Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier: RAjF0W09u+QZ1/Rb5AfnUsYd2qwo0MpYgnFw2nkGmWk=
Subject key identifier: 84:01:F0:6F:BB:30:BE:BB:1D:18:BA:03:E3:A3:84:11:D4:0D:DA:FF
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 0199FB0EFD12594EDA8381EA90327179E3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number: 09D0
Signing time: Sun 19 Oct 2025 06:01:27 +0000
Manifest this update: Sun 19 Oct 2025 06:01:27 +0000
Manifest next update: Mon 20 Oct 2025 06:01:27 +0000
Files and hashes: 1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: UO2CkCN/51kktk8aqmPZzi2wsz5Au0arMDM4oiOiGS0=)
2: _2GPXm0W5pqTGfOSlDVI1ePI1QE.roa (hash: 9R3xfYmKYkm/k3uZLHas6Z2h3l83dSwTWGdwQsjNnVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:fd:12:59:4e:da:83:81:ea:90:32:71:79:e3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: Oct 19 06:01:27 2025 GMT
Not After : Oct 20 06:01:27 2025 GMT
Subject: CN=8401f06fbb30bebb1d18ba03e3a38411d40ddaff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:76:31:41:80:c4:cd:dd:a1:94:45:51:a5:
1b:85:a5:6c:af:86:90:bf:f0:bd:1c:b0:9d:af:06:
a5:1c:53:0c:33:9e:4e:33:d6:e0:b8:25:13:4b:36:
67:48:55:9a:e3:37:6c:98:11:a0:f0:78:06:c7:c1:
79:34:40:8f:e8:b2:4a:88:46:76:de:73:20:f0:b4:
87:71:b0:c9:ac:d3:31:cb:05:d0:d8:eb:ea:ff:4c:
b3:d5:8a:6c:69:9d:27:36:72:9d:fd:2f:39:22:12:
4c:1b:6a:25:a1:7f:33:a3:4b:a0:89:3e:48:1b:ff:
10:67:f7:3a:86:ce:56:74:a9:3f:d8:72:7b:56:1a:
9a:07:55:b5:1c:69:23:06:e2:d5:77:60:35:68:05:
a7:0c:2e:08:84:1f:17:e8:c8:a7:eb:1e:8b:f2:6d:
d0:0d:1a:d3:f4:e0:e7:7b:22:d4:13:35:d6:28:b7:
90:36:85:9a:1a:03:10:03:81:83:07:ae:2f:8c:f4:
46:e9:b2:af:b5:d8:40:26:94:4f:05:c6:c0:92:33:
e1:72:df:95:23:6b:96:4d:59:8e:5b:8e:e8:b2:28:
07:46:cb:47:ec:2a:75:a0:4a:ae:8e:e5:c9:9f:2c:
b7:75:62:d3:6b:b0:b4:df:5f:8a:88:42:70:f5:86:
67:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:01:F0:6F:BB:30:BE:BB:1D:18:BA:03:E3:A3:84:11:D4:0D:DA:FF
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e9:1c:25:7e:6d:34:cd:ec:df:ab:fe:8e:5f:73:a9:93:ed:
28:54:76:6c:a8:3a:7a:02:66:ee:f0:15:11:67:15:b2:03:c8:
e3:f0:8e:d3:5b:a6:48:27:10:ae:50:8b:d3:db:40:7f:66:dc:
08:77:4d:8a:12:fe:8a:b7:3b:b6:ad:c4:0c:78:8f:5a:d0:e3:
c4:41:37:08:c3:48:42:0e:dc:be:8f:2f:bf:7e:aa:28:06:2f:
51:cc:e2:c1:1f:64:f6:c3:1a:63:0e:88:2a:04:80:78:f8:65:
38:d1:d1:4e:2f:e8:9f:47:de:2c:c6:15:01:9d:53:83:0c:b2:
01:8c:d9:3b:df:c2:66:63:18:a6:b3:b7:ff:90:de:9b:90:f6:
39:9b:49:b1:54:0f:31:86:79:37:2d:b5:b6:30:5b:a7:44:46:
cb:b1:dc:c8:df:ca:c0:a1:cd:07:70:fd:1f:cc:19:86:28:a8:
47:f2:fd:a1:b6:a7:a4:c3:17:70:36:bd:47:70:a7:ef:21:32:
9d:25:ca:2f:4b:d4:9d:fc:7e:ed:e1:93:f9:48:06:f4:2d:2f:
56:f6:f0:77:41:7c:be:c1:d1:85:46:0e:9e:31:b8:8e:c6:e5:
32:64:35:e9:5b:22:ed:fa:8b:75:2d:28:62:ea:5b:07:d5:1f:
b1:62:81:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:10 2025 by rpki-client