Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
File: SnqRfdz8JujIezCFi28H8po9tD4.mft (raw, json)
Hash identifier: w3GPo/fsCrjoPcAX46OfO+qO6U+HcVhO25gdgLAZ0q0=
Subject key identifier: E2:73:5B:E6:40:4C:2D:34:0A:7B:A3:3A:DE:8A:D0:BB:0A:AE:4A:2F
Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
Certificate issuer: /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Certificate serial: 019A4E4F3EA0B2A9AF38012ACC9592ACB1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
Manifest number: 16BC
Signing time: Tue 04 Nov 2025 10:00:07 +0000
Manifest this update: Tue 04 Nov 2025 10:00:07 +0000
Manifest next update: Wed 05 Nov 2025 10:00:07 +0000
Files and hashes: 1: P2xh5AQS8g63oefSEJQg-RsTiE4.roa (hash: fyGkFWMTxDql0OoutRE6aQhGU1Ek1V6QoGNhwV3E3j8=)
2: SnqRfdz8JujIezCFi28H8po9tD4.crl (hash: 7MX8RfS+Pbw0I/u1GR1/i3n8z3nhr0NJVM0R3JXXv00=)
3: wZuLHZACRgaqannQqtWTgy9AnFY.roa (hash: ArTL5+VwNfVl+VzsgeZQzp979burQZd57vVQg0xpNM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:3e:a0:b2:a9:af:38:01:2a:cc:95:92:ac:b1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Validity
Not Before: Nov 4 10:00:07 2025 GMT
Not After : Nov 5 10:00:07 2025 GMT
Subject: CN=e2735be6404c2d340a7ba33ade8ad0bb0aae4a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c0:31:c9:11:36:66:f4:f7:a1:d2:bd:d1:cc:
3c:5d:c1:56:f1:47:7e:42:bc:55:36:ba:1d:32:17:
f2:2b:58:c7:9c:6b:37:8e:ba:5d:78:e9:f9:49:39:
ac:11:a4:63:08:09:b0:6d:f6:a6:c1:2e:ab:99:84:
af:83:77:15:87:10:b4:15:7d:27:a8:99:6c:ca:f8:
e3:66:ec:9f:6a:68:17:17:6f:ce:e3:83:cb:03:5f:
64:5e:ea:d7:72:80:5a:cb:13:3e:09:10:dd:f0:56:
be:b7:3e:ab:99:16:07:af:50:6a:51:45:f0:8e:36:
fd:c9:bd:8a:a7:8c:11:05:4d:cc:ab:bc:44:24:ef:
d7:7f:6b:b1:d3:b6:ff:70:e6:aa:06:61:fc:98:75:
08:62:9e:07:6a:38:61:51:3a:81:a6:6b:ce:7a:69:
65:b7:e0:8f:f2:b7:18:b8:98:d0:f6:c4:72:65:1d:
cc:3c:39:79:7d:5b:ea:ea:b3:7e:1f:f6:90:79:4f:
76:08:0b:5c:e2:1d:8b:c0:8e:c6:00:a1:12:0e:35:
fb:d7:82:4d:d8:a7:08:27:09:5f:2f:d7:b5:e2:0f:
43:53:93:c1:16:e8:00:74:51:00:21:1e:d9:61:68:
0d:cd:a8:7c:3a:c6:7b:08:ba:7e:f7:de:b7:40:b0:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:73:5B:E6:40:4C:2D:34:0A:7B:A3:3A:DE:8A:D0:BB:0A:AE:4A:2F
X509v3 Authority Key Identifier:
keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:37:f3:4c:90:c8:7d:af:88:8d:d0:16:4f:6a:e3:35:e0:ae:
0b:e4:77:d3:8b:07:8b:9c:27:80:c1:8b:4a:e4:ff:cb:f7:80:
1d:15:73:c3:4d:00:bc:83:2e:f2:60:9d:b0:d8:5a:f6:2d:cb:
e9:5e:03:42:cb:02:1b:0e:5d:94:9d:c1:2d:b0:29:fa:ed:6e:
b7:c1:40:43:08:09:68:40:a8:6e:70:d4:14:1c:2c:ea:af:30:
2a:eb:95:e7:c6:f3:13:0e:03:af:74:72:1d:d5:84:f9:ba:f0:
53:a8:34:c2:1f:96:be:50:9f:5b:7c:b4:64:de:05:02:4f:e6:
04:54:78:f7:a6:8d:27:28:fc:12:b7:9b:80:db:b1:94:55:ba:
a6:71:3c:d3:5e:43:e1:b7:58:3d:2d:0b:97:b2:e5:7e:81:61:
0a:d4:e4:1b:ba:5b:3a:06:69:2c:5a:29:0b:aa:9b:f7:32:ea:
83:49:4b:58:a2:78:75:6d:c1:9a:bd:c3:92:a2:24:93:eb:c7:
1d:42:39:1b:6f:1c:44:40:b1:0b:9b:69:17:7d:6e:c1:82:57:
e0:d0:9c:9e:b4:d3:c2:b0:47:91:21:2f:e7:4b:b6:c7:f7:8a:
14:6e:bb:76:2d:87:22:ff:ae:80:23:49:7c:77:8f:1a:b3:f6:
cc:4a:70:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:26 2025 by rpki-client