Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: xmzjSOtjEuAWevUSrdzCMxVizkIm/8wbPm6puhhztAU=
Subject key identifier: 3B:2E:90:8D:89:CF:76:1E:3E:D9:6D:79:8B:21:E7:02:2D:34:4C:45
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 01987675CF2A4F2A09800EBF7AA73D1C07CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 124E
Signing time: Mon 04 Aug 2025 19:01:28 +0000
Manifest this update: Mon 04 Aug 2025 19:01:28 +0000
Manifest next update: Tue 05 Aug 2025 19:01:28 +0000
Files and hashes: 1: OaynJV0qbIIk7EsSxRIucNannDI.roa (hash: rLhfi7PeZU4mZH9NTsaCKUtzejxWWyeiOXooqE3dPpU=)
2: ZsJ1p0f-2YgNmBDafzu2GWckT34.roa (hash: kKQedLsISeBKSivLfM6tlDNDN9VJMt9n4EQssMfjNOQ=)
3: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: Mf/6kq7Lh0My63qg87KP8Bwp2JJyMNP30Jq6er8ifSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:75:cf:2a:4f:2a:09:80:0e:bf:7a:a7:3d:1c:07:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Aug 4 19:01:28 2025 GMT
Not After : Aug 5 19:01:28 2025 GMT
Subject: CN=3b2e908d89cf761e3ed96d798b21e7022d344c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:80:31:4e:f6:f9:16:59:0b:3f:f9:55:2e:
20:4a:a2:a8:58:de:40:e4:6d:91:b4:68:01:89:dd:
34:59:89:5e:be:3d:21:64:5c:67:d0:c1:98:80:ca:
fd:16:05:fe:87:61:26:1d:a1:18:e4:dc:cd:66:41:
8d:96:b0:d5:6d:03:48:cf:65:50:cc:65:a3:86:0b:
51:47:ad:d2:30:93:d9:6d:ca:9f:a6:8e:94:bc:9f:
e1:bf:50:88:d9:2e:24:f3:91:78:0a:3a:eb:09:48:
a8:dc:23:e1:4d:a1:d2:84:e0:18:99:a4:2b:90:10:
8b:25:39:93:a8:33:e9:2f:1f:70:01:20:2a:24:a2:
9c:e4:dc:22:5d:04:3a:ab:bf:c0:13:9d:e6:b2:63:
8d:12:69:08:61:f9:51:2b:86:e7:1a:e8:db:e3:0a:
4b:33:58:db:82:3a:24:20:03:99:e8:76:af:57:ab:
bd:7f:a3:60:0a:18:1a:24:c8:a4:a0:75:0f:60:22:
29:65:11:2e:a4:ed:c9:68:31:e6:f6:b2:66:3c:59:
93:6a:ce:bf:54:cd:b9:6f:6b:a0:8e:20:e1:ae:81:
df:c0:f8:ed:b4:f5:17:07:84:69:0a:1d:d3:0c:9f:
95:5f:27:1f:47:9c:91:5c:bd:91:29:f6:0c:2c:65:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2E:90:8D:89:CF:76:1E:3E:D9:6D:79:8B:21:E7:02:2D:34:4C:45
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:52:93:0d:5b:23:a9:c6:10:fb:f2:6c:a1:0f:2a:5b:3d:96:
38:6e:74:0e:82:45:52:a1:9b:07:c4:0d:89:bd:dc:45:53:5e:
d6:53:1a:7b:8f:7d:3a:ef:71:69:70:8f:41:ee:65:61:01:7a:
fe:a4:96:c5:00:24:e7:ce:51:a1:96:ca:69:ce:c8:7b:b6:48:
47:15:32:a6:5c:33:10:44:fc:05:24:4d:f4:f8:45:3a:72:53:
d5:97:71:7a:33:ad:dd:9e:44:5b:02:42:bb:f7:5a:fb:f7:9c:
56:ab:6a:c0:cf:ab:16:ef:c0:e3:54:be:99:55:8b:df:f8:b4:
fb:a8:9a:3e:c2:78:4c:ea:e1:5c:2b:4a:c2:e7:d7:c1:a5:f1:
84:cc:d5:81:a2:8b:01:c4:75:90:7b:1f:49:65:95:98:c7:92:
b6:8c:b8:94:24:7c:b6:b6:44:dc:4f:2b:9d:0e:0f:29:bf:ea:
a7:6f:ea:cb:62:92:31:a1:94:d9:45:ca:28:b3:59:10:5b:1c:
74:5e:47:2e:46:ba:ed:05:83:81:d5:ae:53:ea:37:96:bc:23:
72:45:26:bf:3d:b6:b3:08:b3:0a:ef:96:e7:01:c8:48:6e:fb:
d2:00:1f:c0:8b:41:3d:e9:8a:89:7d:a8:0a:f4:3d:07:bf:b1:
44:53:c9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:17:44 2025 by rpki-client