
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
File: se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft (raw, json)
Hash identifier: gDHTdmhJ3yaN5XtdZbRR0hT3Kowc5u3YaxvL5GaHZmA=
Subject key identifier: 7B:D7:E3:2C:A0:8C:B4:02:38:E9:AA:1B:24:F5:32:35:70:D7:14:EE
Authority key identifier: B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
Certificate issuer: /CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
Certificate serial: 019A50E44BD2B5416712B9BC3B47F4E2418D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
Manifest number: 108C
Signing time: Tue 04 Nov 2025 22:02:10 +0000
Manifest this update: Tue 04 Nov 2025 22:02:10 +0000
Manifest next update: Wed 05 Nov 2025 22:02:10 +0000
Files and hashes: 1: se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl (hash: Lucktxgd4ydRvbzkdqsxExSY1xLnDrqAq8Yq5zELtD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:4b:d2:b5:41:67:12:b9:bc:3b:47:f4:e2:41:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
Validity
Not Before: Nov 4 22:02:10 2025 GMT
Not After : Nov 5 22:02:10 2025 GMT
Subject: CN=7bd7e32ca08cb40238e9aa1b24f5323570d714ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e6:2f:d5:74:c7:62:0f:18:52:50:66:14:7f:
29:9a:20:11:4f:8b:ea:93:39:30:78:f1:0d:c3:9c:
7d:1c:ce:cd:b7:60:fd:95:24:66:3f:df:d5:c1:ff:
9b:f2:87:12:db:83:5e:57:95:73:1c:c4:92:ff:ae:
21:dc:15:8b:ea:07:2b:a1:7f:2d:60:14:21:3c:38:
0d:67:a1:16:e4:50:5f:7c:66:5e:c9:d8:8e:af:fa:
9d:49:92:e0:49:8d:fa:f1:1b:4b:e3:39:4b:76:43:
2b:9c:ff:85:76:d6:c8:8e:4c:4e:4f:c8:25:ad:52:
1e:37:ef:b8:0f:d5:82:93:8b:6b:b7:be:2e:38:13:
09:8a:c8:5c:ed:c6:c2:30:04:bb:48:e1:a7:80:3c:
3d:2b:6d:5d:1c:39:81:d9:09:35:72:27:8a:bf:f2:
7d:9d:53:a9:ce:d5:6a:0d:04:7e:7d:2f:6f:1e:31:
fe:3a:27:f3:8c:b9:58:42:b2:02:85:4f:68:ea:44:
99:df:63:90:d4:8d:a7:53:01:1a:0a:98:b9:4e:e8:
55:31:9a:f9:79:30:64:94:0c:bf:64:ee:8d:8b:38:
ab:7c:92:79:b9:41:0f:b2:4b:06:d3:1d:d3:e3:86:
89:44:15:98:e4:e9:ac:70:13:26:1c:b5:80:8f:3b:
e6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D7:E3:2C:A0:8C:B4:02:38:E9:AA:1B:24:F5:32:35:70:D7:14:EE
X509v3 Authority Key Identifier:
keyid:B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3d:c9:c1:64:66:b7:86:fe:58:97:b2:73:58:09:cb:a6:13:
72:ae:54:61:09:94:0c:91:b5:2d:2c:05:e9:83:67:57:3f:61:
17:e8:4f:e3:6e:5a:23:c6:09:ae:45:0e:4c:8c:bc:71:e2:53:
9d:6a:43:34:63:0f:49:02:c2:3b:f0:1e:d8:43:e0:95:e4:c0:
76:a7:5c:2f:83:3b:e7:7b:14:24:b1:75:4f:42:23:ac:e2:cb:
5e:3b:12:db:f0:07:48:6a:fd:72:d6:29:ff:ee:ac:97:c5:01:
1f:bd:4e:e2:29:fb:5a:5d:17:b2:f0:db:41:30:6c:b3:3e:ec:
1a:32:b0:41:99:91:8e:88:36:7f:be:2c:e6:eb:a6:ae:bf:fa:
e4:ab:56:2b:d8:fc:a2:80:1b:6f:2b:7e:96:6a:79:fc:11:50:
4d:96:8c:99:35:a2:88:5d:ad:3f:b7:16:0e:00:4f:6b:5e:71:
97:da:fc:25:df:d8:74:78:e7:b7:14:ad:16:7d:89:ad:2d:28:
ad:a8:39:12:55:64:d1:78:bc:51:bb:b8:51:e6:88:64:96:76:
5f:00:2d:ef:1a:a1:48:d6:7b:52:47:d1:4f:d1:09:0d:3d:ec:
61:00:93:15:7d:9e:96:b4:41:31:ac:2b:e5:b4:4d:92:3d:4f:
d3:f6:a8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:26:56 2025 by rpki-client