Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: nVB5wmI3TU8S62MuFh9CC0cxrOh1Rw7lzdozPQfAwko=
Subject key identifier: 32:D8:E3:32:F5:F5:F0:0B:79:BC:DD:46:72:AA:26:5E:3A:DC:F5:DE
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 019A5187A5E025F474A1C833E83DAFA7EB96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 1344
Signing time: Wed 05 Nov 2025 01:00:35 +0000
Manifest this update: Wed 05 Nov 2025 01:00:35 +0000
Manifest next update: Thu 06 Nov 2025 01:00:35 +0000
Files and hashes: 1: OaynJV0qbIIk7EsSxRIucNannDI.roa (hash: rLhfi7PeZU4mZH9NTsaCKUtzejxWWyeiOXooqE3dPpU=)
2: ZsJ1p0f-2YgNmBDafzu2GWckT34.roa (hash: kKQedLsISeBKSivLfM6tlDNDN9VJMt9n4EQssMfjNOQ=)
3: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: cxfcXZSxdM6HVoS8P4wZSL1LvJIr4n/WIyVSFpiX/0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:a5:e0:25:f4:74:a1:c8:33:e8:3d:af:a7:eb:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Nov 5 01:00:35 2025 GMT
Not After : Nov 6 01:00:35 2025 GMT
Subject: CN=32d8e332f5f5f00b79bcdd4672aa265e3adcf5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:df:15:01:ad:c5:6b:18:2e:4e:0b:e3:a2:c8:
5b:5d:dc:7e:98:b8:83:83:5b:0f:a4:84:e0:48:b8:
c6:f2:25:51:97:0c:d7:65:72:f2:fe:5d:ca:b3:da:
10:1d:0e:72:5c:7d:c1:e5:c4:41:0b:7e:67:bd:e1:
12:f5:46:58:e0:62:65:bd:cd:9a:1b:88:a4:c3:db:
ff:6d:a0:ee:4c:97:3f:8d:f0:66:a5:64:9e:44:ee:
7d:f0:62:23:ec:d7:01:25:e9:e9:85:66:c9:c1:c4:
ae:ad:40:92:0e:2d:01:6a:64:d4:31:25:c7:fd:8c:
ca:3a:77:f4:ef:6e:30:74:3e:ba:e4:be:53:98:6b:
dc:07:72:dc:b9:76:26:ce:e2:df:6f:08:0e:d0:a6:
ab:c7:4d:b4:69:ad:df:ec:17:d9:b5:dc:9e:c3:16:
f4:9b:d0:98:56:b4:69:7e:0f:bb:cf:2f:e3:72:04:
3e:3a:fb:9a:78:f1:d4:43:bc:03:a1:4a:0e:d5:e1:
1e:d9:58:03:e7:33:5e:90:a3:fb:72:58:d3:88:65:
c9:23:0c:cf:52:45:df:29:96:9a:c3:d1:f5:b5:7f:
e9:f8:b4:04:8f:ea:a8:ce:e4:50:90:ab:57:df:6d:
5f:47:48:3e:68:70:1a:96:bb:15:29:f7:e6:29:d5:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D8:E3:32:F5:F5:F0:0B:79:BC:DD:46:72:AA:26:5E:3A:DC:F5:DE
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c4:a3:2e:e1:f5:7d:f3:51:22:5f:a0:6c:9c:97:6a:80:4d:
dc:f3:69:e8:c0:2a:cb:d0:27:42:a0:60:56:39:0b:4a:b0:3b:
f0:0b:b2:f7:b3:d6:ea:fd:4b:83:9f:9d:c2:97:d2:a6:8f:82:
c7:01:96:7e:98:44:bc:42:fa:eb:5d:0c:02:9d:d1:c9:c5:fd:
4b:8b:f9:cc:b6:6f:f5:cf:99:44:28:9a:d8:61:eb:f4:e3:25:
fb:45:f8:6a:92:f2:1a:88:43:33:1e:05:60:51:70:8e:78:ca:
49:45:65:f1:bc:4b:54:fc:16:1c:98:4c:f0:6b:52:f2:c0:e3:
b8:4e:2a:08:c0:ae:bd:ce:51:84:5e:a9:5c:1b:76:ee:f0:c8:
b3:60:74:67:1b:1c:d9:2c:83:e1:1d:4e:af:f4:f5:bf:4f:46:
0c:0f:87:f9:e1:f0:f1:03:6b:4b:a7:bd:ab:a4:7a:26:1d:38:
2b:2d:71:ef:cb:43:05:0c:29:a0:7b:e2:0d:f0:33:a3:93:d6:
e5:2e:01:07:3e:83:55:fd:ee:3a:80:80:44:be:9b:2b:12:af:
eb:68:72:68:a6:35:d0:8e:e1:56:5a:c0:78:93:58:2f:d5:8d:
94:f6:99:ee:b2:e4:fa:7e:cc:2f:be:39:dc:27:22:76:e4:a8:
b9:69:55:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:17 2025 by rpki-client