Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
File: snkS_-9nB4uwa9SpAh-6lq2xgL4.mft (raw, json)
Hash identifier: aMrDe80GAB3CTm3iBqcbcnpSdtVSq1DXl8Z8No1zjZk=
Subject key identifier: BB:61:2A:60:79:0F:FD:61:3A:53:62:35:9E:18:43:BE:A1:51:95:2B
Authority key identifier: B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
Certificate issuer: /CN=b27912ffef67078bb06bd4a9021fba96adb180be
Certificate serial: 019A006BE73C150C209A38D59331E8943B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
Manifest number: 1280
Signing time: Mon 20 Oct 2025 07:01:02 +0000
Manifest this update: Mon 20 Oct 2025 07:01:02 +0000
Manifest next update: Tue 21 Oct 2025 07:01:02 +0000
Files and hashes: 1: Q0e2nZwWTgSOnN3XYro_yC3AqqY.roa (hash: p1jDlEZ3jtWSk1Gt2ui3hdbzWJmpWW1M0qlAGcolPG0=)
2: snkS_-9nB4uwa9SpAh-6lq2xgL4.crl (hash: 3QDkunfO5G+HRSM7M9/Nw8O7y7WTjpie+y8cIhFqqKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:e7:3c:15:0c:20:9a:38:d5:93:31:e8:94:3b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27912ffef67078bb06bd4a9021fba96adb180be
Validity
Not Before: Oct 20 07:01:02 2025 GMT
Not After : Oct 21 07:01:02 2025 GMT
Subject: CN=bb612a60790ffd613a5362359e1843bea151952b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c7:8a:c1:09:47:8c:31:d9:9a:e6:68:6b:32:
bc:5e:0c:d1:39:77:c9:a8:18:a9:b1:e4:8b:f5:15:
d5:c2:69:77:fc:73:3a:4b:6d:9c:73:4a:4a:7e:24:
1f:46:71:ce:3b:de:6d:df:4c:35:21:f8:06:74:f6:
f6:9a:0d:34:d5:5d:d6:82:80:0a:2d:aa:97:ce:e3:
5f:08:01:39:1e:ac:8d:c1:06:a8:51:98:56:54:65:
61:4e:c5:75:a7:a7:c8:d7:d2:89:01:94:cb:3e:a3:
2f:05:cf:70:18:68:2d:a5:9e:14:24:70:98:e4:f5:
f5:c6:30:a7:60:78:5b:42:d2:f7:74:85:ea:62:62:
6f:b0:9f:da:87:c2:5d:5d:29:df:4d:bb:d1:92:8c:
b7:cb:68:ef:99:74:42:10:ad:a0:03:33:ac:4d:b7:
d1:6c:12:b0:37:ed:57:31:df:77:a2:b5:d0:e9:fd:
dc:76:d6:77:3e:60:ae:6c:44:eb:41:88:8e:d1:1b:
dc:d5:ba:63:5e:e3:0e:25:2c:b0:0d:55:45:b1:70:
f1:f4:cf:fa:be:1f:37:ce:fa:09:9d:b7:02:0d:2d:
a3:8c:3b:d9:f7:a5:52:27:f7:a8:aa:d8:23:72:16:
f2:10:7f:31:44:23:0f:70:0c:1b:49:fb:63:24:8e:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:61:2A:60:79:0F:FD:61:3A:53:62:35:9E:18:43:BE:A1:51:95:2B
X509v3 Authority Key Identifier:
keyid:B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ec:9c:8d:58:eb:d7:0b:9d:af:13:be:d9:57:aa:cc:ef:0a:
73:b0:4b:7e:77:60:4d:b4:fa:03:db:10:e7:fb:ae:19:11:7b:
45:9d:af:88:00:5a:df:d4:8d:7e:b8:6e:7d:1b:4b:ab:15:8a:
a0:2d:f8:a3:c8:f4:84:8a:6e:a4:f0:b0:84:7d:2c:65:15:ce:
5e:46:02:2f:fe:4e:fc:11:8d:73:bb:5e:b3:88:8c:63:10:d5:
33:ad:82:95:1c:20:71:4c:6f:ae:2d:c9:b7:84:6d:a0:89:da:
08:64:8b:22:88:76:50:a0:01:4b:dd:0b:5d:46:64:85:b4:e9:
93:28:46:8a:7b:2c:4d:7a:e0:0c:7d:ce:38:26:97:85:c2:a7:
e3:99:76:2f:27:95:60:cb:2d:05:cd:93:05:9e:02:30:4e:29:
80:6f:19:32:ac:46:bc:bd:a6:0d:a7:2b:4a:51:c8:15:46:d2:
86:a3:a0:c4:d0:e4:6a:82:cb:83:2f:b4:01:34:26:dc:5b:60:
8c:f4:78:af:f5:22:e7:bf:f0:d8:c6:b0:7f:cb:17:8b:aa:fd:
2e:5e:ba:18:c9:25:49:e9:b6:50:56:b3:41:d8:8b:d5:fc:78:
07:b2:a2:62:f3:a8:9c:c3:36:b7:0d:3e:22:d2:4a:a8:07:4d:
dd:a3:b5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:38:47 2025 by rpki-client