Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json)
Hash identifier: ypVrBNGj4v+odcCeT+s75FljRUyEZy/lVbnTOAhZgYs=
Subject key identifier: 9A:DC:51:E4:3D:EC:09:26:16:D2:A3:64:EE:EF:A9:39:75:DB:DC:F3
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial: 019A2D7B54991EB9555529C5E67EF4630A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
Manifest number: 16FC
Signing time: Wed 29 Oct 2025 01:00:48 +0000
Manifest this update: Wed 29 Oct 2025 01:00:48 +0000
Manifest next update: Thu 30 Oct 2025 01:00:48 +0000
Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: 4zAky96gF/WXqsXqD0Fe+KzJhAOxNxcwYXS2xvGfUpM=)
2: zohWKsAJg1AB7BcLgO5mP203ZJ8.roa (hash: qyr9zS4mbTGjUUiqIIIhploYFAxZHgevrVarc4Vt5k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:7b:54:99:1e:b9:55:55:29:c5:e6:7e:f4:63:0a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Validity
Not Before: Oct 29 01:00:48 2025 GMT
Not After : Oct 30 01:00:48 2025 GMT
Subject: CN=9adc51e43dec092616d2a364eeefa93975dbdcf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:17:dc:08:9b:2a:fe:13:d7:9c:d2:84:7f:f6:
4a:d0:5b:15:1c:8c:08:1e:24:aa:ca:cc:42:c8:60:
4c:4d:da:f7:89:b8:6e:bc:65:69:50:82:1d:db:38:
bb:4b:33:ba:c4:0a:8c:43:56:1c:ee:b3:5d:8a:15:
7c:73:18:db:76:57:11:38:14:a9:45:d4:85:73:b4:
c1:99:6b:47:f9:8f:90:7c:b0:79:de:15:4c:26:1a:
00:c4:ff:64:86:c5:2a:a1:2c:84:85:8b:69:8d:0d:
34:81:3a:f6:5c:c5:22:e1:ef:c7:dd:cd:89:e6:0b:
f1:80:72:17:94:c2:93:62:cc:cd:3b:d3:51:3d:cf:
dc:e0:07:1e:de:13:9d:4b:f2:22:8e:df:49:07:a0:
89:dd:5e:5a:56:6e:a8:7f:bc:2d:f3:90:d9:ea:8e:
b0:65:17:f2:31:fb:f4:f5:3f:2e:1f:56:76:b1:91:
69:a6:2c:86:48:cc:f3:60:25:24:60:e8:4a:52:fc:
68:99:d4:f7:52:87:f3:bb:3a:92:40:c5:6a:2d:e0:
0f:4e:21:dc:d3:43:11:71:14:bc:e5:12:63:6c:fe:
36:f9:62:20:ad:3c:0b:61:d6:2e:17:9e:b9:66:21:
5a:39:b2:77:9b:12:b2:48:56:88:fd:88:95:f8:99:
cc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:DC:51:E4:3D:EC:09:26:16:D2:A3:64:EE:EF:A9:39:75:DB:DC:F3
X509v3 Authority Key Identifier:
keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6b:75:60:bb:34:8a:b9:48:71:0e:92:47:ee:be:01:00:32:
0b:e0:88:35:ed:62:24:d5:fc:06:ae:88:aa:c6:7d:66:66:c7:
a7:9c:74:e1:aa:7c:71:c5:5a:11:bc:09:af:4e:81:c9:e8:7b:
61:f9:76:62:11:c5:05:2f:59:85:8e:c0:80:a6:35:e4:47:41:
22:d4:19:53:d7:cf:0e:53:94:c7:f5:84:6e:db:bc:48:7e:0f:
4b:7c:fa:81:63:4c:5c:43:f6:86:c8:8b:35:fd:06:27:7e:0d:
16:9d:26:99:1d:54:1f:51:50:8a:43:9e:cc:6e:9b:35:36:07:
dd:90:32:df:1b:08:7d:e4:a7:cc:fd:cb:a4:9a:a7:15:9f:fd:
12:e3:cf:34:e9:17:35:22:4a:e4:db:fa:c5:55:49:c6:e8:fe:
46:df:06:3b:8d:87:60:11:fb:78:d6:01:74:c5:94:3b:5d:82:
6e:da:f5:41:c3:8d:74:cf:87:2f:f1:51:76:6b:fd:b9:5b:64:
60:30:3a:a6:50:74:08:87:8a:36:30:91:f2:f1:91:4b:42:63:
41:15:5b:96:23:00:58:63:56:f6:a7:e7:be:3e:b0:bd:e6:cd:
82:b1:66:8a:27:86:91:84:83:f6:c9:5e:33:67:84:79:ec:81:
4e:10:fc:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZote1SZHrlVVSnF5n70YwpFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzlkNDhhMThjM2MwZDJlNGU2M2E3YjgzODg1YTc5Njc3
NTU4MjYwHhcNMjUxMDI5MDEwMDQ4WhcNMjUxMDMwMDEwMDQ4WjAzMTEwLwYDVQQD
Eyg5YWRjNTFlNDNkZWMwOTI2MTZkMmEzNjRlZWVmYTkzOTc1ZGJkY2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RfcCJsq/hPXnNKEf/ZK0FsVHIwI
HiSqysxCyGBMTdr3ibhuvGVpUIId2zi7SzO6xAqMQ1Yc7rNdihV8cxjbdlcROBSp
RdSFc7TBmWtH+Y+QfLB53hVMJhoAxP9khsUqoSyEhYtpjQ00gTr2XMUi4e/H3c2J
5gvxgHIXlMKTYszNO9NRPc/c4Ace3hOdS/Iijt9JB6CJ3V5aVm6of7wt85DZ6o6w
ZRfyMfv09T8uH1Z2sZFppiyGSMzzYCUkYOhKUvxomdT3UofzuzqSQMVqLeAPTiHc
00MRcRS85RJjbP42+WIgrTwLYdYuF565ZiFaObJ3mxKySFaI/YiV+JnM6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrcUeQ97AkmFtKjZO7vqTl129zzMB8GA1UdIwQY
MBaAFObJ1IoYw8DS5OY6e4OIWnlndVgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMt
ODQ4ZjczZGY4YjIwLzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMtODQ4ZjczZGY4YjIw
LzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGt1YLs0
irlIcQ6SR+6+AQAyC+CINe1iJNX8Bq6IqsZ9ZmbHp5x04ap8ccVaEbwJr06Byeh7
Yfl2YhHFBS9ZhY7AgKY15EdBItQZU9fPDlOUx/WEbtu8SH4PS3z6gWNMXEP2hsiL
Nf0GJ34NFp0mmR1UH1FQikOezG6bNTYH3ZAy3xsIfeSnzP3LpJqnFZ/9EuPPNOkX
NSJK5Nv6xVVJxuj+Rt8GO42HYBH7eNYBdMWUO12Cbtr1QcONdM+HL/FRdmv9uVtk
YDA6plB0CIeKNjCR8vGRS0JjQRVbliMAWGNW9qfnvj6wvebNgrFmiieGkYSD9sle
M2eEeeyBThD8Aw==
-----END CERTIFICATE-----
Generated at Wed Oct 29 08:08:20 2025 by rpki-client