Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
File: Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft (raw, json)
Hash identifier: 7R12d54gPllQUQqT5EChSubvVW5drNRTJePcfzLfwko=
Subject key identifier: A3:E2:F6:F5:C5:79:A7:83:3C:16:1A:5E:66:8F:45:66:DE:7A:27:B6
Authority key identifier: 4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
Certificate issuer: /CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Certificate serial: 0199FEEB961D7BE5BDF5D60439E7D828F759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
Manifest number: 020C
Signing time: Mon 20 Oct 2025 00:01:16 +0000
Manifest this update: Mon 20 Oct 2025 00:01:16 +0000
Manifest next update: Tue 21 Oct 2025 00:01:16 +0000
Files and hashes: 1: AD-andXzbsJQ6-EJVFm7YfqJqyA.roa (hash: EQKBZSFz17cerT07f9V2gKbXedpsxOfFN/33BYuE0nE=)
2: Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl (hash: 6+SB7RtGpUuJLPKrFRPLeqNVp8UNyzY3obcLTQsB5dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:96:1d:7b:e5:bd:f5:d6:04:39:e7:d8:28:f7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7e8c622c87532f8c449f347433dae52b7738f0
Validity
Not Before: Oct 20 00:01:16 2025 GMT
Not After : Oct 21 00:01:16 2025 GMT
Subject: CN=a3e2f6f5c579a7833c161a5e668f4566de7a27b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7c:b7:ca:97:7d:e5:e7:98:bf:12:1b:ac:54:
6b:61:80:c4:33:c6:5c:2a:aa:65:fc:81:b6:f2:52:
a0:2e:bc:d8:3b:92:48:a2:1c:2c:35:84:56:04:de:
e7:f3:f8:d6:0d:16:4f:9c:8f:5a:b4:e1:15:1a:79:
5e:0a:30:7d:d5:ac:f7:63:29:65:4e:76:fc:cd:c9:
6f:5e:c4:58:e2:f6:b7:68:55:14:c1:90:0c:14:39:
32:83:a2:e3:f7:c1:d6:c0:ba:12:71:37:f0:c6:1e:
9d:1b:e9:f9:fb:28:53:23:b4:22:0e:ad:64:84:f4:
ce:7b:f9:4a:84:a9:42:0f:ed:af:26:95:34:c7:43:
41:e6:92:9c:6f:fc:32:8f:ac:72:9a:74:72:fb:02:
6a:0f:43:f1:44:ce:80:86:07:9a:a6:49:13:19:e4:
28:3d:1e:3e:8b:c9:72:b8:0f:d8:f9:78:41:29:25:
51:ef:5c:48:62:61:4a:d9:f9:ec:cd:37:3f:28:ac:
61:09:dc:1d:c7:19:86:77:35:f8:7a:48:73:a8:b6:
c0:da:4d:e3:d8:b8:f7:da:a9:c6:09:4f:7a:79:05:
73:48:a8:a0:80:6d:6c:9f:a8:18:35:26:89:f9:05:
54:38:8b:9b:8f:4f:72:16:f3:23:77:1f:0f:a4:70:
91:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E2:F6:F5:C5:79:A7:83:3C:16:1A:5E:66:8F:45:66:DE:7A:27:B6
X509v3 Authority Key Identifier:
keyid:4A:7E:8C:62:2C:87:53:2F:8C:44:9F:34:74:33:DA:E5:2B:77:38:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn6MYiyHUy-MRJ80dDPa5St3OPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/747836-7822-4ed7-8291-dac25b266d8e/1/Sn6MYiyHUy-MRJ80dDPa5St3OPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e6:95:03:7f:0a:c8:70:39:99:09:3e:e0:2b:38:09:22:de:
d1:5c:29:4c:24:40:07:ca:41:ca:7e:8e:65:97:fd:b9:1a:d4:
e2:9d:8d:ad:a7:71:cc:c7:e3:69:60:39:e6:89:a2:5a:9a:71:
ab:a6:eb:9c:ca:c2:73:c5:e6:ca:70:6b:e5:1a:9d:3b:66:8f:
f8:50:8e:ac:bf:90:83:72:aa:98:d5:af:57:ee:bf:a7:10:09:
af:77:35:fb:62:42:ec:23:38:3f:cc:0a:a1:e7:ba:45:ee:00:
1e:86:dd:14:18:2e:31:0d:bd:2f:be:96:4b:fc:13:38:25:12:
86:82:89:29:1f:7b:61:18:13:94:25:de:59:80:7d:5c:a0:0d:
a6:4f:e8:9c:69:61:36:c5:6c:60:44:e5:ce:46:04:ab:b7:36:
ec:7d:97:e3:15:a9:62:d3:8e:f4:c5:fb:a1:f0:3f:b3:f9:bd:
50:f9:dc:e2:67:f9:18:4f:72:21:22:91:c1:9b:ee:ef:c5:2f:
b0:e7:c5:fd:aa:4e:ae:cb:ee:68:80:51:f7:8e:3d:86:ec:8b:
cd:45:c5:0e:49:07:20:a5:f8:ad:2e:cb:2a:4f:a5:40:01:73:
b9:ae:8b:3e:94:2e:af:1f:2a:36:82:fb:98:33:7b:8d:79:e9:
bd:c4:f7:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+65Yde+W99dYEOefYKPdZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhN2U4YzYyMmM4NzUzMmY4YzQ0OWYzNDc0MzNkYWU1MmI3
NzM4ZjAwHhcNMjUxMDIwMDAwMTE2WhcNMjUxMDIxMDAwMTE2WjAzMTEwLwYDVQQD
EyhhM2UyZjZmNWM1NzlhNzgzM2MxNjFhNWU2NjhmNDU2NmRlN2EyN2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3y3ypd95eeYvxIbrFRrYYDEM8Zc
Kqpl/IG28lKgLrzYO5JIohwsNYRWBN7n8/jWDRZPnI9atOEVGnleCjB91az3Yyll
Tnb8zclvXsRY4va3aFUUwZAMFDkyg6Lj98HWwLoScTfwxh6dG+n5+yhTI7QiDq1k
hPTOe/lKhKlCD+2vJpU0x0NB5pKcb/wyj6xymnRy+wJqD0PxRM6AhgeapkkTGeQo
PR4+i8lyuA/Y+XhBKSVR71xIYmFK2fnszTc/KKxhCdwdxxmGdzX4ekhzqLbA2k3j
2Lj32qnGCU96eQVzSKiggG1sn6gYNSaJ+QVUOIubj09yFvMjdx8PpHCRtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPi9vXFeaeDPBYaXmaPRWbeeie2MB8GA1UdIwQY
MBaAFEp+jGIsh1MvjESfNHQz2uUrdzjwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU242TVlpeUhVeS1NUko4MGREUGE1U3QzT1BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NDc4MzYtNzgyMi00ZWQ3LTgyOTEt
ZGFjMjViMjY2ZDhlLzEvU242TVlpeUhVeS1NUko4MGREUGE1U3QzT1BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS83NDc4MzYtNzgyMi00ZWQ3LTgyOTEtZGFjMjViMjY2ZDhl
LzEvU242TVlpeUhVeS1NUko4MGREUGE1U3QzT1BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAleaVA38K
yHA5mQk+4Cs4CSLe0VwpTCRAB8pByn6OZZf9uRrU4p2NradxzMfjaWA55omiWppx
q6brnMrCc8XmynBr5RqdO2aP+FCOrL+Qg3KqmNWvV+6/pxAJr3c1+2JC7CM4P8wK
oee6Re4AHobdFBguMQ29L76WS/wTOCUShoKJKR97YRgTlCXeWYB9XKANpk/onGlh
NsVsYETlzkYEq7c27H2X4xWpYtOO9MX7ofA/s/m9UPnc4mf5GE9yISKRwZvu78Uv
sOfF/apOrsvuaIBR9449huyLzUXFDkkHIKX4rS7LKk+lQAFzua6LPpQurx8qNoL7
mDN7jXnpvcT3NA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:33:50 2025 by rpki-client