Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
File: Snz-iBFothWgvUEcwxS9BApNJ_Y.mft (raw, json)
Hash identifier: FLmZP9joqUp4RDp+TN1FVPM762hR72TtZ1Epc0upZ4s=
Subject key identifier: 6D:37:AE:DF:A2:E5:E3:20:E2:F2:9C:77:9C:61:B6:98:64:80:30:22
Authority key identifier: 4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
Certificate issuer: /CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Certificate serial: 01988FFE6005616FA59D20B3096BF0B6D854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
Manifest number: 1623
Signing time: Sat 09 Aug 2025 18:01:09 +0000
Manifest this update: Sat 09 Aug 2025 18:01:09 +0000
Manifest next update: Sun 10 Aug 2025 18:01:09 +0000
Files and hashes: 1: Snz-iBFothWgvUEcwxS9BApNJ_Y.crl (hash: lNqcGMwpi4maiDdNAdPVypiCC1kiVVzRthxFN2Cy6do=)
2: h_GYODiIwy0tVyLDmKAyNCK7Ui8.roa (hash: EVyFdfHvchtGYnioVymnJTf1ceZLIXds+uNSkp7sgG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:60:05:61:6f:a5:9d:20:b3:09:6b:f0:b6:d8:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Validity
Not Before: Aug 9 18:01:09 2025 GMT
Not After : Aug 10 18:01:09 2025 GMT
Subject: CN=6d37aedfa2e5e320e2f29c779c61b69864803022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:34:09:74:5c:86:4b:47:bb:e7:fc:23:56:
2b:16:09:8f:d0:18:28:f5:29:22:ce:c0:d9:5e:14:
5b:17:4a:56:c7:b6:61:cd:b4:3b:e9:da:88:08:84:
06:77:be:d9:77:cb:9b:25:90:95:27:b2:4b:3d:64:
a8:c6:72:72:ae:82:3a:5a:01:0d:ff:65:78:0a:e5:
7d:1b:93:cc:c1:e2:66:0b:48:74:a3:dd:1a:14:56:
a5:25:a1:9f:58:f7:57:32:73:4f:52:22:3a:da:de:
48:5f:15:57:a6:da:40:45:b0:52:e4:f7:f1:7e:35:
73:60:f7:77:c9:67:95:0d:77:42:bb:a3:4f:06:92:
60:76:dc:a7:87:d2:6a:95:01:43:cc:34:49:2c:01:
94:d9:32:a2:76:95:22:0c:c2:7d:9b:97:07:70:ab:
87:db:de:c2:8d:47:17:2f:57:f6:6e:0f:cd:e5:d6:
9c:91:b2:74:b1:6b:07:f2:0a:ee:32:bc:16:a7:09:
3f:b0:3d:1e:96:56:ac:10:60:fe:a7:8a:02:6d:93:
79:aa:70:78:4e:54:82:71:6c:0f:14:d0:08:fa:91:
1f:da:6d:37:44:a2:c0:e8:2e:e4:3c:af:b3:24:d0:
ab:a8:c9:33:47:e8:a0:c7:6a:8b:e4:5d:cc:91:1b:
6d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:37:AE:DF:A2:E5:E3:20:E2:F2:9C:77:9C:61:B6:98:64:80:30:22
X509v3 Authority Key Identifier:
keyid:4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d4:42:15:cf:32:d9:74:e8:6f:c2:f6:e0:76:b7:b8:86:a4:
3c:fc:2b:d9:d2:3f:7c:f7:2f:42:83:c3:eb:21:3f:be:ff:f2:
ac:36:b2:e0:ef:38:e0:15:35:7b:9d:87:c1:8d:2e:c7:73:5e:
ae:f3:7c:c9:9f:59:45:04:ad:04:dd:eb:04:1e:54:25:c4:03:
76:b3:55:77:50:32:98:5e:e7:d5:67:da:6a:c5:c5:52:1c:a9:
04:f3:28:7b:34:a8:67:96:c2:a2:98:c4:96:30:cf:57:6f:d7:
12:fe:a8:bd:1d:47:86:22:19:54:1b:13:10:43:2b:35:07:c3:
d1:1b:de:30:c2:f1:5b:fd:28:38:40:14:5d:4f:07:d4:cf:c5:
4c:67:04:16:cd:20:da:97:b1:9a:92:65:05:7d:3c:20:0e:95:
a1:39:8f:d5:a9:59:d8:68:8a:da:b5:51:2a:87:49:d8:8f:ff:
d6:10:e7:7b:d2:13:53:7f:b4:b7:ba:4d:90:3a:b0:e4:18:1b:
85:a5:2a:44:0c:9d:1f:5a:80:51:33:91:d6:97:50:d6:a5:e8:
36:cc:5f:47:68:bf:de:2e:4d:c2:35:22:ee:ed:b6:45:0c:8d:
7f:c0:fe:64:28:53:2d:ab:53:ff:80:af:b6:38:bc:bb:6b:7d:
04:c1:98:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:29:00 2025 by rpki-client