Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
File: Snz-iBFothWgvUEcwxS9BApNJ_Y.mft (raw, json)
Hash identifier: ch8vNv0QL9DLjVAf+puaZG6hus2VVbLi+oJRRADIwho=
Subject key identifier: F4:7A:87:4E:BD:9A:97:92:C3:82:78:10:AA:E2:FA:F0:CF:5E:28:43
Authority key identifier: 4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
Certificate issuer: /CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Certificate serial: 019A53E3B3BFE895B07E74929F95099F5E0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 12:00:22 +0000
Manifest this update: Wed 05 Nov 2025 12:00:22 +0000
Manifest next update: Thu 06 Nov 2025 12:00:22 +0000
Files and hashes: 1: Snz-iBFothWgvUEcwxS9BApNJ_Y.crl (hash: 1sxOcVfquEnHL0QZUWcCIQYY8dJobGoM0IjmQkuA3bE=)
2: h_GYODiIwy0tVyLDmKAyNCK7Ui8.roa (hash: EVyFdfHvchtGYnioVymnJTf1ceZLIXds+uNSkp7sgG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:b3:bf:e8:95:b0:7e:74:92:9f:95:09:9f:5e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Validity
Not Before: Nov 5 12:00:22 2025 GMT
Not After : Nov 6 12:00:22 2025 GMT
Subject: CN=f47a874ebd9a9792c3827810aae2faf0cf5e2843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:70:f7:22:8a:89:28:dc:aa:d3:74:c4:0a:ad:
05:db:ce:38:a4:7f:a1:23:c2:7d:c5:9d:9a:ad:81:
ef:e2:c3:c1:73:41:ea:48:8b:96:4d:e9:f4:02:bf:
e9:62:03:90:fe:31:94:09:24:be:c9:ac:6b:cb:82:
b4:20:06:a4:37:5d:aa:e7:79:cd:35:36:a8:48:13:
95:fa:f8:70:83:90:af:ca:1b:b4:d5:3e:9a:d1:de:
ec:02:48:9a:dd:a4:78:da:9c:90:71:35:31:8a:8f:
53:37:c0:ab:52:2f:51:a7:ac:3e:fc:e1:b0:57:e8:
8a:67:e2:28:74:0c:99:27:37:06:b4:1f:25:0e:77:
f1:49:01:33:89:ed:07:2c:8f:b7:56:71:de:d0:c8:
ee:53:22:01:75:41:be:f0:2c:f2:c6:a0:01:73:7c:
98:18:02:9a:7f:7e:9c:47:12:ba:8d:47:c2:a7:a5:
60:60:1c:e0:64:a3:04:04:12:7c:c5:6f:1b:ab:65:
13:7c:b7:4e:76:1f:21:c4:95:d9:fe:f0:98:29:7e:
75:87:9f:7f:0a:14:3c:1d:0e:e3:d5:1c:d4:03:3b:
1e:69:9b:9e:9f:60:41:15:b6:19:c7:2e:bc:ce:9f:
4e:dd:77:85:c2:58:9a:33:88:9b:47:22:32:b8:c8:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7A:87:4E:BD:9A:97:92:C3:82:78:10:AA:E2:FA:F0:CF:5E:28:43
X509v3 Authority Key Identifier:
keyid:4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:79:ab:c5:37:ac:74:5e:73:b8:9c:cd:ae:52:1b:39:11:50:
fe:e0:1a:e1:bb:69:fc:45:5e:33:e8:5c:3f:98:35:f1:6f:28:
f3:fd:15:e1:44:b9:30:06:a5:98:13:71:13:ef:6f:d7:aa:e5:
75:53:a6:43:27:a8:34:3f:f3:97:cf:67:4a:ef:7a:a6:2d:6e:
1e:79:a0:75:c0:5e:f6:b5:a8:f0:bf:14:3d:ec:b6:3f:2e:fb:
27:6f:84:27:83:41:df:99:ec:c6:af:90:16:c8:f5:88:f6:d8:
fd:59:a1:be:f6:a1:f3:c3:88:29:26:36:d7:92:d9:ea:7f:2a:
23:b7:aa:67:4d:d6:9b:99:76:73:35:5c:71:91:6f:bf:78:78:
60:c1:56:38:b1:09:fe:12:0c:f9:d3:04:df:55:7b:46:9e:87:
fd:df:e8:07:25:8a:a5:db:db:57:86:fa:93:92:f2:bb:a7:74:
47:31:dd:40:b6:98:38:59:bd:17:f8:0e:35:b0:d9:64:82:a2:
4a:04:be:96:ef:4d:5e:dc:7f:96:f5:39:53:b2:1b:b7:be:97:
85:e3:9f:db:ec:f1:f4:63:48:62:a8:fc:ea:92:dd:d0:12:2b:
e9:0a:05:9c:1f:e6:73:38:48:fc:e5:2a:ad:79:c4:dd:40:07:
c4:08:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:15:37 2025 by rpki-client