Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier: n68fId2LvURZyozojB3HUgNsoOhyOyktxzMh73xA2dQ=
Subject key identifier: E3:8B:E9:E5:E8:0D:22:3F:D7:0E:57:AA:AD:2E:F1:CA:4C:EC:57:77
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 0197B7B313930DA2C3A15F943D53F7CA644A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number: 08A4
Signing time: Sat 28 Jun 2025 18:00:55 +0000
Manifest this update: Sat 28 Jun 2025 18:00:55 +0000
Manifest next update: Sun 29 Jun 2025 18:00:55 +0000
Files and hashes: 1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: wjS8QfwpsNhd2IMq3yGSUzhIY7E+AiWPqhf/gWzcEY4=)
2: _2GPXm0W5pqTGfOSlDVI1ePI1QE.roa (hash: 9R3xfYmKYkm/k3uZLHas6Z2h3l83dSwTWGdwQsjNnVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:13:93:0d:a2:c3:a1:5f:94:3d:53:f7:ca:64:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: Jun 28 18:00:55 2025 GMT
Not After : Jun 29 18:00:55 2025 GMT
Subject: CN=e38be9e5e80d223fd70e57aaad2ef1ca4cec5777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3e:91:6b:2f:83:ff:c9:fc:8a:3a:40:2c:a4:
ce:cd:9e:7a:13:1e:c0:ea:9f:15:c4:2c:64:88:ce:
b6:eb:e9:20:aa:38:3a:89:f0:2d:30:b9:9d:8a:60:
6c:38:54:ba:21:dd:a9:18:69:a8:30:3d:69:da:7c:
54:16:26:4c:f5:95:49:b6:0b:2b:12:71:8e:d3:88:
bc:e7:ca:80:80:8c:fa:c2:2c:1e:51:ae:73:cc:c9:
92:76:40:50:41:c9:6a:73:7a:57:f3:df:26:1f:6e:
50:58:22:a9:4d:9f:14:29:b4:a2:de:8f:b0:0f:d4:
0a:86:b6:56:85:25:5c:51:4b:1b:71:62:f9:bd:8d:
c2:59:5b:a1:e0:3d:04:3a:74:c2:e1:bc:30:86:5c:
fe:94:38:c3:e3:3f:83:ff:68:ac:5a:ba:97:fb:37:
f2:8e:95:40:d0:c3:3e:5c:5a:65:2b:73:1f:a5:29:
e5:b0:6c:e4:71:85:6d:ce:5a:cb:93:21:32:71:11:
c0:e9:33:f1:c7:e5:c7:f2:f3:6b:aa:25:23:3e:5a:
4e:91:43:c4:b2:db:84:0b:58:2b:ef:fd:b1:a4:68:
7d:28:a3:ad:cb:43:c4:b4:90:1f:32:04:0c:25:4d:
c6:58:77:23:bf:37:18:27:4f:57:e1:c9:2c:c2:fa:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8B:E9:E5:E8:0D:22:3F:D7:0E:57:AA:AD:2E:F1:CA:4C:EC:57:77
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:91:b0:7d:ad:0d:57:cf:7d:ed:26:8e:f3:2e:74:8e:ef:da:
ec:c6:81:5e:13:4d:4a:e9:0e:f1:75:b1:1b:f9:4b:47:3c:33:
12:d4:c4:83:9d:60:b8:95:68:e9:54:59:ca:c5:97:4c:be:14:
06:43:43:d9:c4:31:54:a6:d9:24:1d:d7:72:c6:02:3a:64:06:
c3:8a:93:91:0a:8f:2e:35:4a:a2:1f:52:e4:05:5a:1b:08:05:
c4:e1:93:20:32:70:9e:34:0f:a0:9c:00:ed:62:c1:bf:25:02:
ab:dd:e9:5e:bd:f9:77:55:d0:e2:9d:15:59:a1:6f:c2:11:da:
d0:05:a1:ba:2b:a6:1d:07:8b:01:52:7c:ab:d1:ab:0d:e0:e5:
42:93:87:8b:03:b5:c7:86:a8:a9:48:ca:5b:fd:70:2b:06:61:
6c:ce:79:97:59:52:cf:c6:01:4c:0a:10:b3:a8:6b:05:c7:d7:
fa:4f:b7:e0:56:d4:9b:ca:c0:5d:09:5d:e4:e9:12:6f:c2:67:
9b:b3:69:71:12:81:35:a1:a2:fd:dd:1d:d4:12:6e:ce:8e:02:
f6:d3:da:6b:d3:be:16:ef:1f:91:f2:01:4a:f2:01:de:82:f2:
be:ff:0d:b2:09:71:a2:29:29:44:81:c3:2d:df:cd:3f:64:77:
b5:de:36:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:17 2025 by rpki-client