Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier: 6MkN/KMPiMS5vP6pHJqo/1INjM4KStATRExfazLlkYI=
Subject key identifier: 06:F7:7C:D0:F6:B9:68:44:A9:1B:A4:FF:79:C2:6E:3D:AF:B9:64:D4
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 019A70DBECA60CC53E60A9BCB6960CA22560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number: 0A0D
Signing time: Tue 11 Nov 2025 03:00:52 +0000
Manifest this update: Tue 11 Nov 2025 03:00:52 +0000
Manifest next update: Wed 12 Nov 2025 03:00:52 +0000
Files and hashes: 1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: LmS6xVf4DcDjfg/8+uPIcdLSC7Bnv4ACMm0W7PwYn8w=)
2: _2GPXm0W5pqTGfOSlDVI1ePI1QE.roa (hash: 9R3xfYmKYkm/k3uZLHas6Z2h3l83dSwTWGdwQsjNnVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:ec:a6:0c:c5:3e:60:a9:bc:b6:96:0c:a2:25:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: Nov 11 03:00:52 2025 GMT
Not After : Nov 12 03:00:52 2025 GMT
Subject: CN=06f77cd0f6b96844a91ba4ff79c26e3dafb964d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:73:f8:15:a3:83:9c:be:94:ac:27:66:f2:
95:70:c1:e9:4b:07:da:15:c0:46:e1:f5:1d:29:03:
aa:f0:7a:64:f2:d7:41:ee:95:4d:11:64:f5:0d:bc:
68:ac:8a:dc:2c:8a:bc:bd:d5:53:b9:a4:bf:3b:25:
54:93:a4:37:c4:7d:c2:be:17:b8:8a:49:c6:23:52:
bc:c7:0e:eb:d5:62:05:d9:fe:36:b6:76:65:ce:56:
b1:22:fd:a5:e7:78:c9:ee:b5:89:7e:18:45:82:40:
b7:d9:b1:8c:b7:ef:cd:0d:63:e2:35:7e:92:4d:cc:
df:fd:94:4c:dc:13:0a:70:62:ba:5e:ff:b1:c7:68:
77:2c:e9:38:1d:fc:65:c4:41:d9:49:81:1e:35:7e:
6f:07:5b:f9:3e:50:60:b4:9a:92:a6:1c:a2:74:b0:
66:44:0c:89:a9:89:d2:fb:d6:d5:b8:57:7d:26:d5:
3e:13:b5:62:af:6e:fa:67:ea:4e:e5:86:d1:37:d8:
c9:ab:71:e3:8a:9a:bb:2f:83:9c:ee:00:14:dc:04:
51:2c:7e:70:d0:a4:8c:0a:a4:ce:36:72:8a:10:7d:
53:3e:76:cb:86:ce:d1:89:fb:12:03:56:30:ee:96:
46:22:b0:e3:bc:ec:93:8f:34:86:59:64:09:00:83:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F7:7C:D0:F6:B9:68:44:A9:1B:A4:FF:79:C2:6E:3D:AF:B9:64:D4
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:45:1a:a0:3e:9f:69:01:fe:da:b1:cc:ac:23:30:a1:c1:ca:
31:74:4f:93:bb:fc:14:25:e6:29:cc:8f:b2:42:e3:e3:d9:1d:
09:dc:91:59:67:fe:57:8b:30:d8:47:9d:99:c0:83:e0:16:7d:
6a:b6:07:a3:47:6f:18:c2:30:fa:08:f1:1d:37:0e:91:71:54:
ca:4b:6d:61:65:e1:00:9e:8f:d2:53:61:25:9f:40:aa:f5:b8:
34:0f:17:b3:f8:3d:41:fb:1d:68:18:bb:ac:3c:be:51:67:1c:
2e:78:1b:f5:03:f8:49:20:cd:4b:19:86:eb:67:ee:9c:7e:94:
92:e2:f8:de:0d:54:fa:a1:be:05:50:ab:56:91:3d:ba:ce:86:
98:f1:80:67:d2:51:f7:48:70:7a:b2:e2:f9:60:c9:a8:e8:64:
41:21:d8:20:05:18:83:9a:a4:e9:c0:4a:ec:64:09:84:57:6f:
f8:5d:ac:19:5e:36:3b:64:28:02:cf:20:8b:df:cd:e3:49:68:
fc:7a:d1:07:ad:ce:49:41:7c:80:06:61:1b:39:72:64:23:ef:
44:01:9c:ea:cb:f4:d4:73:c7:05:42:e0:e4:92:70:44:ee:5b:
f5:fd:0b:7b:59:9c:7d:18:70:57:48:be:ae:75:64:1e:35:a3:
41:1f:fb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:45 2025 by rpki-client