Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
File: snkS_-9nB4uwa9SpAh-6lq2xgL4.mft (raw, json)
Hash identifier: /nm5AN1KYyKfyJhxtkhlAVHhiXWnngwmuzIzL7VGoZw=
Subject key identifier: 00:2A:0A:BE:0A:D6:C4:9F:9F:B7:3A:CA:5B:E1:59:8E:80:4B:DC:B5
Authority key identifier: B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
Certificate issuer: /CN=b27912ffef67078bb06bd4a9021fba96adb180be
Certificate serial: 0197B7455359A9166AC953D92DB303AFAD64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
Manifest number: 1151
Signing time: Sat 28 Jun 2025 16:01:03 +0000
Manifest this update: Sat 28 Jun 2025 16:01:03 +0000
Manifest next update: Sun 29 Jun 2025 16:01:03 +0000
Files and hashes: 1: Q0e2nZwWTgSOnN3XYro_yC3AqqY.roa (hash: p1jDlEZ3jtWSk1Gt2ui3hdbzWJmpWW1M0qlAGcolPG0=)
2: snkS_-9nB4uwa9SpAh-6lq2xgL4.crl (hash: mnoXzt/PfuAhRxdutCqevSjYy52ailROhaeyINgYwXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:53:59:a9:16:6a:c9:53:d9:2d:b3:03:af:ad:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27912ffef67078bb06bd4a9021fba96adb180be
Validity
Not Before: Jun 28 16:01:03 2025 GMT
Not After : Jun 29 16:01:03 2025 GMT
Subject: CN=002a0abe0ad6c49f9fb73aca5be1598e804bdcb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:a6:92:4c:81:74:f7:52:31:53:f1:e8:ef:
68:bd:44:fe:3f:1b:7e:bb:3a:f1:9b:e5:f7:97:35:
5a:8f:6f:73:44:55:a3:82:a2:1d:98:8a:ac:d6:a8:
db:28:3e:b1:2c:30:40:d2:d5:87:f4:21:db:56:a7:
54:4e:8f:17:93:15:88:3a:00:63:a7:12:a9:03:50:
b1:ed:14:b1:75:5c:3d:5d:b6:82:12:fb:2d:ef:5b:
e4:a9:3e:cc:8f:d1:a2:bc:d4:f8:9f:7c:90:0c:ea:
37:88:de:15:41:66:b3:78:f4:f2:8e:df:97:43:33:
66:60:41:7d:96:f4:ac:db:3e:86:a6:6d:5b:ca:14:
2d:0c:3a:83:2c:5b:57:52:68:3a:a3:88:d6:88:d0:
0f:30:5f:60:3f:a9:6d:8c:10:9d:3c:62:9b:1d:80:
0f:87:36:84:57:a7:f4:8a:0d:97:3e:51:b0:48:5e:
fb:ec:49:e4:be:fc:3d:25:ec:b7:b9:cb:cb:ae:8b:
cb:2f:24:e8:dc:ce:29:cf:94:7e:b7:3b:34:b7:a6:
78:b7:ea:25:20:5a:b7:a3:0f:ef:7f:d8:a4:14:b7:
50:38:ff:d1:7e:72:ad:2a:ee:74:b6:a3:c4:e4:c2:
2f:b5:76:b3:2b:bb:67:71:09:22:b1:4a:4f:f6:f3:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2A:0A:BE:0A:D6:C4:9F:9F:B7:3A:CA:5B:E1:59:8E:80:4B:DC:B5
X509v3 Authority Key Identifier:
keyid:B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b8:f7:ed:c8:88:10:fb:32:b9:5c:67:b2:ae:5d:5c:d8:18:
82:7f:1d:af:f7:54:5e:a0:c0:c5:88:d4:34:5b:91:bf:21:23:
2f:fd:ee:56:0a:2c:6b:d2:d0:95:33:fd:89:c2:1d:44:3a:8d:
b7:1c:98:d8:ba:06:91:cb:18:91:15:6f:c2:4f:f8:43:0f:7e:
1c:45:ad:6a:20:14:19:0f:f5:f6:8b:10:5d:94:68:c7:63:21:
3c:16:43:48:be:ba:68:35:ef:71:71:eb:8a:87:df:8e:e9:b8:
ba:d9:10:cd:06:60:00:98:97:80:06:e9:70:e3:df:fd:91:11:
b9:5d:be:11:30:8b:e4:8f:be:e8:62:d5:dd:fb:40:64:4e:58:
59:e8:66:03:29:1c:a9:40:d7:9c:ab:9d:83:1d:a3:04:1e:77:
4f:ff:c9:1f:aa:1f:70:c4:44:14:9e:ac:ba:8d:66:9f:14:24:
0b:0f:6c:8f:cb:b7:25:90:64:2d:9a:fb:fe:9f:01:93:e9:8f:
70:d1:1a:23:1a:83:b6:97:97:12:a5:31:8f:59:f0:10:46:ae:
08:3f:2f:4e:91:08:5c:f5:42:3d:17:f8:d0:68:26:88:b9:f1:
fb:06:ce:d8:3b:19:bb:72:72:94:2e:18:e0:30:4a:a9:71:01:
da:e8:91:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:13:41 2025 by rpki-client