Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
File: Srn5ALphi-jnySCWPN91e5BQ5Qk.mft (raw, json)
Hash identifier: KXI5XYWohq8QwQf0Jd8f+TBkzAAvTvAU0CqfwIu2fhM=
Subject key identifier: 31:96:BB:63:FE:5C:78:41:4E:BB:CA:AA:78:C8:CF:E4:7E:81:D4:34
Authority key identifier: 4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
Certificate issuer: /CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Certificate serial: 019936EF1AC78FB6BBAFD93B62A3F5AF83B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
Manifest number: 167A
Signing time: Thu 11 Sep 2025 04:01:03 +0000
Manifest this update: Thu 11 Sep 2025 04:01:03 +0000
Manifest next update: Fri 12 Sep 2025 04:01:03 +0000
Files and hashes: 1: M8uu5Q0gYtyHXgy-_HaJ3qJtLL8.roa (hash: 8T9tUH90Mj8IcimHEzzVqe1K5DRM0kq6VzTiqUA3vRs=)
2: Srn5ALphi-jnySCWPN91e5BQ5Qk.crl (hash: HLeW1umtd4lQP9+qkJXxS9KeZ3AKZUSDlkBNrbBpUvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ef:1a:c7:8f:b6:bb:af:d9:3b:62:a3:f5:af:83:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Validity
Not Before: Sep 11 04:01:03 2025 GMT
Not After : Sep 12 04:01:03 2025 GMT
Subject: CN=3196bb63fe5c78414ebbcaaa78c8cfe47e81d434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:30:fa:f9:a7:5c:0a:7f:58:3e:cf:63:21:11:
fb:2a:49:6e:29:bd:7e:98:09:3c:d6:8c:aa:89:58:
4f:16:19:1d:2f:fe:43:41:ce:4b:98:48:a8:43:c1:
5b:bd:44:ca:f1:e4:47:97:cd:bf:f2:b1:38:31:0c:
3b:12:f5:69:6c:1d:19:63:bc:1f:ae:13:30:f2:13:
55:39:14:44:3e:a3:d0:c9:1b:d2:46:04:88:d6:f9:
fc:ec:53:22:fc:10:b8:ff:8f:c5:ab:8b:7e:f5:a0:
64:c5:04:fa:0b:00:b1:16:49:32:13:34:bc:fe:85:
01:c1:2d:f2:20:d2:02:85:b2:12:8b:15:7b:ee:38:
89:32:72:55:24:65:7b:22:a2:aa:5a:31:38:5d:d5:
1a:7f:70:34:81:1b:04:ea:ca:43:c1:e7:a9:6c:d2:
db:05:a6:22:45:e0:ee:f4:4c:ba:89:64:64:0f:e5:
22:2d:b9:a1:60:b7:b4:28:03:48:be:dd:77:b4:19:
ef:6e:64:ae:14:67:96:38:7f:be:ee:77:1e:0a:d6:
0f:8a:74:62:15:33:ef:a2:ff:1f:95:86:51:eb:29:
5c:78:51:66:2e:3e:0e:f7:60:91:08:36:06:bf:b7:
42:bd:ea:cf:9b:8e:02:c7:0f:3b:45:18:a6:6f:3b:
d5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:96:BB:63:FE:5C:78:41:4E:BB:CA:AA:78:C8:CF:E4:7E:81:D4:34
X509v3 Authority Key Identifier:
keyid:4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0f:ed:20:31:3f:d9:65:c7:97:9e:f0:3c:11:97:87:f2:4a:
ef:7c:9e:82:bc:8d:57:1c:d2:ff:5a:a5:65:e8:aa:6c:58:b1:
db:e5:cd:53:e9:fa:18:47:7d:bf:97:85:82:6a:9d:8f:61:6f:
26:71:e5:4d:cf:3a:37:59:40:2d:f3:d0:44:f1:94:79:9e:ed:
34:45:67:ae:80:71:11:d0:22:af:0d:6f:a1:6c:7a:08:05:be:
7a:72:e0:b7:22:a8:8a:05:fe:f1:71:27:34:e2:bb:69:9d:30:
c8:28:b8:90:c3:44:56:a3:ed:07:74:86:0e:bf:88:90:ff:b3:
0c:62:9a:75:83:19:b1:17:d3:92:67:f0:c1:10:99:86:8f:b0:
06:e1:ac:d2:0b:25:31:3d:a3:f6:52:66:8f:80:d6:9b:16:1a:
83:c6:b9:de:7b:0a:35:50:f7:9b:c8:ba:31:57:48:54:90:7d:
13:05:d1:52:a8:77:78:5c:8c:51:41:67:2f:69:23:4a:b8:a9:
93:b2:94:f4:19:05:0a:9c:e1:95:57:5d:81:24:f7:86:54:31:
38:19:22:79:ea:bb:ec:4e:7a:38:df:eb:3a:dd:b3:0c:7c:4c:
72:e4:7d:6e:fe:d4:6f:2d:3b:57:c9:a1:b7:1e:d4:b7:19:f5:
90:41:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:00:40 2025 by rpki-client