Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier: /Wmk2hFTF/eIYziWaTggb4IKdQpltA+iTEFUchwg0pM=
Subject key identifier: A1:DE:C1:60:94:19:71:CB:A7:80:AD:F1:91:08:72:EA:72:C5:D4:BD
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 01988FFE001C967A9234D92DC09CB03BDA6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number: 0914
Signing time: Sat 09 Aug 2025 18:00:44 +0000
Manifest this update: Sat 09 Aug 2025 18:00:44 +0000
Manifest next update: Sun 10 Aug 2025 18:00:44 +0000
Files and hashes: 1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: GnHncU11DMRtg7x6C2dh3rfMQpTHN0nRrdHrxGtswQE=)
2: _2GPXm0W5pqTGfOSlDVI1ePI1QE.roa (hash: 9R3xfYmKYkm/k3uZLHas6Z2h3l83dSwTWGdwQsjNnVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:00:1c:96:7a:92:34:d9:2d:c0:9c:b0:3b:da:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: Aug 9 18:00:44 2025 GMT
Not After : Aug 10 18:00:44 2025 GMT
Subject: CN=a1dec160941971cba780adf1910872ea72c5d4bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:5b:2b:fc:0b:08:74:ac:41:e7:0a:51:c3:
ad:6e:4f:ca:f7:45:45:18:e9:36:6e:cc:ae:87:61:
3f:d3:33:d1:96:d7:5b:63:a0:5a:e0:76:83:58:db:
69:5e:ea:7e:60:3e:4e:f8:d4:3e:77:8e:8d:18:f0:
95:dc:2e:4d:06:a5:bd:26:4a:4c:ba:8e:4b:96:f3:
6f:fb:56:3c:28:4c:f3:13:ce:99:41:2b:28:50:61:
fc:c9:23:96:18:5f:f4:44:0b:b3:c3:f3:19:df:55:
e9:de:4f:b0:33:2b:8b:26:70:c0:d9:ea:a4:9f:66:
92:7e:b7:a1:d5:5b:22:56:3f:14:be:fe:6c:ec:03:
6d:aa:4e:bb:24:bb:2b:36:93:69:20:71:0f:28:44:
4b:1e:50:03:81:2f:f8:ff:3c:5e:ed:31:3a:75:b6:
69:70:c9:cf:72:c5:fd:4a:44:5e:28:a2:84:4d:14:
05:ce:31:3b:bd:f3:27:0c:63:e9:86:51:a7:86:6e:
b9:5b:6c:96:da:d6:5e:b5:d0:a7:ec:08:d5:6e:3e:
f6:0d:0f:43:62:c5:cc:d8:83:e5:e4:7b:fc:93:4e:
b7:8d:18:3d:fc:58:f6:26:cb:e4:4e:d5:40:8e:8c:
87:ff:68:85:b0:32:21:b6:0e:54:8f:03:94:1e:a1:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DE:C1:60:94:19:71:CB:A7:80:AD:F1:91:08:72:EA:72:C5:D4:BD
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:91:87:50:7f:c2:7f:ea:3a:1b:6f:30:b6:8f:c3:ac:1c:55:
f7:48:b6:29:a9:7d:3f:44:4d:c5:6f:8b:f5:8e:2f:ab:fc:db:
e0:b8:ac:08:6a:d0:23:87:93:d8:16:65:c2:05:67:63:91:6e:
48:81:15:14:33:e3:ce:45:e0:6c:a8:66:79:34:15:ed:d6:5b:
54:e2:1e:c1:6d:83:61:95:43:82:30:97:8d:a4:2e:dc:0f:e3:
e2:31:08:bc:80:5c:14:59:f3:f7:b4:d6:c3:2a:60:a9:73:a4:
b2:be:2f:e3:4e:d4:f1:fa:61:53:d5:e4:99:8a:76:51:02:3a:
bf:49:f4:14:fe:f4:9a:63:23:24:cf:1d:13:6d:cd:94:d7:2f:
1b:a7:1a:95:c9:52:ef:52:34:b1:fd:e8:1d:38:01:2c:2d:d1:
fe:a1:ba:3b:24:fe:32:4b:af:95:b7:5e:51:61:65:63:ea:50:
e3:d4:61:be:ac:81:d6:82:1d:35:36:d0:11:e2:e3:78:81:b1:
74:07:7a:64:22:01:2c:5d:ee:30:b9:0d:d4:9f:aa:e2:d0:a0:
dc:df:73:21:83:0b:d2:5a:c1:6c:57:cb:bf:d2:d1:bf:2e:aa:
78:99:a0:8f:19:03:61:d8:5f:ad:ec:3e:7f:b2:0c:59:2c:dd:
7a:be:74:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiP/gAclnqSNNktwJywO9pqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNzVmYTk1NDc1YmFkZWViNzFmODQ0ZTBiMGI0NGI2YThm
ZWE5ZmUwHhcNMjUwODA5MTgwMDQ0WhcNMjUwODEwMTgwMDQ0WjAzMTEwLwYDVQQD
EyhhMWRlYzE2MDk0MTk3MWNiYTc4MGFkZjE5MTA4NzJlYTcyYzVkNGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrBbK/wLCHSsQecKUcOtbk/K90VF
GOk2bsyuh2E/0zPRltdbY6Ba4HaDWNtpXup+YD5O+NQ+d46NGPCV3C5NBqW9JkpM
uo5LlvNv+1Y8KEzzE86ZQSsoUGH8ySOWGF/0RAuzw/MZ31Xp3k+wMyuLJnDA2eqk
n2aSfreh1VsiVj8Uvv5s7ANtqk67JLsrNpNpIHEPKERLHlADgS/4/zxe7TE6dbZp
cMnPcsX9SkReKKKETRQFzjE7vfMnDGPphlGnhm65W2yW2tZetdCn7AjVbj72DQ9D
YsXM2IPl5Hv8k063jRg9/Fj2JsvkTtVAjoyH/2iFsDIhtg5UjwOUHqGYHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHewWCUGXHLp4Ct8ZEIcupyxdS9MB8GA1UdIwQY
MBaAFEp1+pVHW63utx+ETgsLRLao/qn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU25YNmxVZGJyZTYzSDRST0N3dEV0cWotcWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85OTA1OTUtNTE1Ny00MDM2LWI2MDEt
NjA4NDNiNWJiYjgxLzEvU25YNmxVZGJyZTYzSDRST0N3dEV0cWotcWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy85OTA1OTUtNTE1Ny00MDM2LWI2MDEtNjA4NDNiNWJiYjgx
LzEvU25YNmxVZGJyZTYzSDRST0N3dEV0cWotcWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhZGHUH/C
f+o6G28wto/DrBxV90i2Kal9P0RNxW+L9Y4vq/zb4LisCGrQI4eT2BZlwgVnY5Fu
SIEVFDPjzkXgbKhmeTQV7dZbVOIewW2DYZVDgjCXjaQu3A/j4jEIvIBcFFnz97TW
wypgqXOksr4v407U8fphU9XkmYp2UQI6v0n0FP70mmMjJM8dE23NlNcvG6calclS
71I0sf3oHTgBLC3R/qG6OyT+MkuvlbdeUWFlY+pQ49RhvqyB1oIdNTbQEeLjeIGx
dAd6ZCIBLF3uMLkN1J+q4tCg3N9zIYML0lrBbFfLv9LRvy6qeJmgjxkDYdhfrew+
f7IMWSzder50yw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:28:17 2025 by rpki-client