Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
File: Srn5ALphi-jnySCWPN91e5BQ5Qk.mft (raw, json)
Hash identifier: /MPE/XVSsdbrphHFc9W7MJZB//xQDdz5NmxMz2RI6XY=
Subject key identifier: B4:EF:62:B2:96:85:F1:CC:E1:5C:7E:FD:EA:83:6C:C1:E7:3C:8B:76
Authority key identifier: 4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
Certificate issuer: /CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Certificate serial: 019A2477DD1E62FCB08E92D7EA3567830AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
Manifest number: 16F5
Signing time: Mon 27 Oct 2025 07:00:26 +0000
Manifest this update: Mon 27 Oct 2025 07:00:26 +0000
Manifest next update: Tue 28 Oct 2025 07:00:26 +0000
Files and hashes: 1: M8uu5Q0gYtyHXgy-_HaJ3qJtLL8.roa (hash: 8T9tUH90Mj8IcimHEzzVqe1K5DRM0kq6VzTiqUA3vRs=)
2: Srn5ALphi-jnySCWPN91e5BQ5Qk.crl (hash: 5QkR8v3dxFGhPNoJG1Exb5HG5/LwX9JL0z80q/0z6y8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:dd:1e:62:fc:b0:8e:92:d7:ea:35:67:83:0a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Validity
Not Before: Oct 27 07:00:26 2025 GMT
Not After : Oct 28 07:00:26 2025 GMT
Subject: CN=b4ef62b29685f1cce15c7efdea836cc1e73c8b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:8b:0f:58:b5:1c:71:5b:a3:20:0c:94:8c:
81:55:29:f8:88:dd:11:95:d9:72:d6:b9:c7:c7:84:
19:52:7c:0f:10:4f:32:69:e9:b1:51:bd:53:ee:08:
90:c4:7c:90:1f:b2:7b:ce:14:f0:0a:5b:ab:8c:26:
1c:a6:44:8f:e7:d7:a5:82:b0:93:eb:cf:9e:ef:f7:
91:8f:c8:3a:17:95:a1:38:81:12:f8:84:6c:8a:d2:
39:a9:7d:6c:b1:2b:6c:d3:27:fe:1b:5f:bf:40:d7:
34:d7:12:20:bc:e5:4d:18:1b:cb:ac:66:0e:fb:6b:
2e:6e:7d:c0:a3:3b:e1:aa:d7:b1:07:8a:99:db:b9:
c9:dc:01:31:d0:fc:54:3d:36:c2:36:12:64:f7:4e:
5d:37:42:cc:41:6b:e7:a0:29:b7:b3:92:83:0d:74:
42:2d:0a:48:70:4d:97:b5:6f:12:95:2f:d8:87:15:
0a:6d:41:04:9f:71:74:b9:1c:6d:15:37:43:7f:3c:
60:51:c3:1d:73:9c:ac:33:43:17:67:bf:12:10:3a:
05:e6:52:77:23:9c:9f:e2:70:78:17:c7:47:ed:5e:
00:a2:f2:84:ba:74:a4:ab:1a:be:72:ad:0e:ea:b5:
d1:93:16:13:72:c8:ac:ea:2f:8f:a9:2d:7e:10:2f:
b5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:EF:62:B2:96:85:F1:CC:E1:5C:7E:FD:EA:83:6C:C1:E7:3C:8B:76
X509v3 Authority Key Identifier:
keyid:4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1f:24:f7:f7:53:2c:34:b5:dc:60:2a:81:50:65:84:4b:94:
78:1a:ab:83:82:d8:62:96:a0:d2:ba:be:98:c4:84:2a:dd:c7:
4d:a8:9e:b5:90:1a:b2:66:a5:e8:79:b7:58:ee:c9:7d:8a:80:
c0:08:55:22:a8:90:8f:c4:05:65:78:26:5d:21:08:e8:db:92:
e4:6a:43:d7:58:e6:cc:a3:16:2d:de:15:a2:4c:a3:12:9d:03:
b4:8b:61:85:a1:27:2b:3a:6f:0c:19:4e:72:28:4a:4f:2e:f2:
d5:db:42:3b:1d:9d:bd:a9:ad:fe:84:cc:bb:bb:aa:c6:fc:5a:
8a:97:84:41:6a:cf:e7:46:30:99:9e:3f:94:e6:87:4c:e6:d0:
9b:70:65:8b:af:fa:ec:77:79:7d:80:d2:90:c6:96:00:5a:69:
41:c7:2e:57:5e:26:0c:64:7e:d0:00:a1:7f:f0:1b:9c:60:86:
71:d5:7b:c2:bb:3d:f9:45:a8:25:02:44:e3:18:4f:c9:d7:18:
b3:4a:db:6c:8d:1f:02:cc:85:fe:d7:ed:8a:be:d1:af:22:d2:
c6:26:51:e1:4b:bd:be:b9:4d:16:1f:8f:5a:76:e2:55:21:44:
c7:ba:b2:60:21:cb:c9:94:77:c4:11:f8:91:d8:ce:73:80:98:
06:da:18:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:21:06 2025 by rpki-client