Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
File: Srn5ALphi-jnySCWPN91e5BQ5Qk.mft (raw, json)
Hash identifier: RIMA+St/K8ciRfJA31fPsXWggDiwzc7CROAjv+l51Wk=
Subject key identifier: 28:0D:62:CF:C7:3C:7A:4A:17:E0:08:68:70:C7:E0:A8:6B:BC:E1:F5
Authority key identifier: 4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
Certificate issuer: /CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Certificate serial: 0199FFC7DCC11A765C97429411ECB272FDBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 04:01:52 +0000
Manifest this update: Mon 20 Oct 2025 04:01:52 +0000
Manifest next update: Tue 21 Oct 2025 04:01:52 +0000
Files and hashes: 1: M8uu5Q0gYtyHXgy-_HaJ3qJtLL8.roa (hash: 8T9tUH90Mj8IcimHEzzVqe1K5DRM0kq6VzTiqUA3vRs=)
2: Srn5ALphi-jnySCWPN91e5BQ5Qk.crl (hash: NpyOAYQlROHSsW0B+M1yElU9SgAN/KyK5dAmcV+K9iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:dc:c1:1a:76:5c:97:42:94:11:ec:b2:72:fd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Validity
Not Before: Oct 20 04:01:52 2025 GMT
Not After : Oct 21 04:01:52 2025 GMT
Subject: CN=280d62cfc73c7a4a17e0086870c7e0a86bbce1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:92:a0:1f:52:66:1a:8e:6f:36:78:dd:b4:a9:
b9:c7:72:75:c2:d4:83:13:4d:fe:97:f4:e9:3e:b8:
6e:c2:9c:7e:90:b4:a9:73:83:33:de:aa:0c:1c:a7:
52:8c:96:c0:ac:0d:19:c2:fd:9a:a1:91:11:b6:1c:
03:fe:4e:d5:40:fe:a5:29:3f:25:5c:7b:c8:7f:02:
7b:28:1b:60:31:d0:cb:ff:33:ea:39:84:18:0b:1b:
d9:b6:91:3f:de:e4:eb:55:cb:17:de:76:3b:8e:64:
1b:0c:3d:c8:54:74:b5:3e:e2:b9:63:21:09:15:c3:
7a:9d:32:f5:a9:cd:d8:e3:71:69:e1:1c:c2:67:a1:
d6:e2:6e:9c:fd:d4:dd:53:df:3a:50:fc:fe:20:b6:
3c:74:ed:b8:89:0d:8a:6d:32:59:7b:68:4a:48:2b:
27:ff:28:7f:ce:46:22:a6:94:1d:14:30:7a:02:97:
09:ff:9f:23:37:30:19:a2:a4:db:f9:6e:f6:3f:34:
a6:ae:df:7b:88:11:86:b8:7b:25:c8:38:28:d7:7c:
a6:1b:b0:a1:36:76:0f:1f:c1:ba:34:11:fb:31:8d:
d0:ad:97:cc:be:c9:50:88:62:4c:63:6c:42:6e:3f:
90:ae:34:cf:9a:e6:78:83:e8:22:94:6e:3f:58:6a:
f9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:0D:62:CF:C7:3C:7A:4A:17:E0:08:68:70:C7:E0:A8:6B:BC:E1:F5
X509v3 Authority Key Identifier:
keyid:4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:72:54:c1:b7:08:d0:ee:00:07:57:13:98:16:de:c4:f6:1e:
ff:32:8a:2b:13:32:61:0d:3b:d1:87:8a:e0:88:a6:64:9d:70:
55:83:97:b5:b6:9e:86:65:58:8f:53:92:a0:25:0a:e7:28:01:
15:d2:36:80:8f:e2:ff:c0:f5:7c:1a:87:91:7b:c4:9a:cc:ec:
da:51:b7:0d:90:de:18:bb:a1:7e:d1:3c:cf:ca:19:c0:a6:53:
db:9e:03:7c:6b:26:95:2b:52:2a:b5:2b:2e:9c:2d:15:c5:84:
d9:e2:52:74:5f:42:bb:1f:5d:b8:aa:10:62:37:a6:61:0d:69:
95:a1:81:ba:98:f5:e2:10:33:2f:13:fa:36:42:ee:d0:a5:6f:
98:44:c9:85:b4:ae:61:68:cd:52:bf:b4:6d:48:a5:4d:10:c3:
63:0e:82:14:5a:ee:ad:7b:a3:e3:54:1c:b8:27:4d:f4:98:ce:
4e:0d:dc:d7:f3:a7:87:18:96:f2:08:aa:97:2b:60:36:b0:68:
d1:4f:91:3d:57:76:86:d2:21:62:b2:78:4a:e9:56:b9:fb:7e:
f1:a1:71:91:2f:14:48:6b:d0:a1:46:2d:0a:c1:b8:b4:dc:ad:
20:26:8f:3e:a0:5f:6b:d1:3f:06:12:83:ea:9a:28:4a:1c:e6:
e3:be:fe:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:38:27 2025 by rpki-client