Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
File: SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft (raw, json)
Hash identifier: xDCoF5BKg4R0hUHA89TCxWwipT5hnyuF9O4nLhtprik=
Subject key identifier: D2:9E:EF:01:B8:9E:C8:0A:6A:12:83:E0:EE:4B:BA:10:BF:D4:D2:D4
Authority key identifier: 4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D
Certificate issuer: /CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d
Certificate serial: 019A71EE9D10451673CA2C954AF7081EF92F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
Manifest number: 0871
Signing time: Tue 11 Nov 2025 08:00:54 +0000
Manifest this update: Tue 11 Nov 2025 08:00:54 +0000
Manifest next update: Wed 12 Nov 2025 08:00:54 +0000
Files and hashes: 1: SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl (hash: TO5Wsx95vEDEPmxnMfCgNJYz/IUe8bFmHP1v2nodxlg=)
2: Ss43uKVk12glj7GND1Q0DQOfOOI.roa (hash: afk/nkdp+pPj29GdfzUTdj7jJFKdBQ7g7Tl5QgpoC38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:9d:10:45:16:73:ca:2c:95:4a:f7:08:1e:f9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a755a6de5c167809f819c85f8c8e5a6e4ce127d
Validity
Not Before: Nov 11 08:00:54 2025 GMT
Not After : Nov 12 08:00:54 2025 GMT
Subject: CN=d29eef01b89ec80a6a1283e0ee4bba10bfd4d2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:af:f7:15:1d:98:ea:37:c1:fa:5d:1e:b2:78:
fe:60:5b:a2:d0:68:49:7e:0f:02:5d:d8:d9:a3:06:
61:2c:f8:92:ab:49:1d:28:55:97:83:b8:3f:eb:d0:
1e:5a:df:88:83:05:57:38:97:eb:16:ee:3b:71:0e:
54:83:f3:60:a4:fd:80:72:49:8f:a8:c4:a5:e1:3f:
47:d0:20:98:2d:60:15:64:be:d5:0a:ed:3e:a3:ca:
c2:ae:aa:0c:61:2d:d2:a2:b1:11:ab:9c:a6:af:69:
9e:f9:f7:6d:f6:79:f0:a0:1c:c5:7a:04:ef:18:1b:
5a:59:e6:5b:67:21:e5:d9:0a:27:d6:b5:df:f8:c3:
ec:c1:71:c0:77:cc:fb:b1:5b:44:37:33:26:45:f5:
93:9b:0a:c3:3f:85:30:fa:a8:8e:16:2b:a2:4b:73:
d1:da:91:a4:3b:54:12:3c:27:92:af:71:88:b3:35:
5c:96:b7:23:2f:42:f1:8f:54:d4:dc:bf:84:04:c0:
2f:31:3c:7d:3f:82:b6:aa:aa:74:b9:f8:cb:8a:dc:
2b:f7:dd:a7:9a:d3:6e:90:3e:d8:0a:58:66:a7:04:
1a:57:bb:5b:d1:4f:55:3a:42:a0:a5:32:39:61:5a:
fc:f4:f3:03:10:cc:40:4d:1b:ce:f0:c1:28:0e:ac:
6c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9E:EF:01:B8:9E:C8:0A:6A:12:83:E0:EE:4B:BA:10:BF:D4:D2:D4
X509v3 Authority Key Identifier:
keyid:4A:75:5A:6D:E5:C1:67:80:9F:81:9C:85:F8:C8:E5:A6:E4:CE:12:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnVabeXBZ4CfgZyF-MjlpuTOEn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/56f412-0b4b-4b75-88d0-96c4dc137b27/1/SnVabeXBZ4CfgZyF-MjlpuTOEn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2c:87:3e:14:b3:a0:ba:2b:53:f2:f4:e4:94:1f:ba:97:2c:
78:1b:bc:f9:30:fd:0a:dc:66:3a:52:b3:e2:32:4a:80:fd:cb:
d6:05:1f:22:53:b2:b1:bd:ed:06:46:4e:45:34:0f:25:82:a3:
4b:98:20:23:e2:9d:73:47:ed:99:a9:e7:33:b7:00:e7:21:f3:
0b:a9:2c:2b:3d:52:d6:bb:19:d1:09:8c:7f:08:9d:c0:43:ad:
75:af:b3:c4:ff:44:26:89:62:ae:8d:9f:98:10:1d:79:9d:5a:
9b:38:35:ad:d3:c3:c0:cf:47:8e:6b:23:a0:b5:2a:87:17:f8:
35:14:7a:00:25:a6:85:06:f7:d1:6f:a5:a3:36:3f:f1:17:c4:
cc:09:c9:57:e5:00:b4:fd:26:9c:82:dd:90:cc:8b:ff:61:5b:
b7:df:ff:95:48:ec:be:7a:ca:d4:b8:b6:5a:c2:4e:20:b3:7a:
5d:d1:57:71:38:dc:19:db:f9:6b:5a:c9:2e:4b:56:73:ad:60:
39:ef:fb:8a:c4:7e:6f:1b:b0:db:e4:f1:d5:58:d2:c3:ec:21:
3e:64:7b:11:f1:bd:1d:59:f6:fa:f4:eb:fc:9d:28:c9:d5:0a:
8d:23:bd:01:4f:fd:de:f1:ce:00:35:fa:21:48:7b:f7:82:a4:
36:91:58:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7p0QRRZzyiyVSvcIHvkvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNzU1YTZkZTVjMTY3ODA5ZjgxOWM4NWY4YzhlNWE2ZTRj
ZTEyN2QwHhcNMjUxMTExMDgwMDU0WhcNMjUxMTEyMDgwMDU0WjAzMTEwLwYDVQQD
EyhkMjllZWYwMWI4OWVjODBhNmExMjgzZTBlZTRiYmExMGJmZDRkMmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa/3FR2Y6jfB+l0esnj+YFui0GhJ
fg8CXdjZowZhLPiSq0kdKFWXg7g/69AeWt+IgwVXOJfrFu47cQ5Ug/NgpP2AckmP
qMSl4T9H0CCYLWAVZL7VCu0+o8rCrqoMYS3SorERq5ymr2me+fdt9nnwoBzFegTv
GBtaWeZbZyHl2Qon1rXf+MPswXHAd8z7sVtENzMmRfWTmwrDP4Uw+qiOFiuiS3PR
2pGkO1QSPCeSr3GIszVclrcjL0Lxj1TU3L+EBMAvMTx9P4K2qqp0ufjLitwr992n
mtNukD7YClhmpwQaV7tb0U9VOkKgpTI5YVr89PMDEMxATRvO8MEoDqxsDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKe7wG4nsgKahKD4O5LuhC/1NLUMB8GA1UdIwQY
MBaAFEp1Wm3lwWeAn4GchfjI5abkzhJ9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU25WYWJlWEJaNENmZ1p5Ri1NamxwdVRPRW4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81NmY0MTItMGI0Yi00Yjc1LTg4ZDAt
OTZjNGRjMTM3YjI3LzEvU25WYWJlWEJaNENmZ1p5Ri1NamxwdVRPRW4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS81NmY0MTItMGI0Yi00Yjc1LTg4ZDAtOTZjNGRjMTM3YjI3
LzEvU25WYWJlWEJaNENmZ1p5Ri1NamxwdVRPRW4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhyyHPhSz
oLorU/L05JQfupcseBu8+TD9CtxmOlKz4jJKgP3L1gUfIlOysb3tBkZORTQPJYKj
S5ggI+Kdc0ftmannM7cA5yHzC6ksKz1S1rsZ0QmMfwidwEOtda+zxP9EJoliro2f
mBAdeZ1amzg1rdPDwM9HjmsjoLUqhxf4NRR6ACWmhQb30W+lozY/8RfEzAnJV+UA
tP0mnILdkMyL/2Fbt9//lUjsvnrK1Li2WsJOILN6XdFXcTjcGdv5a1rJLktWc61g
Oe/7isR+bxuw2+Tx1VjSw+whPmR7EfG9HVn2+vTr/J0oydUKjSO9AU/93vHOADX6
IUh794KkNpFYJw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:53 2025 by rpki-client