Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
File: SnqRfdz8JujIezCFi28H8po9tD4.mft (raw, json)
Hash identifier: inLrUpAAdTNPYQ0BYbDvjTqmK/Qt8/vFM+u3MsUqOzE=
Subject key identifier: 9C:EE:B6:AF:E9:6F:66:EF:2E:A1:AE:56:17:7B:F8:3F:54:F6:18:2E
Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
Certificate issuer: /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Certificate serial: 019A73012782AB1B5D7AA808BB6A3B6E72F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
Manifest number: 16CF
Signing time: Tue 11 Nov 2025 13:00:46 +0000
Manifest this update: Tue 11 Nov 2025 13:00:46 +0000
Manifest next update: Wed 12 Nov 2025 13:00:46 +0000
Files and hashes: 1: P2xh5AQS8g63oefSEJQg-RsTiE4.roa (hash: fyGkFWMTxDql0OoutRE6aQhGU1Ek1V6QoGNhwV3E3j8=)
2: SnqRfdz8JujIezCFi28H8po9tD4.crl (hash: E4bMY2icMBYzwtDYVEeN2BRnXmVL2lypEyTD9nK4Mps=)
3: wZuLHZACRgaqannQqtWTgy9AnFY.roa (hash: ArTL5+VwNfVl+VzsgeZQzp979burQZd57vVQg0xpNM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:27:82:ab:1b:5d:7a:a8:08:bb:6a:3b:6e:72:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Validity
Not Before: Nov 11 13:00:46 2025 GMT
Not After : Nov 12 13:00:46 2025 GMT
Subject: CN=9ceeb6afe96f66ef2ea1ae56177bf83f54f6182e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:34:e5:f4:2b:51:f5:92:ed:5d:63:fe:c6:
83:3d:cc:eb:e2:a8:1b:4f:5d:41:b2:10:a5:98:1b:
39:93:4f:c6:5b:e4:d6:09:70:84:33:8a:86:ca:37:
8c:4d:19:f6:d5:2c:c2:0d:0e:17:1a:70:30:bc:0a:
15:fe:28:3e:97:21:ff:12:e0:18:e4:0e:a2:8e:b7:
d4:de:9b:61:0b:f8:59:c8:cf:9b:b1:57:28:dc:54:
57:e9:65:21:b3:d3:74:75:59:e5:e7:2b:05:c2:e8:
ad:84:9c:a2:1e:64:77:ca:6d:f6:fd:5c:7e:7b:2b:
bb:f6:30:74:45:9b:ef:58:92:61:29:9a:93:33:cd:
14:b4:52:e9:7f:d2:75:82:8a:5c:c5:32:e9:59:50:
85:b7:44:ec:c8:ff:ac:86:3d:97:07:a5:72:4d:55:
51:40:91:0f:f7:d3:26:7a:8c:33:dc:aa:4f:84:1a:
40:0c:b4:24:2e:52:64:7a:11:08:f6:af:6f:8d:45:
d7:de:2f:b8:0c:61:d5:06:9b:c7:f7:a2:28:f8:29:
a7:8b:b2:13:2b:03:0c:69:66:54:44:54:13:b9:90:
f7:49:50:8d:0d:b3:5c:f6:30:c7:41:68:dd:de:d3:
01:e8:c6:c9:e0:bb:80:36:fa:9a:84:e3:0d:82:85:
60:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EE:B6:AF:E9:6F:66:EF:2E:A1:AE:56:17:7B:F8:3F:54:F6:18:2E
X509v3 Authority Key Identifier:
keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c2:a8:83:1e:03:81:86:ec:c6:70:6f:41:02:31:6e:65:c5:
7b:37:8a:bf:01:bf:f7:32:82:e2:44:78:9a:f6:12:fa:fe:d6:
6d:f1:c7:82:e0:e1:ed:13:df:1c:c5:60:21:7b:09:c9:77:a5:
7b:d7:14:c4:8d:ab:84:2c:f0:e3:d2:bd:bb:dd:e5:1e:a8:d0:
7b:d8:20:d1:bc:ad:3b:6b:cb:1b:0e:a7:6b:67:05:e6:49:3b:
b9:f1:70:70:25:f3:8b:76:bc:28:72:f4:6e:fa:88:cc:f2:3c:
80:de:ff:f0:49:9a:b7:58:33:53:b3:d9:60:34:62:58:b1:13:
c1:2e:67:a1:30:ba:8e:bd:d3:05:e7:a6:42:f3:e7:b9:39:27:
66:01:b0:de:4c:41:16:f3:c1:f2:5e:be:a9:82:8f:62:70:7e:
09:b9:f7:d1:ba:9c:f7:cf:ae:4a:a8:31:5e:fa:82:27:d0:26:
07:c4:5f:fd:15:bf:c3:86:72:3e:97:74:b5:d1:4e:d5:a2:90:
ff:9b:2b:ef:23:91:02:1f:eb:bf:11:45:27:53:20:4a:6a:7a:
b2:a7:77:e8:c6:9c:ea:60:0b:15:69:56:b6:9f:aa:79:39:6e:
c5:27:86:75:9b:d9:bc:ba:ee:17:b1:39:9e:b5:c3:3b:31:3e:
e9:e9:df:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 19:53:08 2025 by rpki-client