
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
File: a-SeWhSwy_QQTANLVyoPnxVKmXU.mft (raw, json)
Hash identifier: 7cFJ6975db0aLVVvAg85/40ib0M7F9/kDl9RKQ3el7k=
Subject key identifier: FA:5E:4D:AB:5F:6F:F6:16:D7:CF:30:D2:B5:02:9A:E4:22:7E:95:53
Authority key identifier: 6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75
Certificate issuer: /CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
Certificate serial: 019887D699B050C2819F0BE843F26AAF7A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
Manifest number: 04C6
Signing time: Fri 08 Aug 2025 04:00:44 +0000
Manifest this update: Fri 08 Aug 2025 04:00:44 +0000
Manifest next update: Sat 09 Aug 2025 04:00:44 +0000
Files and hashes: 1: a-SeWhSwy_QQTANLVyoPnxVKmXU.crl (hash: zX1lD82G7bJMi1DlFcDcR/6o1m4InNuQrLXQYy7VGfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d6:99:b0:50:c2:81:9f:0b:e8:43:f2:6a:af:7a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be49e5a14b0cbf4104c034b572a0f9f154a9975
Validity
Not Before: Aug 8 04:00:44 2025 GMT
Not After : Aug 9 04:00:44 2025 GMT
Subject: CN=fa5e4dab5f6ff616d7cf30d2b5029ae4227e9553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:6b:d2:62:de:7c:1c:26:26:46:f2:36:6a:
2f:83:f2:ee:4b:07:7b:d8:9f:c3:cd:25:f1:de:f6:
c4:90:77:24:5c:e7:2e:e6:84:44:0a:c7:d4:17:29:
51:d4:da:ec:0d:0e:e0:3a:d2:23:da:cf:bd:11:a3:
f7:c8:dd:7e:36:e2:3d:22:67:3f:72:83:73:4a:22:
85:2d:58:81:10:d6:fe:88:2c:1e:f8:dd:ab:8e:1e:
27:42:eb:ca:ee:87:0f:b9:c1:c6:d8:94:ba:e4:3c:
89:d6:a7:1c:2c:8e:45:4f:fd:16:a9:38:79:c1:13:
74:2b:1e:c1:a7:12:e0:57:ee:fb:bc:4a:57:0d:20:
f0:8f:e2:af:7e:21:6d:a0:78:f0:e6:98:1a:98:f5:
84:0b:01:32:91:5c:7f:8c:b2:c3:5c:ff:d2:64:3f:
f8:a4:c5:e7:b3:61:b9:49:65:93:ca:30:36:5e:80:
c4:d7:ec:6d:bb:33:93:d5:eb:2d:e2:d6:5f:42:af:
e5:a2:34:8a:8f:d9:cd:29:6f:54:40:c1:70:04:83:
96:d6:a1:db:61:7a:56:b1:42:eb:77:59:47:01:d3:
82:73:32:e5:5a:25:8b:3d:06:17:e5:2e:63:6b:b2:
e4:3d:bf:58:8c:60:40:33:99:93:fa:eb:e7:7a:b9:
d5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5E:4D:AB:5F:6F:F6:16:D7:CF:30:D2:B5:02:9A:E4:22:7E:95:53
X509v3 Authority Key Identifier:
keyid:6B:E4:9E:5A:14:B0:CB:F4:10:4C:03:4B:57:2A:0F:9F:15:4A:99:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-SeWhSwy_QQTANLVyoPnxVKmXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/295c95-e367-4ca2-9bd5-ab997fc650e4/1/a-SeWhSwy_QQTANLVyoPnxVKmXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:87:b8:a9:f8:d5:8d:ec:09:79:0e:b7:f6:3a:65:5d:17:ba:
f4:00:75:0d:6f:8b:c7:42:e7:5b:24:60:63:8c:28:c2:aa:bf:
85:6e:47:5e:04:c1:a2:64:cd:d5:e7:70:18:eb:3f:47:95:83:
ba:00:e6:48:e8:28:ee:f6:67:c3:b4:ee:f9:f8:c9:2d:c7:6b:
5e:8c:29:77:f0:5c:0e:ff:a8:4d:ae:1d:c3:f9:64:ab:b2:d9:
87:6b:df:31:51:cd:d1:76:33:a0:bb:9f:57:6f:a4:73:a1:e5:
d7:66:0e:8c:16:05:f2:cf:22:4c:b0:25:ba:2f:82:dc:8d:19:
3e:12:cf:96:7b:f8:12:f7:85:bb:8f:ff:cf:9a:6a:e5:ca:82:
19:7c:6b:43:1c:89:04:e0:e5:a1:2e:a0:cf:49:21:59:9b:05:
f7:45:d2:e4:5b:56:8a:0c:4a:5d:01:de:e1:bd:24:92:4d:0a:
b9:b1:64:9d:b5:1c:0a:cb:53:b7:e7:81:c0:3a:15:0d:28:d0:
84:3a:2d:9b:c6:7a:9e:f7:d8:69:9f:96:6f:68:dc:94:06:b6:
63:41:5b:f9:49:9e:51:9e:59:ae:68:97:22:6b:7f:87:e0:c5:
fd:9d:a0:ac:64:2e:86:1f:b5:79:55:ad:cc:24:5f:ac:e5:4c:
4f:af:25:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:51:29 2025 by rpki-client