Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
File: SEAyWZVCgEO12QXY0sF8MCuLNGU.mft (raw, json)
Hash identifier: Om/pqXuMNfINwO0DbBzrxJXbJ4zuBRtpkiGN8xrl/Xg=
Subject key identifier: E0:9A:3E:B6:DA:98:F6:33:C8:F9:F6:15:FD:AC:1D:69:C4:D4:24:57
Authority key identifier: 48:40:32:59:95:42:80:43:B5:D9:05:D8:D2:C1:7C:30:2B:8B:34:65
Certificate issuer: /CN=4840325995428043b5d905d8d2c17c302b8b3465
Certificate serial: 019A4D0635F016E2BA8EBAEFA21B18448FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SEAyWZVCgEO12QXY0sF8MCuLNGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 04:00:43 +0000
Manifest this update: Tue 04 Nov 2025 04:00:43 +0000
Manifest next update: Wed 05 Nov 2025 04:00:43 +0000
Files and hashes: 1: SEAyWZVCgEO12QXY0sF8MCuLNGU.crl (hash: znSM5x3b1fLyp1yG/kAPADwBiZoGulsN4SGrjrY4hAU=)
2: i7O_oqy1hOvPc2P58vmTI6wRVkU.roa (hash: ySE4UK1lU4KlZ7T7JZOZsfcplexjqn6fZrZ127xQdOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SEAyWZVCgEO12QXY0sF8MCuLNGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:35:f0:16:e2:ba:8e:ba:ef:a2:1b:18:44:8f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4840325995428043b5d905d8d2c17c302b8b3465
Validity
Not Before: Nov 4 04:00:43 2025 GMT
Not After : Nov 5 04:00:43 2025 GMT
Subject: CN=e09a3eb6da98f633c8f9f615fdac1d69c4d42457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:33:70:dd:08:b6:53:a0:7d:63:74:9c:fe:44:
91:f3:a6:16:74:ef:ed:34:5f:1a:b8:03:9c:1e:07:
35:d2:fc:ed:43:f7:53:d6:38:00:ef:97:d0:fb:f3:
38:78:fb:98:8c:7d:90:14:0e:1b:0f:07:b1:59:29:
64:03:a8:f6:25:19:f3:46:97:93:cb:89:4d:d7:0e:
f7:62:07:f1:4e:6b:b1:fc:6c:a5:89:01:a0:e8:54:
be:14:1f:19:28:98:97:b5:15:d6:1f:1c:13:77:ad:
95:9e:93:e4:34:97:5d:2f:ec:ec:c5:b3:d5:cf:81:
32:01:cc:0c:1a:70:1a:36:fa:8a:0b:2b:a8:5e:b8:
4a:62:e3:04:95:48:a1:69:d4:4d:14:b2:d5:ec:f1:
d3:2b:77:b8:c9:b4:c0:4c:ba:33:1f:ed:f4:40:ad:
c3:23:0d:ce:e1:7c:a9:68:4b:e1:68:73:7f:44:bc:
ec:a0:c9:95:60:5e:9c:32:45:87:f7:77:70:0d:05:
76:79:ec:d1:53:1e:a7:09:c3:aa:60:c7:b0:53:3f:
81:c9:52:e3:db:1b:18:1f:aa:16:6a:0b:4b:e4:9b:
f9:2b:7c:65:b0:bd:b6:e1:91:43:aa:8a:7d:08:bf:
b9:0c:60:7f:b0:7b:09:8f:ba:58:b7:1c:07:6e:5f:
ea:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9A:3E:B6:DA:98:F6:33:C8:F9:F6:15:FD:AC:1D:69:C4:D4:24:57
X509v3 Authority Key Identifier:
keyid:48:40:32:59:95:42:80:43:B5:D9:05:D8:D2:C1:7C:30:2B:8B:34:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SEAyWZVCgEO12QXY0sF8MCuLNGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e77bc-117a-4389-9dad-4ace3dc5a262/1/SEAyWZVCgEO12QXY0sF8MCuLNGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3d:3a:08:85:af:cf:15:4d:62:bb:79:66:d7:31:26:80:08:
69:14:2f:15:25:8e:0a:ac:a1:e9:cd:82:99:98:06:87:8c:ad:
7d:97:de:36:47:e4:4a:0d:63:31:49:a7:3e:96:52:b0:1b:8f:
e8:76:8e:32:bc:28:a8:90:eb:59:c5:ae:f3:43:17:b4:0c:1b:
5e:13:45:b1:f9:a7:15:c6:b3:26:73:39:41:02:36:00:1c:9d:
b1:97:52:3e:a6:14:cb:8e:c5:fb:ee:43:f3:36:7d:ec:48:09:
ea:bc:08:53:f4:e0:dc:97:a9:5f:a8:36:d5:f9:a4:10:e1:95:
67:69:a9:51:4e:01:6f:27:d9:07:3f:13:41:94:26:77:a5:cf:
b1:36:c4:f0:e4:d5:a6:cf:c3:eb:5b:fa:be:29:d3:62:78:de:
e7:25:78:bc:6f:1f:c0:df:dc:2d:57:58:c8:9b:03:ae:4f:1f:
d8:12:e4:a8:7b:a5:95:8c:33:ad:b8:b0:32:ee:bd:ab:b9:50:
50:34:12:e9:b2:c9:e2:c3:54:98:4f:a8:34:54:96:c6:43:25:
0c:3a:79:81:2a:31:fb:3b:e0:13:8f:98:29:1d:15:6f:6e:a3:
86:ca:f5:fe:a8:c7:1d:ac:98:25:f3:e9:ad:cb:e0:df:52:33:
23:4f:b1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:03 2025 by rpki-client