Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
File: 5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json)
Hash identifier: 2G9F1mKqw2+9NwbyZq5969YU/2GjMW9522ZEihd5wpE=
Subject key identifier: C2:35:31:47:96:94:F8:ED:4A:EA:A6:B5:6A:5A:1F:AC:A5:2A:75:39
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Certificate issuer: /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial: 0199FB45FF10BEBB5A500E6C3B82C6674ACB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 07:01:32 +0000
Manifest this update: Sun 19 Oct 2025 07:01:32 +0000
Manifest next update: Mon 20 Oct 2025 07:01:32 +0000
Files and hashes: 1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: ViCIQrkiNUQvuTKxxsuhIT4EY/uGZJEGPl7kn+vnbJ4=)
2: zohWKsAJg1AB7BcLgO5mP203ZJ8.roa (hash: qyr9zS4mbTGjUUiqIIIhploYFAxZHgevrVarc4Vt5k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ff:10:be:bb:5a:50:0e:6c:3b:82:c6:67:4a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Validity
Not Before: Oct 19 07:01:32 2025 GMT
Not After : Oct 20 07:01:32 2025 GMT
Subject: CN=c23531479694f8ed4aeaa6b56a5a1faca52a7539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:42:82:91:4e:2b:75:72:9f:dc:ff:35:93:
6b:08:84:0c:68:89:ad:97:6d:fc:82:af:5e:8a:3b:
b8:b2:05:c0:08:c9:8c:01:2d:ec:91:e6:11:a4:9a:
4b:97:6c:f3:a8:2e:bd:b6:2e:fb:f9:32:ae:51:ba:
d2:c0:d4:a2:3a:c3:50:39:0e:f5:e9:a1:b4:b9:84:
bf:51:c6:04:23:d5:6c:41:06:b7:96:32:ac:2f:bb:
e6:73:18:99:c8:7b:4c:2b:8c:76:99:0e:56:7f:a1:
7d:9b:a0:68:34:28:64:d7:67:d8:f8:03:aa:7d:05:
c7:31:b8:5f:d8:9b:b4:a9:59:aa:72:0b:b9:03:0c:
a0:53:de:91:88:74:e2:98:33:75:9b:3e:3c:7c:87:
af:e4:10:73:0e:da:0e:31:ce:49:64:af:f1:3e:d0:
a0:c3:18:07:2a:ed:bc:45:00:3e:3a:d1:07:ac:92:
66:61:c3:3b:f6:25:30:a5:fd:c2:de:3b:2c:cd:19:
7e:57:74:d3:b8:8c:12:20:8a:d4:11:8e:34:c8:d6:
d4:6a:1b:ea:82:ec:29:a7:78:93:e2:01:61:73:fd:
b6:bc:2d:66:4d:01:de:f8:86:72:60:41:38:fc:5b:
99:20:fb:a3:6d:9f:d8:f5:9b:14:f2:c5:78:cd:70:
87:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:35:31:47:96:94:F8:ED:4A:EA:A6:B5:6A:5A:1F:AC:A5:2A:75:39
X509v3 Authority Key Identifier:
keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a0:4f:b5:39:36:64:fe:36:52:07:cf:e2:58:48:a3:c6:86:
32:d7:2a:f1:1b:2f:99:63:fa:a7:7b:aa:5d:62:70:8e:b1:66:
5b:c1:7f:37:04:21:b1:62:f7:94:d0:9d:af:2f:8b:3d:9a:04:
00:53:37:52:28:23:8a:c7:4b:c1:3e:bd:42:aa:c1:3f:fc:a9:
f8:7f:a7:3b:df:1e:36:f9:de:7b:ae:aa:8e:3f:9f:98:78:f8:
27:15:20:af:2f:c4:36:81:02:d9:d2:32:b0:27:e8:05:db:35:
bb:b6:48:7d:4b:f8:24:1b:92:d2:98:88:e1:78:d9:30:40:14:
18:c1:f6:32:20:91:64:00:9f:ce:5b:b3:72:4c:5b:85:02:30:
45:6c:ee:54:6b:f7:76:db:91:dc:6d:19:2b:8c:96:90:3c:ec:
1e:93:b1:05:74:b2:92:5f:f3:d0:fc:bf:72:51:52:75:9f:53:
8a:5b:50:16:46:8d:10:9a:6e:d9:1a:61:fe:74:e4:57:76:dd:
8d:06:8d:30:9a:28:27:78:ae:b2:9d:5c:ea:5f:8d:63:3a:1c:
88:60:08:70:4e:27:04:9c:f6:e3:24:13:27:f9:73:e6:8d:cf:
ce:a1:29:78:79:76:56:7b:4c:e6:7a:51:a2:92:c5:30:c4:4d:
c9:e1:ae:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rf8QvrtaUA5sO4LGZ0rLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzlkNDhhMThjM2MwZDJlNGU2M2E3YjgzODg1YTc5Njc3
NTU4MjYwHhcNMjUxMDE5MDcwMTMyWhcNMjUxMDIwMDcwMTMyWjAzMTEwLwYDVQQD
EyhjMjM1MzE0Nzk2OTRmOGVkNGFlYWE2YjU2YTVhMWZhY2E1MmE3NTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRFCgpFOK3Vyn9z/NZNrCIQMaImt
l238gq9eiju4sgXACMmMAS3skeYRpJpLl2zzqC69ti77+TKuUbrSwNSiOsNQOQ71
6aG0uYS/UcYEI9VsQQa3ljKsL7vmcxiZyHtMK4x2mQ5Wf6F9m6BoNChk12fY+AOq
fQXHMbhf2Ju0qVmqcgu5AwygU96RiHTimDN1mz48fIev5BBzDtoOMc5JZK/xPtCg
wxgHKu28RQA+OtEHrJJmYcM79iUwpf3C3jsszRl+V3TTuIwSIIrUEY40yNbUahvq
guwpp3iT4gFhc/22vC1mTQHe+IZyYEE4/FuZIPujbZ/Y9ZsU8sV4zXCHoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMI1MUeWlPjtSuqmtWpaH6ylKnU5MB8GA1UdIwQY
MBaAFObJ1IoYw8DS5OY6e4OIWnlndVgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMt
ODQ4ZjczZGY4YjIwLzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9kMjVlMTQtNjI1ZC00N2I1LWEwZWMtODQ4ZjczZGY4YjIw
LzEvNXNuVWloakR3TkxrNWpwN2c0aGFlV2QxV0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6BPtTk2
ZP42UgfP4lhIo8aGMtcq8RsvmWP6p3uqXWJwjrFmW8F/NwQhsWL3lNCdry+LPZoE
AFM3UigjisdLwT69QqrBP/yp+H+nO98eNvnee66qjj+fmHj4JxUgry/ENoEC2dIy
sCfoBds1u7ZIfUv4JBuS0piI4XjZMEAUGMH2MiCRZACfzluzckxbhQIwRWzuVGv3
dtuR3G0ZK4yWkDzsHpOxBXSykl/z0Py/clFSdZ9TiltQFkaNEJpu2Rph/nTkV3bd
jQaNMJooJ3iusp1c6l+NYzociGAIcE4nBJz24yQTJ/lz5o3PzqEpeHl2VntM5npR
opLFMMRNyeGuNw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:06 2025 by rpki-client