Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
File: SnqRfdz8JujIezCFi28H8po9tD4.mft (raw, json)
Hash identifier: 6ISy2AVHy9dsMA1QIrHgwZ/qPW6xCOHhuYH1eNjloko=
Subject key identifier: 97:F3:CF:89:74:48:DF:2E:53:D0:DF:20:03:DD:CE:F9:5C:19:D0:82
Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
Certificate issuer: /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Certificate serial: 0199FD34477153BFD4CFB8CF9F9F2374AD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
Manifest number: 1692
Signing time: Sun 19 Oct 2025 16:01:25 +0000
Manifest this update: Sun 19 Oct 2025 16:01:25 +0000
Manifest next update: Mon 20 Oct 2025 16:01:25 +0000
Files and hashes: 1: P2xh5AQS8g63oefSEJQg-RsTiE4.roa (hash: fyGkFWMTxDql0OoutRE6aQhGU1Ek1V6QoGNhwV3E3j8=)
2: SnqRfdz8JujIezCFi28H8po9tD4.crl (hash: kKRkBZWo1lQSQwusVzzqb7VdxlDgnhbDg9f0d5hY1lM=)
3: wZuLHZACRgaqannQqtWTgy9AnFY.roa (hash: ArTL5+VwNfVl+VzsgeZQzp979burQZd57vVQg0xpNM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:47:71:53:bf:d4:cf:b8:cf:9f:9f:23:74:ad:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Validity
Not Before: Oct 19 16:01:25 2025 GMT
Not After : Oct 20 16:01:25 2025 GMT
Subject: CN=97f3cf897448df2e53d0df2003ddcef95c19d082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:51:09:d7:66:93:40:81:22:c6:e8:30:28:
5b:86:73:29:f6:30:53:01:dc:db:84:25:6b:30:7d:
14:dd:d0:d0:e4:2a:95:b0:c4:38:1d:d5:39:07:48:
cc:33:dc:f5:37:4a:55:c8:e8:ad:55:1e:16:96:56:
a9:05:f1:57:c9:e2:c6:49:6a:fb:29:c7:1e:95:dc:
eb:93:0f:94:1a:f8:86:1a:a3:50:04:fd:0f:41:2a:
3e:79:f0:f9:75:d7:6c:d9:d7:23:07:96:47:66:6f:
4b:01:3e:cc:48:46:0e:dd:6c:99:59:ab:d8:e1:5a:
41:b3:be:96:18:7a:2e:be:51:82:a7:5e:9d:93:9c:
7c:b8:67:33:1b:07:a9:db:89:d1:05:4c:56:8d:36:
b3:1f:29:10:54:6a:56:69:e2:fe:33:ba:ac:d9:b7:
b0:67:0e:bd:2a:f5:9b:5a:f8:38:60:a3:0b:ef:72:
ec:c7:ec:87:3c:ec:41:ba:7e:04:1d:69:b5:98:09:
07:57:fa:6a:62:49:1a:80:10:d6:8e:65:10:ff:07:
e0:b4:b3:88:f5:af:d1:10:41:ec:5f:00:58:06:70:
ae:c9:09:56:33:ec:50:c0:89:d8:c0:46:15:d6:ca:
56:ec:8f:5e:09:f9:07:32:39:b9:68:4a:e3:6e:aa:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F3:CF:89:74:48:DF:2E:53:D0:DF:20:03:DD:CE:F9:5C:19:D0:82
X509v3 Authority Key Identifier:
keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bb:b0:4d:d7:d9:d3:f9:2c:59:8f:d6:57:c5:50:20:b8:48:
96:02:3d:78:6a:88:6d:71:cf:76:14:13:5f:db:2a:57:28:e3:
82:9d:b8:53:44:17:69:36:b1:84:35:2e:be:ab:0b:23:64:d3:
75:68:da:57:4f:57:38:6c:0b:1b:c1:79:ca:19:40:88:3e:d7:
ca:1e:b1:78:5f:d6:ac:dd:15:d2:c5:5b:09:5e:10:f0:8c:8f:
df:53:a1:8a:c9:21:5d:ce:4b:71:a9:e3:cc:dd:4d:0e:5e:1f:
e5:ee:d7:95:0a:19:d9:c9:40:66:2a:a5:82:9e:ce:d6:35:64:
10:ee:ce:e6:d0:12:63:70:db:2f:23:b6:59:45:de:df:82:6c:
2e:41:63:50:90:4c:22:1b:41:48:58:d2:a0:f6:32:5c:ec:18:
66:e0:15:e2:aa:ed:53:ca:4d:33:ca:2b:da:53:5e:ba:66:4b:
60:4b:f8:64:b5:52:94:a1:4a:8f:d3:14:17:94:6f:3d:c6:08:
52:27:0f:b4:80:1c:d6:d3:21:9f:2f:06:88:d3:85:80:10:79:
21:08:62:f3:c2:bf:fa:67:82:f8:a2:2b:38:80:ff:b6:d7:64:
3e:7e:30:9d:20:02:fb:40:e6:f2:10:42:83:e3:28:47:50:fa:
7d:36:69:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:30 2025 by rpki-client