Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
File: a-SeWhSwy_QQTANLVyoPnxVKmXU.mft (raw, json)
Hash identifier: 5gbQp6+WIUzbx+a9AJNxh3BmZLJjGtToKgUOlsNnlcY=
Subject key identifier: F7:9C:20:EA:2C:AF:C3:7C:BA:39:78:ED:F9:01:F0:47:A8:86:3F:FA
Authority key identifier: 6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75
Certificate issuer: /CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
Certificate serial: 019A4DAA7D66BBF40E538B564EEA70DBE62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
Manifest number: 05B1
Signing time: Tue 04 Nov 2025 07:00:10 +0000
Manifest this update: Tue 04 Nov 2025 07:00:10 +0000
Manifest next update: Wed 05 Nov 2025 07:00:10 +0000
Files and hashes: 1: a-SeWhSwy_QQTANLVyoPnxVKmXU.crl (hash: Og4ZxjWpCMqHJh2EF7xXuQSWMx9NxJyg8PW6KddHIMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:7d:66:bb:f4:0e:53:8b:56:4e:ea:70:db:e6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
Validity
Not Before: Nov 4 07:00:10 2025 GMT
Not After : Nov 5 07:00:10 2025 GMT
Subject: CN=f79c20ea2cafc37cba3978edf901f047a8863ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:a0:5e:9c:dd:b3:49:fb:94:69:bb:61:bc:
c7:55:02:47:6f:e9:07:62:46:91:71:c8:4d:42:ec:
86:db:75:0e:90:80:c2:57:73:4d:58:fe:d8:46:23:
45:3f:d9:a4:62:c7:05:80:43:7d:c8:6c:fe:a9:d6:
68:42:8e:bf:b9:75:8f:3b:8d:f5:1a:53:19:b4:aa:
5b:7e:ba:13:ff:0f:39:7d:e9:6e:ac:3e:d2:6a:1e:
8a:16:c3:5f:b0:e2:aa:a3:0d:f1:c7:c7:f2:fc:34:
bc:32:3b:1a:58:01:1a:76:fa:a4:f2:61:e1:7a:05:
00:48:62:4a:7e:38:d5:59:1f:9d:bd:fc:dc:49:e0:
3d:e3:7e:b0:93:64:ad:4a:10:01:29:23:4f:18:4c:
87:1a:17:58:0d:11:7e:db:d7:3c:bf:be:63:25:2c:
64:7c:74:a6:62:dd:cf:41:93:7c:bd:e9:21:9d:22:
cc:93:26:eb:e4:e7:f8:19:ed:b4:c6:0c:88:0a:0d:
b7:a6:e5:ad:18:b8:85:4b:33:2b:ae:e7:ab:03:b1:
9d:06:be:62:8d:d8:f4:ed:3d:1e:1e:2a:08:f4:7a:
8b:24:33:1e:b4:db:f3:a4:07:bf:9f:72:1a:a8:4a:
40:dc:16:1a:a9:7c:43:15:b1:93:7d:a1:d2:cc:01:
dc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:9C:20:EA:2C:AF:C3:7C:BA:39:78:ED:F9:01:F0:47:A8:86:3F:FA
X509v3 Authority Key Identifier:
keyid:6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:49:bc:5e:17:29:54:0a:c6:89:9b:e2:81:fd:8b:0f:a3:67:
40:c4:30:b8:fa:71:5d:6b:45:a3:c1:a1:25:30:67:76:26:cb:
97:72:de:25:a4:de:f8:4a:fd:55:1c:48:3d:0e:97:79:7b:00:
b9:86:0f:96:df:ca:8d:37:b6:a4:fc:51:72:f4:fd:17:63:da:
5a:af:66:38:c1:58:a8:28:42:b5:c7:96:fc:a3:d3:78:06:9e:
bc:fb:fb:33:c8:51:f2:1d:69:de:54:eb:67:ff:3a:a2:8e:18:
8f:9f:42:e5:32:2b:5c:75:0f:c9:7f:a7:db:97:7d:a9:bc:ef:
6e:e8:ff:bd:9b:b6:e1:de:d8:01:fe:28:19:4b:b2:b4:fb:dc:
52:9a:03:ad:0a:5e:46:fa:d7:db:8e:7b:2e:e7:74:34:e3:0b:
9d:28:1e:d7:7c:75:5a:f2:a8:9f:ab:a2:06:b9:e9:39:14:72:
b1:13:27:73:44:15:02:bc:53:a4:24:da:9f:db:11:a9:0a:f5:
96:20:26:8d:9e:c0:71:70:bd:e1:c9:1e:2c:ac:fb:14:9a:4c:
3b:21:30:07:d7:74:3d:8d:38:08:71:0b:81:8f:78:1b:cb:d5:
02:fa:6e:62:84:df:cd:65:5d:1c:c2:71:0c:0b:ea:61:d2:7c:
06:a7:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:54 2025 by rpki-client