
$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
File: 8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft (raw, json)
Hash identifier: SRLLivkpklWrwULO47I5INBCL8a/20WttvI2SxMhiuo=
Subject key identifier: 3D:C4:78:18:63:83:C1:2F:F9:9B:CC:D5:39:84:32:4A:51:7C:19:D8
Authority key identifier: 8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
Certificate issuer: /CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
Certificate serial: 453DF53C0D36969CB40B34E47AA84407029764EC
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
Subject info access: rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
Manifest number: B3
Signing time: Wed 05 Nov 2025 02:23:07 +0000
Manifest this update: Wed 05 Nov 2025 02:18:07 +0000
Manifest next update: Thu 06 Nov 2025 06:12:07 +0000
Files and hashes: 1: 326130363a313238323a33303a3a2f34342d313238203d3e20323035383438.roa (hash: ONwiyOYFzhgKKPFJfWzCUzPFz/scs7X8q3Hvxa24A0Y=)
2: 8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl (hash: QReX38/p1Y4sy6wMkiCydPYlh6cPJwj908IvYM8EZck=)
3: 326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (hash: r2TeINFddDk6FLNy1P02Sojy5Y0A05B3sX9lm7yGZIc=)
4: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (hash: XXcmCcNAJFyusTP4fLJdInjZVJsyLkvh3OAm7Ll9RAg=)
5: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (hash: htr7q3jqwGtRhcinI8choYJGldgn6DHWcxEmRIqoS04=)
6: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (hash: Hbng6Qs3gtMCfgNOvlhVaZG81qH5D1zb+3kXz9K52lY=)
7: 326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (hash: tycFKYP/anx2JiNOOjsQ3oPM2wjVx4azas7m8j+efRE=)
8: 326130363a313238323a3a2f33322d3438203d3e2030.roa (hash: vJ0qkMWpV2OnLAFXaBz+BxlK7kNKmj7zan157wdGWzQ=)
9: 326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (hash: ysQzKr2LfpHKgKtqaoHWNDP3ZdvLo0/OVzWjgd0/KDE=)
10: 326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (hash: XIquqk5eatu7MDG7vJzzV3gWKxyFgt5TX70n+ScWh0Y=)
11: 32372e302e3233352e302f32342d3332203d3e20323035383438.roa (hash: DCknWSFkXEL9nevlPCXr7YdoenSsMMYUI7/Zj/O4jvs=)
Validation: OK
Signature path: rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl
rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:3d:f5:3c:0d:36:96:9c:b4:0b:34:e4:7a:a8:44:07:02:97:64:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
Validity
Not Before: Nov 5 02:18:07 2025 GMT
Not After : Nov 6 06:12:07 2025 GMT
Subject: CN=3DC478186383C12FF99BCCD53984324A517C19D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ff:b5:59:8c:84:0d:06:1d:46:03:f2:05:89:
62:20:a8:8f:91:ea:bd:9d:61:81:ed:f7:26:da:59:
0b:45:8f:c6:40:67:15:74:64:aa:71:59:4e:1e:68:
6a:da:7a:3b:f9:a5:d7:81:c3:5f:75:e2:a4:2c:fa:
cd:04:19:15:41:77:91:1b:f3:df:34:a7:4b:50:21:
6c:80:04:4d:47:fe:4e:a3:13:82:49:77:82:d6:f8:
b6:a1:85:51:1a:ec:fa:69:c0:6f:0c:19:34:a5:84:
a4:e7:97:cd:19:4d:e2:e0:07:6b:39:0f:cc:e4:f5:
90:db:38:6e:26:8c:a0:1b:1a:6a:c9:29:9d:cd:42:
1c:8f:40:1f:37:07:d6:a4:b1:9c:2c:29:af:7f:07:
4f:01:ce:37:49:ed:7b:7d:bb:91:36:3b:78:d1:d5:
34:07:ba:02:da:f1:87:50:69:df:c8:c5:ab:be:1c:
c5:a5:b3:78:b3:e1:f3:2f:23:ef:0e:ac:c1:87:eb:
b2:40:d3:88:21:d8:8e:ce:81:2d:74:01:8f:7e:13:
31:9c:19:bd:8a:8d:b5:6f:0c:98:ff:31:96:45:36:
97:da:a7:90:f0:f2:ab:c7:fd:44:27:0f:9a:d5:15:
da:47:11:4b:ad:fb:03:4d:71:0b:90:66:d2:f8:cd:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C4:78:18:63:83:C1:2F:F9:9B:CC:D5:39:84:32:4A:51:7C:19:D8
X509v3 Authority Key Identifier:
keyid:8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4d:f0:ca:c2:76:ee:21:1a:0d:af:09:06:b1:b7:d0:72:16:
80:dd:20:59:8c:32:c3:51:71:b0:69:79:1f:93:9d:7f:fe:fa:
55:0a:df:1f:aa:79:1d:87:d1:cc:67:ee:02:96:2d:59:79:20:
41:c2:a7:64:a0:31:d1:5d:e8:d3:a7:ae:a9:22:f8:ab:d2:6e:
16:05:3e:0c:99:df:93:58:40:62:a2:da:5b:7a:e1:ca:5c:9c:
75:2b:25:1b:6d:df:5b:de:88:6a:e6:1c:62:75:a7:d0:34:90:
eb:90:d4:86:9d:67:5e:0e:03:40:1e:06:f6:91:ec:94:79:e6:
cc:c3:1e:f5:e9:3b:fb:1a:23:41:b7:3a:d5:e0:34:5b:a4:09:
9d:20:09:6b:75:af:48:f5:ec:7e:c8:3d:ab:92:f9:07:3d:30:
29:6c:59:99:69:8b:79:44:55:91:cc:4e:4b:a1:c8:a8:86:70:
69:dc:0a:39:00:3d:cc:2b:1b:55:25:87:9e:4e:12:36:0b:41:
0a:d7:59:df:8a:22:60:3c:24:d0:f3:89:9c:ff:a8:d6:5c:b3:
f5:fe:df:50:79:75:ec:d1:c4:14:29:5e:9c:1b:e7:03:fa:22:
1e:6e:da:54:71:1c:80:3a:0c:92:28:f7:c9:ae:95:1b:63:6d:
ab:65:83:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:25:18 2025 by rpki-client