Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
File: SanokeBtQid9xPtfvWnpq9jimIM.mft (raw, json)
Hash identifier: a5o7mTM3h1icioqWAcTVkYnazlkVE/Q1XtVdx/ueNQc=
Subject key identifier: D7:E8:3D:62:F5:7B:34:2C:1E:27:19:89:A8:7B:1C:CE:AE:EB:FA:58
Authority key identifier: 49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
Certificate issuer: /CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Certificate serial: 0198820C04A7DF72B781986D9C7403B1C1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
Manifest number: 1621
Signing time: Thu 07 Aug 2025 01:01:22 +0000
Manifest this update: Thu 07 Aug 2025 01:01:22 +0000
Manifest next update: Fri 08 Aug 2025 01:01:22 +0000
Files and hashes: 1: SanokeBtQid9xPtfvWnpq9jimIM.crl (hash: k0eyMR/55LLaQu8+HzV36pURy6/3l0KlXAOPrw6AXGk=)
2: V8zD_fceDFK7bKm0UJWlvFSbGqc.roa (hash: Le4LPJ6tIhm6aij63pajwkdMuW6+ZunlQYJepBMOhII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:04:a7:df:72:b7:81:98:6d:9c:74:03:b1:c1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Validity
Not Before: Aug 7 01:01:22 2025 GMT
Not After : Aug 8 01:01:22 2025 GMT
Subject: CN=d7e83d62f57b342c1e271989a87b1cceaeebfa58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:18:76:0d:76:aa:08:fc:e0:7b:a9:4a:f4:49:
aa:37:db:16:45:a6:6f:d8:f1:e3:d5:a5:dc:26:91:
57:33:3c:b7:82:77:f6:54:ca:38:00:6e:27:1f:fc:
df:2f:23:8a:3e:6b:ac:bf:e8:74:ae:ce:82:a2:e6:
e6:65:3a:cc:b8:3c:1f:ff:2c:88:36:7c:33:e1:99:
d7:22:bc:a4:a7:4e:09:7b:eb:c6:30:c3:c0:17:ec:
79:78:33:bf:0c:ba:08:f9:5b:5a:4b:f7:f7:8b:e2:
84:39:ea:68:8d:29:1c:55:73:19:62:65:a0:91:7c:
16:98:7c:f6:2b:03:30:f8:6a:93:90:75:f7:26:1a:
24:98:4f:dc:e5:07:8c:2f:fd:4d:ed:9e:b9:21:75:
c1:df:85:c0:95:27:c9:20:1f:20:35:f6:ea:24:08:
82:df:d8:56:dd:d6:95:34:79:1f:a9:fb:16:f3:39:
2b:84:91:85:71:86:82:4f:76:af:23:42:07:32:63:
2c:8f:f5:0e:5f:f7:f4:d0:35:2f:36:53:d5:6d:8b:
ff:41:f4:f5:2a:26:dc:eb:95:03:eb:ff:2f:db:8d:
f3:06:ec:b3:4a:47:d0:bc:15:d7:a6:c1:98:38:5d:
5a:65:0b:e6:82:d7:5b:ed:2d:2f:32:fc:1a:d1:84:
b2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E8:3D:62:F5:7B:34:2C:1E:27:19:89:A8:7B:1C:CE:AE:EB:FA:58
X509v3 Authority Key Identifier:
keyid:49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:99:d0:81:ec:d1:7d:f7:35:c3:53:a1:e8:d3:b3:89:0a:ac:
b0:2f:4b:09:8b:15:0a:f0:0d:ad:52:e6:be:a0:5e:62:aa:bf:
04:99:55:6a:e8:fd:0e:91:01:15:75:ba:74:64:75:9d:ff:50:
ed:aa:a9:42:24:97:fa:e9:4c:de:a1:cc:75:19:02:aa:ef:b5:
4e:fd:42:0b:fa:97:85:3c:67:e7:5d:dd:62:fa:67:64:02:b9:
4b:a1:36:b7:39:51:8c:39:63:7a:d5:4a:89:28:c7:73:6c:2a:
74:3f:19:c0:de:ff:14:fb:46:51:15:4f:f7:b5:22:29:aa:be:
e0:f3:8a:a4:e1:a9:b7:2b:f3:cb:5e:2f:20:53:87:e8:41:3e:
16:58:0d:3e:b6:a1:a9:d4:fe:0a:07:f7:15:6f:f4:50:f9:73:
8d:cc:de:73:9f:ef:fc:0b:f2:26:6a:db:b3:59:9b:4a:eb:19:
47:0d:64:c4:e2:eb:38:64:ca:ce:f7:0f:95:d1:35:f5:ef:61:
99:6b:6c:10:e7:71:5a:7e:53:5e:be:30:93:a4:3a:ec:98:02:
b5:3d:c2:c9:ae:42:e3:26:4a:54:2a:a4:24:b6:54:38:10:59:
dc:9d:02:7c:cf:a1:4a:7b:37:ab:7a:56:57:de:f4:b6:50:3c:
94:e7:f2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:16:26 2025 by rpki-client