Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
File: SanokeBtQid9xPtfvWnpq9jimIM.mft (raw, json)
Hash identifier: aOkJc0FmORZbTo3j3qw/L8RJV9MjsgQ+Lu5+V+vp+Oo=
Subject key identifier: 8B:09:BC:30:04:E8:90:05:48:EC:B2:01:C3:4E:F9:FC:A6:BE:3F:95
Authority key identifier: 49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
Certificate issuer: /CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Certificate serial: 019A51879448457C2435B24206DADE97B744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 01:00:31 +0000
Manifest this update: Wed 05 Nov 2025 01:00:31 +0000
Manifest next update: Thu 06 Nov 2025 01:00:31 +0000
Files and hashes: 1: SanokeBtQid9xPtfvWnpq9jimIM.crl (hash: 3AXzfzWXTZ8Yo3JrEmJeEZzcRf8+YteGhcXTA6esH1M=)
2: V8zD_fceDFK7bKm0UJWlvFSbGqc.roa (hash: Le4LPJ6tIhm6aij63pajwkdMuW6+ZunlQYJepBMOhII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:94:48:45:7c:24:35:b2:42:06:da:de:97:b7:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Validity
Not Before: Nov 5 01:00:31 2025 GMT
Not After : Nov 6 01:00:31 2025 GMT
Subject: CN=8b09bc3004e8900548ecb201c34ef9fca6be3f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d0:8d:25:83:95:62:48:65:01:8b:d3:1e:fa:
36:1a:56:fa:05:80:03:08:91:8d:63:1d:af:4b:9c:
93:80:82:84:bf:a7:60:d0:f0:64:52:56:19:bf:be:
09:49:c1:6d:78:61:c1:d0:71:82:b4:a0:de:67:ff:
66:c7:10:50:84:cd:58:35:26:a4:a4:4f:38:41:7b:
70:c4:ca:10:91:29:8b:51:36:1a:70:d4:bb:0b:ba:
f5:48:b4:be:1c:d8:50:c2:94:49:3c:07:1b:4a:0f:
df:0d:bb:39:69:8d:5d:f0:a8:83:1b:f4:07:dd:37:
38:c0:af:73:3f:0c:b2:cb:13:55:80:d5:8f:c8:a8:
d4:58:cb:11:55:cf:04:65:60:04:c8:b4:63:a1:81:
35:3a:6b:09:14:92:b0:8f:25:0b:54:a5:3f:70:66:
b7:6c:d0:d9:96:6e:5f:42:39:43:25:92:84:d1:19:
c6:97:d9:55:1b:e1:98:92:75:2e:9f:32:40:46:8a:
bb:6a:18:4f:3c:fb:96:99:1e:e3:e8:01:1f:76:9f:
11:3e:3a:7c:56:03:40:1c:c7:c4:d9:c5:b8:51:17:
9d:fc:21:24:e9:80:70:55:9d:36:42:8f:11:48:f7:
62:ff:06:1d:b4:34:22:39:19:ad:8a:46:79:f3:93:
d6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:09:BC:30:04:E8:90:05:48:EC:B2:01:C3:4E:F9:FC:A6:BE:3F:95
X509v3 Authority Key Identifier:
keyid:49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:1e:70:09:6a:18:6c:9d:9a:7f:32:b4:61:9b:57:58:65:b4:
f5:69:36:98:68:f5:0f:de:38:4f:5b:fb:55:a1:d1:23:be:25:
ad:de:ee:d9:b8:c4:02:70:e3:1f:5e:d6:ea:61:95:d7:08:66:
a8:e0:5b:e6:b3:2d:e9:3d:20:98:d0:b6:29:47:f0:33:3d:73:
0d:f8:8c:89:99:09:02:86:05:62:82:05:98:79:a2:69:fb:59:
3f:8d:a5:d6:10:e4:7a:de:51:bc:1b:b5:90:7b:12:ff:50:55:
17:e8:e4:2f:65:4b:18:e6:b8:8d:08:48:3c:3e:ee:09:28:48:
b9:af:26:80:97:a4:0e:d9:a1:3b:40:69:4e:87:4e:4e:15:bd:
e0:24:78:4f:58:f1:9e:93:4d:46:a1:e8:c5:81:08:34:ce:bf:
e8:81:d8:ff:ff:4d:5d:d2:7c:2e:b1:b9:3c:25:3c:67:e9:d9:
2d:7a:ae:18:75:55:ec:d8:d7:1c:8c:29:70:38:c1:17:6d:35:
f1:4d:e5:6d:37:2b:ef:a4:72:01:ca:87:49:e0:39:d6:23:3f:
1d:e6:3f:c2:a9:95:de:0b:5c:be:9a:d8:e2:59:ac:3e:2e:0f:
cd:d6:6c:63:f7:be:d2:2a:49:e7:f7:ad:3f:05:e9:f9:a8:8a:
b3:ec:2a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:15:25 2025 by rpki-client