Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
File: Snz-iBFothWgvUEcwxS9BApNJ_Y.mft (raw, json)
Hash identifier: 8/8ue4nGloVkLBltk/ga64m4YFxBOCYG7bGWLkUkAWk=
Subject key identifier: 53:9C:CE:A0:E5:F6:68:9A:D1:DD:89:38:B7:A0:65:64:EB:13:C2:85
Authority key identifier: 4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
Certificate issuer: /CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Certificate serial: 0199FB0EC7DF7E4F9A1E0FA90D6DC771F7F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 06:01:13 +0000
Manifest this update: Sun 19 Oct 2025 06:01:13 +0000
Manifest next update: Mon 20 Oct 2025 06:01:13 +0000
Files and hashes: 1: Snz-iBFothWgvUEcwxS9BApNJ_Y.crl (hash: 2l1zdal8xlR4rC1rRueM2RAtbrvZvnG/lcrnYw1VYzk=)
2: h_GYODiIwy0tVyLDmKAyNCK7Ui8.roa (hash: EVyFdfHvchtGYnioVymnJTf1ceZLIXds+uNSkp7sgG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:c7:df:7e:4f:9a:1e:0f:a9:0d:6d:c7:71:f7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Validity
Not Before: Oct 19 06:01:13 2025 GMT
Not After : Oct 20 06:01:13 2025 GMT
Subject: CN=539ccea0e5f6689ad1dd8938b7a06564eb13c285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:7c:f8:14:f6:4e:13:87:56:26:33:d7:f6:
65:69:e5:ac:99:9a:a7:d2:53:59:bc:0c:cd:5b:a4:
3e:5b:44:fb:02:9d:3b:0e:47:2e:da:c1:5c:f1:5d:
87:24:72:c5:94:0e:36:96:a6:c0:80:35:c4:73:87:
e4:fe:5c:57:eb:94:81:bb:b1:c3:c3:00:15:b8:d2:
0e:ce:13:35:2f:20:b1:f6:16:f1:8d:c3:cd:54:6c:
24:7c:fa:d5:d6:92:11:f3:8d:69:06:2a:1b:c7:01:
78:ba:01:02:27:19:86:ba:8c:97:a6:8a:17:71:7b:
2a:08:14:63:59:3c:16:00:37:49:b7:70:7d:a3:ed:
91:35:c3:42:d9:e5:4b:af:f8:a8:94:81:20:22:e1:
ad:72:1e:57:6c:2d:1d:27:a6:ad:30:a2:54:47:e2:
8e:35:48:4f:16:a8:48:d5:34:b7:0c:05:6a:5f:ca:
5d:d3:91:29:e3:59:23:f8:6f:69:b3:f1:c5:30:69:
10:6f:d4:ec:33:8f:59:31:f9:3b:76:a5:c2:52:83:
76:73:88:e0:cb:43:35:e9:09:21:f6:5f:b9:1b:a0:
22:83:2c:2b:9f:64:dd:0d:d4:65:31:d2:6b:23:43:
45:83:72:33:af:e9:01:d7:57:79:e3:49:8a:77:3e:
d9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9C:CE:A0:E5:F6:68:9A:D1:DD:89:38:B7:A0:65:64:EB:13:C2:85
X509v3 Authority Key Identifier:
keyid:4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:4f:49:5a:15:c8:46:d2:8a:c2:e3:82:94:cc:3e:2b:b3:7f:
43:18:71:29:b6:00:b1:4f:d6:3f:21:1e:63:20:83:dd:d4:f8:
11:f2:9c:a7:9d:4b:dc:79:de:c6:94:d9:92:b5:c6:a9:8d:41:
97:78:3a:f9:76:7b:d2:3c:a5:fa:7f:a7:9a:7b:3c:14:8b:08:
14:87:d4:1f:2d:3a:e8:7c:20:da:96:f9:65:fd:1b:4e:bd:05:
59:6a:5a:fa:b9:4d:d1:e4:26:6c:66:d5:67:6e:60:1e:64:1e:
c6:de:fe:3c:4b:79:62:fc:7f:d7:f6:fb:3b:e9:3f:03:7c:62:
d4:8d:1e:42:40:ab:0f:15:ab:05:4e:8a:f3:ea:c6:a9:a9:6f:
ed:75:2e:de:17:85:65:e4:a1:c8:c6:c4:66:27:63:4d:f9:40:
38:1c:7d:44:c5:04:8f:5e:44:c2:98:ee:2b:86:e4:cb:36:40:
9c:04:94:0f:e6:5c:49:24:f6:79:d5:d6:18:c4:22:50:e6:f6:
ed:42:a5:32:fb:99:f3:9e:d8:de:ee:17:06:74:07:3e:8e:7d:
8e:9a:4e:83:66:ba:25:e8:5c:4c:5b:3b:f2:b5:4a:1c:88:32:
b0:8b:4e:d1:52:07:f2:de:95:84:1a:21:85:a6:68:08:ca:38:
97:cc:12:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Dsfffk+aHg+pDW3Hcff0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhN2NmZTg4MTE2OGI2MTVhMGJkNDExY2MzMTRiZDA0MGE0
ZDI3ZjYwHhcNMjUxMDE5MDYwMTEzWhcNMjUxMDIwMDYwMTEzWjAzMTEwLwYDVQQD
Eyg1MzljY2VhMGU1ZjY2ODlhZDFkZDg5MzhiN2EwNjU2NGViMTNjMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRF8+BT2ThOHViYz1/ZlaeWsmZqn
0lNZvAzNW6Q+W0T7Ap07Dkcu2sFc8V2HJHLFlA42lqbAgDXEc4fk/lxX65SBu7HD
wwAVuNIOzhM1LyCx9hbxjcPNVGwkfPrV1pIR841pBiobxwF4ugECJxmGuoyXpooX
cXsqCBRjWTwWADdJt3B9o+2RNcNC2eVLr/iolIEgIuGtch5XbC0dJ6atMKJUR+KO
NUhPFqhI1TS3DAVqX8pd05Ep41kj+G9ps/HFMGkQb9TsM49ZMfk7dqXCUoN2c4jg
y0M16Qkh9l+5G6Aigywrn2TdDdRlMdJrI0NFg3Izr+kB11d540mKdz7ZtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOczqDl9mia0d2JOLegZWTrE8KFMB8GA1UdIwQY
MBaAFEp8/ogRaLYVoL1BHMMUvQQKTSf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU256LWlCRm90aFdndlVFY3d4UzlCQXBOSl9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zMjI0NTAtMjFjYS00MWFmLTliNjUt
Y2JlMDg0ODcyMTc0LzEvU256LWlCRm90aFdndlVFY3d4UzlCQXBOSl9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zMjI0NTAtMjFjYS00MWFmLTliNjUtY2JlMDg0ODcyMTc0
LzEvU256LWlCRm90aFdndlVFY3d4UzlCQXBOSl9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWE9JWhXI
RtKKwuOClMw+K7N/QxhxKbYAsU/WPyEeYyCD3dT4EfKcp51L3HnexpTZkrXGqY1B
l3g6+XZ70jyl+n+nmns8FIsIFIfUHy066Hwg2pb5Zf0bTr0FWWpa+rlN0eQmbGbV
Z25gHmQext7+PEt5Yvx/1/b7O+k/A3xi1I0eQkCrDxWrBU6K8+rGqalv7XUu3heF
ZeShyMbEZidjTflAOBx9RMUEj15EwpjuK4bkyzZAnASUD+ZcSST2edXWGMQiUOb2
7UKlMvuZ857Y3u4XBnQHPo59jppOg2a6JehcTFs78rVKHIgysItO0VIH8t6VhBoh
haZoCMo4l8wSYA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:04 2025 by rpki-client