Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
File: snkS_-9nB4uwa9SpAh-6lq2xgL4.mft (raw, json)
Hash identifier: gw1IIHJYYu1vR6gY2lTUT8im3j28+DxrViDYa4lLDoE=
Subject key identifier: 3C:0A:54:2B:88:77:75:12:7D:75:3D:DA:92:13:9E:38:DC:9A:EB:0F
Authority key identifier: B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
Certificate issuer: /CN=b27912ffef67078bb06bd4a9021fba96adb180be
Certificate serial: 019A5187829FC9A488CF49BC7AE5D9C81332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
Manifest number: 12AA
Signing time: Wed 05 Nov 2025 01:00:26 +0000
Manifest this update: Wed 05 Nov 2025 01:00:26 +0000
Manifest next update: Thu 06 Nov 2025 01:00:26 +0000
Files and hashes: 1: Q0e2nZwWTgSOnN3XYro_yC3AqqY.roa (hash: p1jDlEZ3jtWSk1Gt2ui3hdbzWJmpWW1M0qlAGcolPG0=)
2: snkS_-9nB4uwa9SpAh-6lq2xgL4.crl (hash: Ay+2kGDNZumKe1l7TdkVqczEvhlQbtm0Hg55PO40ILM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:82:9f:c9:a4:88:cf:49:bc:7a:e5:d9:c8:13:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27912ffef67078bb06bd4a9021fba96adb180be
Validity
Not Before: Nov 5 01:00:26 2025 GMT
Not After : Nov 6 01:00:26 2025 GMT
Subject: CN=3c0a542b887775127d753dda92139e38dc9aeb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:ee:12:59:e0:b2:1c:e5:e2:1a:a6:30:2e:
21:4b:11:68:f5:a5:0f:45:71:43:03:05:cc:3c:f1:
24:4c:18:e4:1c:d5:c5:2f:ee:56:ae:5f:03:01:a5:
5e:c8:eb:3b:89:59:98:a3:59:29:9e:25:ce:73:18:
f1:31:b6:66:e8:a0:16:c3:d9:8f:fa:a6:44:b4:78:
83:32:08:28:fc:95:9d:42:6b:1e:04:d3:97:a6:8d:
fc:e4:fc:20:61:49:0e:a0:73:13:cd:be:f5:aa:b2:
e5:31:52:08:a1:f3:08:20:75:31:36:21:8f:c8:89:
4e:ee:5b:27:be:9d:52:c1:63:89:21:08:db:7c:7e:
33:b3:60:a7:a9:7a:ed:c3:ae:2c:6d:41:e9:c1:2e:
87:b8:2e:25:2b:6e:8c:dc:e4:3c:e3:52:dd:78:e7:
4f:af:cb:2a:7c:ac:3d:e5:b9:3c:3f:25:23:7c:43:
4f:65:81:ea:46:92:e7:34:2b:66:20:bc:09:69:34:
63:f5:24:90:e6:14:df:8d:13:05:25:96:50:c9:10:
91:28:d3:3e:ec:64:0b:60:dd:55:4e:12:34:ca:f9:
47:50:3e:6b:da:8b:41:b2:2b:e2:f4:6d:32:5b:9f:
d8:84:f9:bd:bd:e8:a7:4b:62:a6:4a:03:d6:e2:b0:
24:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0A:54:2B:88:77:75:12:7D:75:3D:DA:92:13:9E:38:DC:9A:EB:0F
X509v3 Authority Key Identifier:
keyid:B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1f:46:08:c6:b3:b4:21:8d:f4:a9:85:f5:02:4c:f2:06:19:
ef:c2:9d:17:54:f6:a9:d8:c5:67:ac:c8:9d:31:82:e8:af:96:
3a:78:8e:e4:81:fd:54:3e:ea:52:70:76:ae:19:54:02:cf:ea:
66:61:29:08:db:7d:b7:65:31:e6:7a:c5:8d:24:b9:2b:fc:67:
75:64:f5:cc:fa:4e:c5:59:2d:0f:75:30:85:1d:7a:9d:42:02:
d6:bd:50:cc:ea:6b:f8:9d:2a:b0:97:ef:a8:7c:f1:37:c9:79:
17:bc:64:85:d0:4b:f2:01:98:46:a4:32:cf:c8:ad:26:88:b5:
6c:17:4c:77:08:4b:46:f0:db:2a:3b:ba:ff:69:ce:e7:b2:3f:
ed:79:87:1e:b6:f3:b9:5b:6b:cf:f6:1a:3f:05:69:43:66:44:
43:3f:3f:ff:38:aa:01:10:99:29:2e:8b:1c:93:e8:3d:17:72:
07:0b:47:91:5f:3c:4a:81:34:43:29:d7:12:af:00:b3:4b:6e:
e1:4d:e4:9e:34:7d:f8:91:2e:cf:8a:d0:4d:ed:ac:ec:91:ff:
4b:7b:2c:5a:dd:c4:d1:f9:cc:96:70:bb:81:03:7b:a3:35:fe:
e0:26:e0:73:49:a0:78:32:2e:2f:98:e8:a8:78:ab:e8:26:b0:
58:65:bd:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh4KfyaSIz0m8euXZyBMyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNzkxMmZmZWY2NzA3OGJiMDZiZDRhOTAyMWZiYTk2YWRi
MTgwYmUwHhcNMjUxMTA1MDEwMDI2WhcNMjUxMTA2MDEwMDI2WjAzMTEwLwYDVQQD
EygzYzBhNTQyYjg4Nzc3NTEyN2Q3NTNkZGE5MjEzOWUzOGRjOWFlYjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VDuElngshzl4hqmMC4hSxFo9aUP
RXFDAwXMPPEkTBjkHNXFL+5Wrl8DAaVeyOs7iVmYo1kpniXOcxjxMbZm6KAWw9mP
+qZEtHiDMggo/JWdQmseBNOXpo385PwgYUkOoHMTzb71qrLlMVIIofMIIHUxNiGP
yIlO7lsnvp1SwWOJIQjbfH4zs2CnqXrtw64sbUHpwS6HuC4lK26M3OQ841LdeOdP
r8sqfKw95bk8PyUjfENPZYHqRpLnNCtmILwJaTRj9SSQ5hTfjRMFJZZQyRCRKNM+
7GQLYN1VThI0yvlHUD5r2otBsivi9G0yW5/YhPm9veinS2KmSgPW4rAkQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwKVCuId3USfXU92pITnjjcmusPMB8GA1UdIwQY
MBaAFLJ5Ev/vZweLsGvUqQIfupatsYC+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc25rU18tOW5CNHV3YTlTcEFoLTZscTJ4Z0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yYjg3YzUtMzgwZC00NzZmLWE3MTQt
NWMwZDkyZjlhNDlmLzEvc25rU18tOW5CNHV3YTlTcEFoLTZscTJ4Z0w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yYjg3YzUtMzgwZC00NzZmLWE3MTQtNWMwZDkyZjlhNDlm
LzEvc25rU18tOW5CNHV3YTlTcEFoLTZscTJ4Z0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXh9GCMaz
tCGN9KmF9QJM8gYZ78KdF1T2qdjFZ6zInTGC6K+WOniO5IH9VD7qUnB2rhlUAs/q
ZmEpCNt9t2Ux5nrFjSS5K/xndWT1zPpOxVktD3UwhR16nUIC1r1QzOpr+J0qsJfv
qHzxN8l5F7xkhdBL8gGYRqQyz8itJoi1bBdMdwhLRvDbKju6/2nO57I/7XmHHrbz
uVtrz/YaPwVpQ2ZEQz8//ziqARCZKS6LHJPoPRdyBwtHkV88SoE0QynXEq8As0tu
4U3knjR9+JEuz4rQTe2s7JH/S3ssWt3E0fnMlnC7gQN7ozX+4Cbgc0mgeDIuL5jo
qHir6CawWGW9tg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:32:06 2025 by rpki-client