Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
File: snkS_-9nB4uwa9SpAh-6lq2xgL4.mft (raw, json)
Hash identifier: 4b9iNR8HCSqkO7G7tsalYENvvUFVx+k7FEFhKk8kqsE=
Subject key identifier: A4:87:2B:4F:5D:D4:25:E5:2B:8B:EE:B6:6A:29:66:08:D6:CE:0E:0D
Authority key identifier: B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
Certificate issuer: /CN=b27912ffef67078bb06bd4a9021fba96adb180be
Certificate serial: 01989F02ECFB4D9947E856DE2D94354C888A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
Manifest number: 11C9
Signing time: Tue 12 Aug 2025 16:00:25 +0000
Manifest this update: Tue 12 Aug 2025 16:00:25 +0000
Manifest next update: Wed 13 Aug 2025 16:00:25 +0000
Files and hashes: 1: Q0e2nZwWTgSOnN3XYro_yC3AqqY.roa (hash: p1jDlEZ3jtWSk1Gt2ui3hdbzWJmpWW1M0qlAGcolPG0=)
2: snkS_-9nB4uwa9SpAh-6lq2xgL4.crl (hash: YMTIlb9V2NB9kFx9JyXHMnKn1FUBejTsq/Nr0U4gFvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:02:ec:fb:4d:99:47:e8:56:de:2d:94:35:4c:88:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27912ffef67078bb06bd4a9021fba96adb180be
Validity
Not Before: Aug 12 16:00:25 2025 GMT
Not After : Aug 13 16:00:25 2025 GMT
Subject: CN=a4872b4f5dd425e52b8beeb66a296608d6ce0e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:2c:0f:50:ae:6f:31:10:70:18:d1:47:cf:
0e:5e:7c:56:f7:1e:cc:84:01:ed:40:16:86:5e:77:
49:2c:3e:c7:8a:11:9e:8a:30:b0:ec:41:28:1a:54:
76:91:26:60:e7:ce:0b:b5:80:e8:bb:1a:8e:53:38:
47:19:99:66:c6:e2:bf:68:4c:e5:8b:9b:05:0a:97:
15:fd:b0:ff:0f:2b:b5:4d:b9:b7:d3:ea:2b:cf:06:
03:c6:74:91:00:d7:a1:6e:2d:59:02:fc:cb:63:2e:
c3:7a:a5:70:4a:07:86:24:57:ae:e2:4e:1c:5a:c5:
4d:cc:30:0d:5c:2b:f2:93:52:5a:dd:32:ba:f5:54:
fc:1d:85:65:92:20:0c:d1:3a:66:7a:4f:18:80:4e:
e9:4a:9c:1c:c6:01:03:71:22:0a:74:15:9f:75:c3:
ce:73:49:71:4a:cf:4e:6d:8b:a5:5e:5e:ad:df:2d:
f6:0e:85:e8:7e:89:6a:19:48:2a:5f:8d:f5:4d:b8:
7f:49:2b:8c:0e:54:82:f4:cb:09:23:e4:30:85:e4:
eb:28:4b:aa:9e:f7:13:0f:9a:90:b4:45:5c:2a:a7:
81:38:81:5e:75:b0:21:42:12:7a:3c:66:b3:bb:09:
d7:b6:dc:cd:4d:28:ea:a4:a8:e2:d3:49:e3:17:34:
f7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:87:2B:4F:5D:D4:25:E5:2B:8B:EE:B6:6A:29:66:08:D6:CE:0E:0D
X509v3 Authority Key Identifier:
keyid:B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:03:0e:33:a0:50:c4:48:27:9f:50:83:b2:a2:55:d6:5d:a2:
b5:f7:1c:49:96:15:86:3b:57:17:3f:bd:59:6d:f9:31:fd:cc:
8f:df:5a:89:6d:40:3d:9e:cc:0b:fd:ec:c5:7a:97:59:24:de:
1b:47:11:1f:32:c0:47:f9:0a:0f:f1:fd:d9:f8:a3:fd:2a:72:
35:88:be:ea:42:0e:60:f5:d2:bc:4c:ec:fb:5b:82:b6:a2:fe:
e0:a3:26:83:08:cc:97:8d:98:3e:e3:07:f0:f7:3c:29:9c:fb:
4a:b4:16:65:26:40:1d:2c:8d:f8:1e:5e:89:2d:59:b9:2c:6f:
fb:25:fa:bd:92:99:7b:c5:ec:10:e1:b3:61:08:6b:d7:67:fc:
d1:fe:73:a1:5e:eb:c5:ef:4f:11:60:c2:7d:a4:c4:a7:dc:fc:
33:7f:1a:42:48:14:0b:b8:fd:d3:df:a7:45:7c:c3:93:37:e9:
fa:a5:da:4a:de:e9:b9:70:ed:5a:59:52:1f:4a:4c:d6:1d:a9:
a6:df:c9:89:3e:15:c2:dd:be:cb:23:e4:7a:08:34:a9:9a:84:
68:48:02:be:4b:c0:1f:ca:df:8c:5b:a9:77:1d:6f:a5:ba:41:
de:8a:1f:46:ce:bc:8a:b7:41:01:3b:34:7e:06:df:14:69:46:
fe:b0:78:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:41:01 2025 by rpki-client