Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
File: SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft (raw, json)
Hash identifier: euCH1Yu1yAvaXE6rTL+q0rY0nNOxjHRzm2O/jdIUROc=
Subject key identifier: 24:25:65:A8:29:EE:10:B6:37:DD:CD:43:31:A4:17:B3:46:F6:0C:6D
Authority key identifier: 48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
Certificate issuer: /CN=48de4638c972c8ce19c4669ab57db266af7285b7
Certificate serial: 0199FFC7B258358B56DA3E238306E087E5CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
Manifest number: 0E00
Signing time: Mon 20 Oct 2025 04:01:41 +0000
Manifest this update: Mon 20 Oct 2025 04:01:41 +0000
Manifest next update: Tue 21 Oct 2025 04:01:41 +0000
Files and hashes: 1: SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl (hash: /Ykop7pXJaGXtFawftKfiNdbpaTu5MVLWLA+gqSo51I=)
2: q3FDx21p8smEfAYPTo0ZQLgPkqo.roa (hash: 2Du6IDXw8hGPYtGe+KE8+hTPSOOHZMlNjWnrWGKbnPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:b2:58:35:8b:56:da:3e:23:83:06:e0:87:e5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48de4638c972c8ce19c4669ab57db266af7285b7
Validity
Not Before: Oct 20 04:01:41 2025 GMT
Not After : Oct 21 04:01:41 2025 GMT
Subject: CN=242565a829ee10b637ddcd4331a417b346f60c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:01:ff:7b:86:9c:fa:12:34:9c:88:01:aa:d6:
ad:b7:c4:3f:96:3d:91:35:9d:31:b7:5d:1f:4e:e0:
c5:3e:51:a2:b7:7e:4d:41:fd:47:f7:99:bf:3a:e7:
c8:99:5d:4b:27:d7:27:d4:eb:20:49:9a:1a:69:2b:
d4:7a:4d:ee:c2:df:91:67:a9:3a:a0:0f:70:04:40:
d4:a3:87:7a:d3:cb:a8:97:9e:ca:1f:7b:64:03:55:
c2:16:33:9f:1f:2e:6f:cc:8c:66:53:89:79:5b:6d:
ee:ef:da:a1:34:58:69:75:c8:3c:0f:a5:5e:8d:b4:
1d:06:66:07:c3:8b:c7:d5:c5:cf:43:ae:fd:37:b1:
ae:c6:69:f3:e2:d8:e5:0a:76:5c:f4:36:9b:a6:36:
08:88:f0:f7:a9:75:bd:04:e1:4b:27:f9:83:ee:d5:
af:8a:5c:37:75:71:74:df:23:9a:56:c1:f5:42:21:
ca:8b:3b:42:a7:43:ad:ad:6e:84:0a:8f:8c:69:7c:
9d:a9:00:5a:f3:14:08:40:23:2f:7b:9f:f8:b0:ae:
41:c7:72:b8:f0:3f:16:90:b7:75:39:70:5c:d3:43:
9a:0c:f6:5b:bd:00:b4:cb:2c:61:e1:c7:1a:16:c5:
01:73:fa:f6:8a:5f:2c:81:1d:be:de:d7:67:6c:1d:
d2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:25:65:A8:29:EE:10:B6:37:DD:CD:43:31:A4:17:B3:46:F6:0C:6D
X509v3 Authority Key Identifier:
keyid:48:DE:46:38:C9:72:C8:CE:19:C4:66:9A:B5:7D:B2:66:AF:72:85:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SN5GOMlyyM4ZxGaatX2yZq9yhbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/036882-c801-4ef7-be1f-fcc6614de035/1/SN5GOMlyyM4ZxGaatX2yZq9yhbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:2a:14:bc:cf:aa:7b:d7:37:24:aa:d3:18:1f:6b:d2:60:3a:
17:eb:28:89:dc:59:32:8d:54:df:7b:6d:0d:36:c3:2d:97:c9:
e7:50:14:63:6d:41:79:06:28:00:29:2d:ad:a5:fd:4a:41:00:
a7:34:b2:0d:b5:fc:93:ee:91:7e:82:9c:67:d8:88:cb:8d:1f:
c8:e0:75:c6:d7:3f:89:b7:e3:b4:ea:8d:ff:8a:b4:7f:5f:49:
c7:70:bb:8a:93:d0:bd:c6:bd:77:f2:91:d9:c5:1f:c4:38:05:
b2:3c:09:d2:85:23:86:c2:c5:2c:3f:7a:ba:c4:f1:7c:0f:91:
2c:42:41:7c:0c:f1:08:c6:52:ba:83:30:0d:f2:77:69:96:88:
ff:cd:c2:0f:d5:46:fb:3c:c5:99:b6:86:a6:d3:18:4c:5a:40:
e6:fe:33:25:c4:83:80:46:f1:a3:e0:91:c0:e6:58:ce:15:12:
94:68:a7:eb:0f:07:2d:3a:a6:8f:88:75:75:ee:42:9b:c2:84:
17:ad:a8:42:2a:ed:29:1a:11:31:67:0c:a6:29:17:1a:1e:70:
28:2b:de:77:ff:b8:24:c4:c5:f3:92:b0:70:0b:0a:75:28:0e:
6f:22:5c:e0:e7:c2:9f:31:fe:ef:09:a2:d6:1f:9e:7e:7a:87:
73:db:92:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x7JYNYtW2j4jgwbgh+XNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZGU0NjM4Yzk3MmM4Y2UxOWM0NjY5YWI1N2RiMjY2YWY3
Mjg1YjcwHhcNMjUxMDIwMDQwMTQxWhcNMjUxMDIxMDQwMTQxWjAzMTEwLwYDVQQD
EygyNDI1NjVhODI5ZWUxMGI2MzdkZGNkNDMzMWE0MTdiMzQ2ZjYwYzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQH/e4ac+hI0nIgBqtatt8Q/lj2R
NZ0xt10fTuDFPlGit35NQf1H95m/OufImV1LJ9cn1OsgSZoaaSvUek3uwt+RZ6k6
oA9wBEDUo4d608uol57KH3tkA1XCFjOfHy5vzIxmU4l5W23u79qhNFhpdcg8D6Ve
jbQdBmYHw4vH1cXPQ679N7Guxmnz4tjlCnZc9DabpjYIiPD3qXW9BOFLJ/mD7tWv
ilw3dXF03yOaVsH1QiHKiztCp0OtrW6ECo+MaXydqQBa8xQIQCMve5/4sK5Bx3K4
8D8WkLd1OXBc00OaDPZbvQC0yyxh4ccaFsUBc/r2il8sgR2+3tdnbB3SvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQlZagp7hC2N93NQzGkF7NG9gxtMB8GA1UdIwQY
MBaAFEjeRjjJcsjOGcRmmrV9smavcoW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMzY4ODItYzgwMS00ZWY3LWJlMWYt
ZmNjNjYxNGRlMDM1LzEvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8wMzY4ODItYzgwMS00ZWY3LWJlMWYtZmNjNjYxNGRlMDM1
LzEvU041R09NbHl5TTRaeEdhYXRYMnlacTl5aGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXioUvM+q
e9c3JKrTGB9r0mA6F+soidxZMo1U33ttDTbDLZfJ51AUY21BeQYoACktraX9SkEA
pzSyDbX8k+6RfoKcZ9iIy40fyOB1xtc/ibfjtOqN/4q0f19Jx3C7ipPQvca9d/KR
2cUfxDgFsjwJ0oUjhsLFLD96usTxfA+RLEJBfAzxCMZSuoMwDfJ3aZaI/83CD9VG
+zzFmbaGptMYTFpA5v4zJcSDgEbxo+CRwOZYzhUSlGin6w8HLTqmj4h1de5Cm8KE
F62oQirtKRoRMWcMpikXGh5wKCved/+4JMTF85KwcAsKdSgObyJc4OfCnzH+7wmi
1h+efnqHc9uSkA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:49:47 2025 by rpki-client