Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
File: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft (raw, json)
Hash identifier: I79j/xCJ25FlvG4NAdWrVjMc9+WzGcsFluog7BYDsIk=
Subject key identifier: B1:63:68:DA:F6:73:8E:88:45:E8:0C:33:E2:99:21:A8:CE:16:BB:A3
Authority key identifier: 49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
Certificate issuer: /CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Certificate serial: 019874191D961F130EE9196B357804809A71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
Manifest number: 01BF
Signing time: Mon 04 Aug 2025 08:00:59 +0000
Manifest this update: Mon 04 Aug 2025 08:00:59 +0000
Manifest next update: Tue 05 Aug 2025 08:00:59 +0000
Files and hashes: 1: 2VOoNC3U3dbfOvp8BLzsJ1f-ifE.roa (hash: /4n1vWOP9xioYbfhWLfqMCZdtH551Gxmhk/RZPxKlZ0=)
2: 75LTo_jTlCg81UcwDjwfJUQMDKk.roa (hash: EkR0b+zKTp/aZ94o/SjZ2ZZg+QA0fvdyyS6BFZkQ6d8=)
3: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl (hash: 8adqH71aBSbJ7yvgX5Qik1s2rZSD0vIqko41Dl/i3jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:1d:96:1f:13:0e:e9:19:6b:35:78:04:80:9a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Validity
Not Before: Aug 4 08:00:59 2025 GMT
Not After : Aug 5 08:00:59 2025 GMT
Subject: CN=b16368daf6738e8845e80c33e29921a8ce16bba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:b3:93:0d:2a:f0:0f:69:57:30:19:0e:fe:
92:24:1c:41:f1:51:65:05:72:b0:6c:b2:1f:20:68:
7a:ee:b5:9f:f6:61:7d:1a:fc:60:5d:9c:53:29:5e:
b7:88:e0:04:ca:60:2a:c5:76:bb:59:10:8f:22:aa:
35:50:65:24:05:60:34:2e:ee:11:a9:d2:aa:4e:47:
97:b9:7a:31:5e:5e:1b:76:64:79:7e:f1:df:77:54:
eb:ad:73:11:81:2f:d5:7d:cb:61:a7:59:11:3b:df:
db:4d:74:99:73:a6:93:1a:db:d1:2b:ce:b5:01:bb:
5d:26:51:8f:01:73:2e:b5:cb:a5:41:90:59:0c:36:
1c:0e:78:b2:4b:1d:9f:40:7c:72:79:83:08:6c:cb:
55:69:45:59:ab:80:2c:ca:95:02:dd:5d:5b:06:9e:
30:e8:89:36:37:1b:19:fa:e9:c5:a0:15:4e:f0:91:
ba:56:ae:51:ac:03:25:84:de:16:e7:0a:2c:a7:6f:
c2:b5:29:91:e6:49:70:f5:0a:6d:85:22:67:7f:1a:
e8:9b:d2:4f:14:42:e1:df:c5:58:6b:f2:fb:94:64:
09:49:5f:7f:ac:20:f1:5c:93:77:87:37:b0:0c:75:
63:cf:c2:55:40:d5:cc:67:55:41:62:52:34:8c:84:
34:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:68:DA:F6:73:8E:88:45:E8:0C:33:E2:99:21:A8:CE:16:BB:A3
X509v3 Authority Key Identifier:
keyid:49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:01:00:aa:bc:7b:b4:8d:e5:fc:4f:5d:0d:43:10:64:11:9f:
44:70:4a:d6:75:82:4f:bf:02:77:43:f1:39:d7:1c:59:1c:ce:
2a:85:ee:1e:2e:f5:f1:62:01:3a:56:70:29:12:e8:0b:3e:04:
e8:e2:fe:01:f6:98:d0:54:86:15:11:da:bb:b8:2c:8d:31:8c:
65:b3:f6:e7:a9:6d:f4:cd:8a:29:ec:0b:a0:0f:04:fd:b1:25:
14:1b:c6:d7:6b:3f:d4:b4:a7:ae:e7:ea:4a:78:d4:4b:83:99:
dd:80:08:ea:18:08:1d:cf:79:ba:0b:1c:58:1e:7f:20:ec:71:
80:90:b1:c0:e2:db:26:2e:57:f0:c3:93:73:f5:f3:9b:04:dc:
a5:94:ab:f0:a1:5c:a0:61:cb:53:87:a2:76:99:ed:dd:53:83:
ab:92:9c:4d:17:c6:43:d5:5d:29:bc:9f:db:70:13:ad:3f:56:
f1:d6:ef:0a:8c:13:51:60:d7:09:c3:4f:b9:de:76:5b:74:69:
a2:2a:75:4e:cd:bd:48:05:4a:c6:61:0b:46:0d:2a:04:23:b2:
0b:44:bc:84:25:e6:2e:d5:cf:30:16:49:47:ab:f8:3e:8e:12:
ab:11:1d:a9:3a:91:89:89:50:04:65:2e:f8:39:ef:f8:67:97:
b2:8e:bb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:33 2025 by rpki-client