Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
File: snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json)
Hash identifier: Cw7iZoEH7wWnXv6ev4NArelqZ7OoosAPgNhYq8RAtJ0=
Subject key identifier: B4:2C:B5:41:74:8E:C4:0A:F4:ED:40:F7:C3:88:DC:3A:8D:9E:42:8F
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial: 019A4F62251BB67B27897DA4A460A3E275B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
Manifest number: 0F40
Signing time: Tue 04 Nov 2025 15:00:23 +0000
Manifest this update: Tue 04 Nov 2025 15:00:23 +0000
Manifest next update: Wed 05 Nov 2025 15:00:23 +0000
Files and hashes: 1: HRiBqkMm3jYdrvB2_suIlLpeJLU.roa (hash: thuo/2wKh04k5fV07y+BJSuu+CRS6TthbxD3yT9m+AM=)
2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: ufEIurIUfIaPQJpcgyGnSftCVDLMEXuYLtlw/4Ngqe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:25:1b:b6:7b:27:89:7d:a4:a4:60:a3:e2:75:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
Validity
Not Before: Nov 4 15:00:23 2025 GMT
Not After : Nov 5 15:00:23 2025 GMT
Subject: CN=b42cb541748ec40af4ed40f7c388dc3a8d9e428f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:17:b2:cc:61:e6:73:3d:b6:a1:a6:53:20:
fa:6d:4b:b1:59:4b:ff:3d:d6:d6:41:e5:95:15:49:
e5:a6:f8:7b:e6:bd:4d:33:36:9b:ea:2c:f4:6c:e2:
6f:d9:bd:29:0b:31:78:27:18:61:83:37:09:6a:f0:
93:ec:1b:23:73:89:5c:01:7d:d4:b0:0d:ac:52:3f:
c4:83:39:2b:7f:fa:c9:46:04:48:db:3f:e6:9e:ef:
4a:04:22:80:5e:db:0e:67:1c:78:29:a2:c3:f4:e9:
b7:84:df:1e:2c:43:e6:02:90:bd:5f:e7:83:1e:83:
0f:ca:81:98:05:76:30:84:3f:b0:d4:d7:a3:8a:28:
e1:00:b8:e6:39:5c:aa:88:79:25:75:a7:29:1c:16:
9a:9b:e5:d2:f3:9b:33:b3:06:7a:fb:18:88:fb:21:
e4:2b:e4:f8:3b:11:8e:37:a3:85:f0:2a:4a:f3:2b:
43:ce:11:05:53:ed:15:06:4e:5d:3f:81:a1:5f:3e:
f0:28:62:c8:db:0b:e9:54:9e:2b:4a:3f:b5:a0:15:
61:ce:99:7e:06:a4:73:3e:60:f5:6f:c1:f3:ea:b9:
6c:61:30:8c:66:77:f8:72:bc:e7:a3:6d:8d:85:82:
1f:35:f3:8b:e8:d9:1e:96:53:b2:1f:9d:5a:ba:49:
31:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2C:B5:41:74:8E:C4:0A:F4:ED:40:F7:C3:88:DC:3A:8D:9E:42:8F
X509v3 Authority Key Identifier:
keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7f:57:09:47:41:67:47:3d:0a:1a:66:1c:bd:6c:f3:22:c9:
9d:66:31:e8:ac:97:ee:89:db:b3:21:ae:8f:9a:c8:16:64:85:
ac:8f:ad:63:54:1c:d0:10:e3:29:5b:7e:61:92:5b:48:49:8c:
8f:eb:dc:59:8c:51:66:f6:a0:16:78:bd:dc:3f:2f:27:ad:de:
55:e0:e0:a9:3e:8d:66:ed:03:3f:42:cc:72:63:5b:48:0c:7e:
89:b1:0a:24:58:e6:a4:5c:c9:56:77:11:f0:41:94:48:95:03:
5d:1c:b2:31:61:04:fa:9b:e6:87:69:db:f3:47:02:33:b3:cc:
b3:0c:e0:b3:ee:17:03:6c:18:be:91:b3:78:63:f5:c3:29:8f:
98:59:e9:6b:2d:fb:9b:fe:b4:8f:30:b1:2e:70:ce:31:98:d1:
bb:77:c3:2c:3d:6b:38:17:89:c2:af:3b:ba:92:f0:44:ff:6b:
f0:a2:e4:b8:b1:7a:09:e9:e1:04:aa:68:f0:18:7f:28:39:dd:
bb:d9:e1:7b:a5:30:af:e0:ab:3f:0c:95:a5:26:8e:a6:d6:14:
58:a0:22:57:b1:d5:f4:f8:eb:53:50:76:aa:51:8c:bd:af:cb:
c4:1c:28:df:37:cc:86:b3:94:29:b6:a3:8b:1a:0f:82:e1:8e:
63:be:c1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:50 2025 by rpki-client