Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
File: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft (raw, json)
Hash identifier: stMCtWIJXQdnOF5o/HfyEG0lt5yTqElPvRIG+JSphjQ=
Subject key identifier: 4D:86:1F:38:E0:1B:66:7C:F5:9D:80:96:11:B0:F1:A0:6A:42:A8:7F
Authority key identifier: 49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
Certificate issuer: /CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Certificate serial: 019A54F62AA580F978ED2DE8F5657D914B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
Manifest number: 02B8
Signing time: Wed 05 Nov 2025 17:00:10 +0000
Manifest this update: Wed 05 Nov 2025 17:00:10 +0000
Manifest next update: Thu 06 Nov 2025 17:00:10 +0000
Files and hashes: 1: 2VOoNC3U3dbfOvp8BLzsJ1f-ifE.roa (hash: /4n1vWOP9xioYbfhWLfqMCZdtH551Gxmhk/RZPxKlZ0=)
2: 75LTo_jTlCg81UcwDjwfJUQMDKk.roa (hash: EkR0b+zKTp/aZ94o/SjZ2ZZg+QA0fvdyyS6BFZkQ6d8=)
3: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl (hash: xUXwx8wYKM7DdcZF81w/wiXLt9j7w/yC5tqRqQyn2SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:2a:a5:80:f9:78:ed:2d:e8:f5:65:7d:91:4b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Validity
Not Before: Nov 5 17:00:10 2025 GMT
Not After : Nov 6 17:00:10 2025 GMT
Subject: CN=4d861f38e01b667cf59d809611b0f1a06a42a87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:38:7b:60:d7:00:d2:d8:d0:de:93:92:87:29:
6b:1e:17:17:bd:44:48:39:e6:c5:c9:9c:d4:62:aa:
69:ea:bd:1c:ca:6f:73:e2:fa:6c:dc:a5:75:c8:f7:
b6:5d:1e:cf:8c:96:d6:4a:28:fa:00:80:3c:38:c0:
42:ad:f1:66:7f:0c:4a:af:7a:b8:49:8d:14:6c:a1:
be:c1:ce:ed:4c:15:81:1c:87:12:e4:75:12:ed:a0:
c6:fe:2c:60:7c:d6:a9:29:90:82:42:34:fa:5a:28:
1a:76:69:c0:41:85:d5:78:78:87:00:b3:83:3d:a7:
21:2d:e2:d6:92:c5:b0:6f:6b:a5:ff:0d:b4:3e:8f:
79:df:fd:3d:96:fa:2b:e7:c5:e4:3f:b6:3e:b8:0a:
b7:89:69:f8:c2:ef:28:02:e5:1e:93:a4:83:22:f1:
7b:8c:4a:9d:aa:9c:ba:9c:23:d5:5d:4f:03:c0:9a:
1a:b8:79:d8:cd:91:26:ff:3c:cb:81:a7:d8:8c:66:
78:89:b1:b9:39:6f:77:c5:40:a3:74:49:b2:b0:fa:
25:50:cd:7d:f7:03:c6:2b:a6:d7:08:11:39:e3:ce:
9f:45:a1:ad:4a:84:f7:56:99:2e:5b:97:03:0e:19:
b6:56:4c:87:2f:61:95:86:26:53:18:7b:29:2a:43:
ab:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:86:1F:38:E0:1B:66:7C:F5:9D:80:96:11:B0:F1:A0:6A:42:A8:7F
X509v3 Authority Key Identifier:
keyid:49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f9:bd:5e:dc:59:bf:a9:41:50:e9:dc:d4:65:06:2d:0a:ca:
f1:77:33:8c:a2:d3:88:84:64:8b:94:e4:b1:8a:8e:f1:e8:04:
33:52:6a:30:2c:4e:1f:03:08:3c:d5:9d:0f:30:d8:2f:80:6f:
bc:ea:fb:1f:c7:91:6d:91:b6:a0:ec:8c:38:0f:1e:06:70:4b:
a8:59:8f:b3:e8:e5:96:19:53:76:3d:f7:4b:d9:8c:02:df:4e:
47:f7:fc:6d:0b:0c:cf:9e:b0:22:01:01:e4:8d:10:0d:c2:aa:
8d:b5:3c:b5:65:ee:ea:b4:a3:e0:1b:81:94:0b:0a:f0:59:7f:
58:e9:0f:aa:a6:a3:37:1c:ae:b2:5e:d1:8d:39:7e:5a:81:a0:
8c:48:04:9a:a4:2c:73:2b:41:d1:06:d4:18:e6:01:5d:44:69:
3b:a1:7d:cc:be:8a:e6:6e:15:a5:e5:e9:d9:7a:fa:0a:d9:6f:
92:7b:31:6d:fc:04:f9:db:78:23:b6:a1:7b:ef:96:b9:10:83:
18:2a:90:b2:03:e3:18:2a:2c:99:df:3f:8b:d5:4d:1d:9f:fd:
d5:f1:b7:68:41:07:23:4d:c5:66:eb:e3:46:a7:56:1c:f9:0b:
18:89:8a:e5:57:65:9e:9b:54:f1:2e:26:05:80:bc:34:f5:dd:
8c:70:2c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 00:36:44 2025 by rpki-client