Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: CdC7mNys+GJ5Bwp6cpTj7Ab6gpp02JrRFd6JPSayzgU=
Subject key identifier: 72:79:59:70:95:08:27:45:01:D5:66:C3:E7:B5:B3:C4:40:17:D5:AC
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 0197778AFC3ADA06A741FBD179DBCDA5A21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 11CA
Signing time: Mon 16 Jun 2025 07:01:26 +0000
Manifest this update: Mon 16 Jun 2025 07:01:26 +0000
Manifest next update: Tue 17 Jun 2025 07:01:26 +0000
Files and hashes: 1: OaynJV0qbIIk7EsSxRIucNannDI.roa (hash: rLhfi7PeZU4mZH9NTsaCKUtzejxWWyeiOXooqE3dPpU=)
2: ZsJ1p0f-2YgNmBDafzu2GWckT34.roa (hash: kKQedLsISeBKSivLfM6tlDNDN9VJMt9n4EQssMfjNOQ=)
3: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: ca4+yujgo/AEF4iLhyQD8lOi0VS05XFHUAlhI2SHc5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:8a:fc:3a:da:06:a7:41:fb:d1:79:db:cd:a5:a2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Jun 16 07:01:26 2025 GMT
Not After : Jun 17 07:01:26 2025 GMT
Subject: CN=727959709508274501d566c3e7b5b3c44017d5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:60:dc:1e:e6:60:d1:6f:b5:9f:c5:b7:f3:
29:bd:93:20:19:5b:9f:df:9f:13:7b:c7:7c:c3:46:
0d:ec:1d:9e:ac:24:ff:7c:e1:14:35:42:ab:a3:cd:
a3:53:1b:c9:aa:e5:d7:b7:9f:7b:9b:59:aa:ef:84:
93:f2:a9:36:81:01:25:db:a5:e2:75:59:40:ee:df:
2d:e9:83:fd:8d:11:a6:23:a0:bf:8a:84:b2:87:8a:
2a:7e:ed:3c:b7:3d:a3:c9:d2:dd:c1:7f:b4:93:89:
8a:e1:7f:51:fe:cf:eb:ff:da:73:b9:c0:cc:e2:7b:
5e:b5:7e:3c:ba:b1:42:17:40:70:e8:f9:ed:bc:9b:
fb:95:a5:74:5c:85:cb:87:2f:40:74:6c:b2:b2:bb:
63:21:a5:c1:08:a9:81:fb:63:fd:eb:1b:d9:42:da:
51:15:2d:a2:de:4e:f1:39:0f:89:37:f0:c2:c9:1d:
49:0f:d8:9b:a2:a3:97:a9:ff:05:01:99:3c:8d:b8:
24:51:0a:5d:05:fa:2f:40:0d:ae:df:48:f5:59:3e:
49:5c:03:60:19:10:a3:ae:7b:55:b6:e9:99:87:10:
a9:df:aa:dc:93:50:2d:22:49:e2:64:cb:75:7c:b7:
b1:21:0d:e7:f2:ee:2a:06:2d:80:2f:1b:01:b3:37:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:79:59:70:95:08:27:45:01:D5:66:C3:E7:B5:B3:C4:40:17:D5:AC
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:1d:c7:43:dd:db:9c:ee:dd:16:1d:05:0c:2b:5a:38:a2:0b:
f4:df:ff:a6:99:19:17:f4:e9:b5:d3:51:7f:16:10:bf:f8:4b:
31:31:fd:0a:70:82:d3:ce:94:97:94:cd:15:0a:aa:20:46:05:
2d:31:46:16:9b:7b:db:74:50:35:95:22:a5:0a:bc:96:1e:21:
f2:9f:f1:a7:97:4a:c2:a3:b8:d3:ca:0d:c6:46:eb:eb:92:d7:
d3:d6:d2:8a:68:a6:d8:7a:11:b1:fd:03:39:68:5b:53:d6:03:
44:af:9d:ea:e1:ca:22:76:fb:7f:8e:01:a8:aa:67:79:e5:2f:
09:52:8c:86:f0:54:57:cf:c0:e6:2c:3a:0c:8e:cc:56:2a:fd:
43:0b:7e:fc:96:38:43:8f:8b:d7:8b:ea:3c:bd:fb:b5:bd:69:
23:16:4e:57:12:28:63:40:0a:59:1e:26:e9:bd:e2:80:3f:3f:
0f:f9:d9:24:0f:82:04:10:99:08:d1:f7:c7:94:2d:f2:3b:c5:
d2:21:79:04:ba:d9:12:a1:06:81:3c:c8:4b:b3:97:c5:41:20:
1a:2b:f7:60:4b:1d:5e:dd:f4:80:94:a1:1d:26:71:db:c1:cc:
b2:96:4d:71:a0:40:ba:47:d0:da:6f:6e:fb:e9:aa:f6:96:9a:
44:e2:8b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:26:29 2025 by rpki-client