Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
File: SanokeBtQid9xPtfvWnpq9jimIM.mft (raw, json)
Hash identifier: SU/b5x58hX4FGX8C8eqPXy86By8uF+MtIQDL+S9Ij9o=
Subject key identifier: 8D:85:36:E2:BA:70:93:97:1B:F4:4E:F1:0B:7C:DC:54:5E:7E:4E:70
Authority key identifier: 49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
Certificate issuer: /CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Certificate serial: 01976961313AFCE2C716020BB955074BB895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 13:01:06 +0000
Manifest this update: Fri 13 Jun 2025 13:01:06 +0000
Manifest next update: Sat 14 Jun 2025 13:01:06 +0000
Files and hashes: 1: SanokeBtQid9xPtfvWnpq9jimIM.crl (hash: rOvB3aty3dQkJgAzl6vwRo/Klb+NorV5JC4PQJmHxEU=)
2: xNQR2jyCo-wMte68YS73m1IZ9O0.roa (hash: BWuMWNUBHZ2TpJe9eyJrXKCjlVJ/6BKirHJr21VbUdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:31:3a:fc:e2:c7:16:02:0b:b9:55:07:4b:b8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Validity
Not Before: Jun 13 13:01:06 2025 GMT
Not After : Jun 14 13:01:06 2025 GMT
Subject: CN=8d8536e2ba7093971bf44ef10b7cdc545e7e4e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:19:7f:a4:23:7f:17:cc:cd:d4:18:e9:e6:
4f:1a:4e:43:c9:8c:b5:ac:4c:30:83:32:df:28:63:
5c:07:6a:95:04:20:20:a6:0c:1f:b9:49:1d:6b:b4:
33:25:0b:f0:d1:e7:23:9e:77:43:99:99:3d:31:ab:
81:6a:d2:87:6b:6b:a7:83:5b:ce:b1:60:4a:86:2f:
af:39:53:f2:83:6a:d8:b9:ea:1e:4f:e6:d1:db:22:
dd:80:1f:c7:78:dd:5d:fe:cc:12:cc:4c:d6:37:3c:
90:28:85:54:70:1b:58:34:64:23:e3:36:2b:0a:6d:
df:c2:9a:e7:86:7b:d8:a8:59:87:cb:92:df:cd:06:
96:9d:03:eb:f7:db:1b:17:72:31:f8:eb:34:66:c6:
d9:59:3c:60:a5:90:0d:c9:d0:07:d0:61:1c:11:a0:
60:ea:fb:6d:7d:11:7e:1d:69:8d:88:85:e3:db:f5:
6f:8c:8e:57:9a:0b:90:fb:f0:f8:6f:43:57:62:67:
d3:4d:95:b5:2f:36:20:5b:07:b9:fe:06:11:0e:00:
a4:43:d2:88:7a:a8:a5:63:c9:e4:72:40:94:ac:66:
f2:39:e1:d2:76:d0:88:c0:04:75:7b:e0:92:09:53:
d3:37:ef:59:d4:13:73:8b:0e:c5:e5:0f:89:3a:9d:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:85:36:E2:BA:70:93:97:1B:F4:4E:F1:0B:7C:DC:54:5E:7E:4E:70
X509v3 Authority Key Identifier:
keyid:49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:03:ab:a3:2c:5a:1d:8a:a0:49:2f:89:8c:e4:eb:ec:04:2e:
78:da:c5:0d:37:bc:17:aa:0e:b0:e8:50:18:ed:bf:10:75:e8:
81:1c:49:bb:c8:d5:ab:71:0d:8e:f1:10:e7:ea:c0:00:b7:e2:
28:03:c5:c7:58:ae:bf:f2:28:cd:73:de:62:43:ef:e9:10:10:
ee:22:ea:7f:e9:90:ab:87:9e:39:80:38:3b:91:bb:8c:9b:a7:
df:a8:99:a9:6a:a7:6f:05:f5:62:f4:0d:cf:89:c4:33:9f:c4:
dc:87:a1:aa:44:32:c4:fb:92:43:14:dd:fd:23:4a:e5:df:fd:
11:63:f0:da:54:da:f7:65:81:bc:a3:5b:5e:74:82:00:ed:2a:
6b:a3:ca:6e:8b:a5:98:3a:0e:2e:dc:57:b4:d2:82:76:a7:24:
54:d1:84:89:bc:32:63:02:ba:b1:09:8d:76:1f:35:2d:bb:60:
bc:79:75:39:04:f0:d0:b7:db:cd:92:d8:0e:f3:3b:59:be:2e:
3c:22:da:38:19:f8:00:11:e9:56:eb:33:c4:89:02:68:f2:39:
f6:32:57:0d:3f:1b:3f:34:9b:91:2a:d6:e6:46:f1:5f:21:42:
0b:fe:ea:0e:a0:3f:d1:ff:8f:9c:09:41:83:09:35:9e:12:ee:
b0:3b:ef:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:02:35 2025 by rpki-client