjZbdsVYDXD8qNuqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:19:18:fe:bc:3e:d4:e5:38:2a:8b:06:94:33:9f:74:18:6e:
18:c4:0c:e3:a2:15:c9:2d:c4:c8:80:a4:86:dc:b3:f1:b4:fb:
32:f8:6a:16:4e:78:5b:89:ee:db:bf:87:f5:2e:cc:c6:00:d9:
9e:f1:4a:67:d5:51:4b:59:ef:1d:41:10:aa:51:83:34:be:a0:
a3:6b:1b:04:a8:4f:a7:0e:d8:7c:83:e9:db:ea:06:8a:4f:36:
28:ca:eb:78:62:60:e2:c9:2c:29:d7:0b:89:2c:67:10:6b:4c:
89:b9:df:88:c9:4f:25:8e:6f:64:7c:8b:3c:92:f0:74:86:f9:
07:06:1e:df:a5:84:ec:57:b3:53:67:d1:ea:f7:88:11:7f:80:
ba:2d:05:04:0a:8c:30:02:7a:bd:67:fa:cf:46:3c:1e:a4:ac:
5a:97:b4:f6:06:62:24:f0:f0:2b:c7:e2:9c:f4:b2:51:ff:ed:
be:92:7c:e1:c7:80:a5:c1:a8:1a:39:cb:56:63:2c:f3:ac:7e:
37:b2:b7:60:63:de:48:e8:b2:c1:11:d8:14:71:79:a8:28:6d:
a2:d7:6d:a1:ed:ef:19:32:0d:68:94:c0:6d:e2:95:61:89:8b:
88:bc:ba:e7:4d:8b:bc:53:a4:20:49:1a:f4:39:30:4b:69:fb:
5e:3d:9b:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiS/vueK8+f6v6Ic1an7hg6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZWQ2Njc2YTg1NzU5MGI2MzY1Yjc2YzU1ODBkNzBmY2E4
ZGJhYTYwHhcNMjUwODEwMDgwMDQwWhcNMjUwODExMDgwMDQwWjAzMTEwLwYDVQQD
EyhkZDcwYWFmNzkzZGFmYTAzYThkZGU4ZGQ0Mzc4YjBjN2NhZWFkYmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6B2yb+THz6uQ8q/0hZ3umU/5DQDv
zSrLapdUFW/I3oWjR7yhk+ky9vtaWJ6HFIlk2MeGlr1d3w0JagB0/WFmZ02xIrxn
IzX39ANvWZ8fu3zywnAbHJNpPO/yv4xyl7cNJ3LbKVJfuP+SsS4LYQQci+LvnFyq
WhwXmALCfB2mJYQyjsg8coACIlPfpnmTmNcyaZwO+Ew3fnLv7jmZgVHtG9kkPfWM
up5gKTz4macg0p3dBBbwtU2Uj3vzQ2ZX0JNZERaEEoVrdxSThs9eKhy2mkNqR3zP
br6QhABE7Q13zWkqxGUlpDh6UIVSqlvaiQlf1emJjG9c1qNP+iuQDNAS1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1wqveT2voDqN3o3UN4sMfK6tvSMB8GA1UdIwQY
MBaAFLHtZnaoV1kLY2W3bFWA1w/KjbqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2UxbWRxaFhXUXRqWmJkc1ZZRFhEOHFOdXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yNWI2YjUtMjhkNy00Njk1LWI0ZGUt
OGJkZjI5MWQ5M2QxLzEvc2UxbWRxaFhXUXRqWmJkc1ZZRFhEOHFOdXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC8yNWI2YjUtMjhkNy00Njk1LWI0ZGUtOGJkZjI5MWQ5M2Qx
LzEvc2UxbWRxaFhXUXRqWmJkc1ZZRFhEOHFOdXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAixkY/rw+
1OU4KosGlDOfdBhuGMQM46IVyS3EyICkhtyz8bT7MvhqFk54W4nu27+H9S7MxgDZ
nvFKZ9VRS1nvHUEQqlGDNL6go2sbBKhPpw7YfIPp2+oGik82KMrreGJg4sksKdcL
iSxnEGtMibnfiMlPJY5vZHyLPJLwdIb5BwYe36WE7FezU2fR6veIEX+Aui0FBAqM
MAJ6vWf6z0Y8HqSsWpe09gZiJPDwK8finPSyUf/tvpJ84ceApcGoGjnLVmMs86x+
N7K3YGPeSOiywRHYFHF5qChtotdtoe3vGTINaJTAbeKVYYmLiLy6502LvFOkIEka
9DkwS2n7Xj2bYg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:04 2025 by rpki-client