Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier: KP226Mw5TpbAb5blonMIua9DufFAZKIh1o8A6KwRE8U=
Subject key identifier: FA:40:4F:BC:1A:2B:8D:F5:BC:92:7F:CD:94:45:26:3D:C3:C4:71:18
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 019A53E3D26C2C4A41C63ACF349E437B4908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number: 09FE
Signing time: Wed 05 Nov 2025 12:00:30 +0000
Manifest this update: Wed 05 Nov 2025 12:00:30 +0000
Manifest next update: Thu 06 Nov 2025 12:00:30 +0000
Files and hashes: 1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: GzGcKqpH2M2zpCC20+kOIbXJcLe4YRrMc0+VJgc2AeU=)
2: _2GPXm0W5pqTGfOSlDVI1ePI1QE.roa (hash: 9R3xfYmKYkm/k3uZLHas6Z2h3l83dSwTWGdwQsjNnVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:d2:6c:2c:4a:41:c6:3a:cf:34:9e:43:7b:49:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: Nov 5 12:00:30 2025 GMT
Not After : Nov 6 12:00:30 2025 GMT
Subject: CN=fa404fbc1a2b8df5bc927fcd9445263dc3c47118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:f8:2c:69:79:79:c9:fb:3e:01:42:c1:1d:
4b:f4:b8:7d:0d:31:de:3d:88:49:40:81:48:80:35:
d2:b4:20:b3:62:19:de:4d:dd:73:95:29:1b:9a:06:
03:f1:c4:ec:0e:28:63:33:24:1e:8e:0b:11:81:35:
3f:70:82:5e:c4:cc:0e:51:d4:3d:28:24:67:2d:86:
94:db:63:60:0d:d6:63:86:1c:ab:66:da:60:a2:da:
2c:dd:1a:1b:3b:6c:bd:4c:ad:18:14:55:07:9a:91:
ff:86:bb:a7:9f:0e:62:9a:45:43:a7:23:1b:2b:0c:
3a:ab:fe:41:3d:3b:7f:f5:10:79:79:a1:fa:1a:2f:
a3:17:b3:1a:2f:06:68:8b:6f:34:93:5e:25:dc:4b:
bc:bb:b3:42:88:ec:40:dc:a6:c0:73:30:50:77:b3:
a6:66:d4:b2:28:cf:51:49:db:40:d0:f1:06:6e:de:
27:16:92:86:92:08:b0:c2:aa:80:ed:de:53:ac:57:
2f:9b:04:de:f7:36:aa:6b:64:4c:d5:45:66:4a:85:
9f:3c:9b:04:f5:f5:71:aa:73:97:86:45:8b:43:a6:
59:67:1a:33:7c:5e:77:cb:97:90:74:7d:f8:65:e2:
2d:3e:f3:7a:2b:f7:9e:da:f8:af:a5:cc:5d:b0:29:
96:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:40:4F:BC:1A:2B:8D:F5:BC:92:7F:CD:94:45:26:3D:C3:C4:71:18
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b3:e2:05:6d:87:16:da:c1:05:a8:9b:c8:13:bc:53:56:b5:
f0:2c:d4:c0:4a:3d:d5:93:0c:5d:5d:b4:68:72:b3:78:cd:a9:
a1:ef:24:43:fa:88:cc:c2:a5:c5:25:fa:ec:c6:c8:62:b9:52:
0e:8b:03:3e:5f:5d:8c:94:eb:bb:7b:18:84:0e:b8:3a:a1:a3:
3c:24:0a:98:9b:57:a4:4b:76:9b:61:21:f6:bf:01:0f:63:77:
53:33:17:2c:fe:cf:8e:04:d4:5d:2b:f5:95:85:61:88:0e:08:
7a:d8:48:67:3d:f5:5b:8d:c9:58:a7:95:00:c6:c9:93:dc:46:
94:af:79:91:b5:45:f7:ab:1d:50:b7:0e:4d:df:3b:5e:7e:ff:
69:72:c7:d6:0f:9a:9d:0e:bb:92:9b:c2:73:69:a8:f1:ba:45:
dd:9a:45:69:56:38:c6:7d:e4:24:f7:07:37:9d:80:14:37:4b:
33:b2:7d:75:29:aa:b1:47:e0:3b:b9:57:eb:b0:f3:fb:c1:62:
c8:56:35:c9:e5:16:9d:3d:82:be:1b:1e:f7:da:a5:1f:8c:0a:
88:fd:8d:e6:c2:04:66:b5:c8:c8:c4:ad:01:e4:37:26:74:3a:
e0:44:6e:f5:86:50:56:cb:42:af:c7:b4:53:7a:29:09:f3:3e:
d4:69:31:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpT49JsLEpBxjrPNJ5De0kIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNzVmYTk1NDc1YmFkZWViNzFmODQ0ZTBiMGI0NGI2YThm
ZWE5ZmUwHhcNMjUxMTA1MTIwMDMwWhcNMjUxMTA2MTIwMDMwWjAzMTEwLwYDVQQD
EyhmYTQwNGZiYzFhMmI4ZGY1YmM5MjdmY2Q5NDQ1MjYzZGMzYzQ3MTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXD4LGl5ecn7PgFCwR1L9Lh9DTHe
PYhJQIFIgDXStCCzYhneTd1zlSkbmgYD8cTsDihjMyQejgsRgTU/cIJexMwOUdQ9
KCRnLYaU22NgDdZjhhyrZtpgotos3RobO2y9TK0YFFUHmpH/hrunnw5imkVDpyMb
Kww6q/5BPTt/9RB5eaH6Gi+jF7MaLwZoi280k14l3Eu8u7NCiOxA3KbAczBQd7Om
ZtSyKM9RSdtA0PEGbt4nFpKGkgiwwqqA7d5TrFcvmwTe9zaqa2RM1UVmSoWfPJsE
9fVxqnOXhkWLQ6ZZZxozfF53y5eQdH34ZeItPvN6K/ee2vivpcxdsCmWUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpAT7waK431vJJ/zZRFJj3DxHEYMB8GA1UdIwQY
MBaAFEp1+pVHW63utx+ETgsLRLao/qn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU25YNmxVZGJyZTYzSDRST0N3dEV0cWotcWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85OTA1OTUtNTE1Ny00MDM2LWI2MDEt
NjA4NDNiNWJiYjgxLzEvU25YNmxVZGJyZTYzSDRST0N3dEV0cWotcWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85OTA1OTUtNTE1Ny00MDM2LWI2MDEtNjA4NDNiNWJiYjgx
LzEvU25YNmxVZGJyZTYzSDRST0N3dEV0cWotcWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrPiBW2H
FtrBBaibyBO8U1a18CzUwEo91ZMMXV20aHKzeM2poe8kQ/qIzMKlxSX67MbIYrlS
DosDPl9djJTru3sYhA64OqGjPCQKmJtXpEt2m2Eh9r8BD2N3UzMXLP7PjgTUXSv1
lYVhiA4IethIZz31W43JWKeVAMbJk9xGlK95kbVF96sdULcOTd87Xn7/aXLH1g+a
nQ67kpvCc2mo8bpF3ZpFaVY4xn3kJPcHN52AFDdLM7J9dSmqsUfgO7lX67Dz+8Fi
yFY1yeUWnT2Cvhse99qlH4wKiP2N5sIEZrXIyMStAeQ3JnQ64ERu9YZQVstCr8e0
U3opCfM+1Gkx/w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 15:33:09 2025 by rpki-client