Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
File: snjtj5eA8p2voi-f3wM3TaSYDpQ.mft (raw, json)
Hash identifier: GXieixkamZeR9hJVaM4Qs+ak0JaMtb8ONNM7gFaGBQg=
Subject key identifier: EB:0E:BB:21:04:98:A4:20:A2:B3:37:18:27:C7:FE:54:1F:62:FD:72
Authority key identifier: B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
Certificate issuer: /CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Certificate serial: 01988357423B7D26F04FAC3E859BC506DA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
Manifest number: 1077
Signing time: Thu 07 Aug 2025 07:03:10 +0000
Manifest this update: Thu 07 Aug 2025 07:03:10 +0000
Manifest next update: Fri 08 Aug 2025 07:03:10 +0000
Files and hashes: 1: Q2ddpl6C3V4vYBl0I3228luG5oU.roa (hash: gKtH3NhXGtSIchcMlB2GM3eSMYDb2zE1qytNooqyMO0=)
2: snjtj5eA8p2voi-f3wM3TaSYDpQ.crl (hash: Urbx3xx7NiO66brEGZ2wu6+giFCVDdVqwTjJmE9QQNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:57:42:3b:7d:26:f0:4f:ac:3e:85:9b:c5:06:da:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Validity
Not Before: Aug 7 07:03:10 2025 GMT
Not After : Aug 8 07:03:10 2025 GMT
Subject: CN=eb0ebb210498a420a2b3371827c7fe541f62fd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ee:35:6d:df:97:af:ad:5c:30:1d:bd:88:9d:
5b:ab:c9:81:3e:31:2c:fb:cc:ba:ad:77:b8:a4:3c:
90:81:54:7b:56:f3:81:b7:50:8c:84:32:8e:3d:09:
50:bc:aa:b8:42:c2:4f:ce:d6:a8:aa:5d:b9:e0:9f:
83:b0:7f:60:8c:56:7f:b7:c9:ca:b5:a4:e4:bc:d6:
1e:5a:e2:d8:5f:48:9e:2f:d1:2c:f8:ca:a7:a9:9a:
44:01:b7:4f:93:b9:f8:a8:9c:95:3a:03:89:3c:b6:
b6:e9:a9:09:be:ec:d8:61:82:d9:14:81:09:65:a1:
c5:b3:f4:da:ff:e0:a4:f5:af:5d:cc:7a:29:d2:9f:
fe:a1:94:c4:f9:9e:74:12:cd:86:98:ad:8f:a5:91:
2b:74:2c:75:e7:14:b6:1f:66:7e:cc:6a:8e:60:34:
fa:f7:f3:68:c7:a3:bf:d3:10:a3:43:10:af:19:25:
50:47:59:4a:bc:61:2b:00:09:00:f9:5f:72:16:c3:
42:b0:58:db:e7:80:6a:a6:7c:63:fe:8a:79:28:cb:
a2:f0:7a:38:b7:18:1a:28:a8:67:3a:ce:8e:06:54:
44:84:ba:c8:bf:e8:07:86:1a:d3:e5:61:cb:24:0e:
77:f6:08:13:64:c0:b7:01:f6:0a:3a:d6:c4:92:0c:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0E:BB:21:04:98:A4:20:A2:B3:37:18:27:C7:FE:54:1F:62:FD:72
X509v3 Authority Key Identifier:
keyid:B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:38:11:b7:d1:4e:01:3a:91:bb:12:43:8a:79:16:1f:3e:a0:
09:22:1b:81:46:54:f2:ac:90:17:0c:e8:8e:13:0a:37:ea:94:
9f:62:fa:e8:9c:50:e6:49:b2:0c:0e:99:97:99:69:b4:d8:cd:
5d:03:30:92:9f:89:c6:ab:f2:3c:9b:d3:db:fb:51:e0:95:34:
ec:64:47:03:17:80:35:40:9a:ae:4a:49:8e:eb:80:b5:cb:3d:
f8:0c:dd:0f:2d:e4:54:c9:33:67:58:0f:0f:60:71:43:79:c9:
ea:df:e7:e0:29:76:d3:1d:56:a4:89:6e:7e:9d:d9:f0:dc:29:
df:42:aa:8c:92:5e:4c:4f:b1:d8:4f:2b:d3:28:52:98:8e:91:
23:4d:2c:c9:19:49:a2:25:5e:71:6c:a3:89:b6:70:88:57:1a:
4e:65:28:0b:ed:c5:fc:32:91:89:8b:71:a5:7e:c4:de:0f:e7:
da:a3:51:e6:9a:f3:d2:03:52:bd:29:ed:41:cf:36:d9:71:25:
c3:54:c9:2a:53:53:ad:47:a7:65:bc:18:1b:ad:24:e7:44:73:
5e:13:02:83:bb:ac:b1:ee:7a:b1:b2:e5:09:58:b7:61:3b:fd:
41:46:b7:e7:94:42:50:34:97:8f:d3:e2:e3:9f:92:5e:bf:33:
7e:8b:e1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:36:57 2025 by rpki-client