Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
File: SnqRfdz8JujIezCFi28H8po9tD4.mft (raw, json)
Hash identifier: u0MHUUDUgr3bJRC8ObvF6/ZutSv7ANWAA2w+p3jf0rI=
Subject key identifier: 22:7B:8A:A6:94:54:B3:25:B3:85:F1:B2:03:27:11:83:3B:C1:91:93
Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
Certificate issuer: /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Certificate serial: 0198D5BBB4D8417C93A3D2B00C26B25BE84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
Manifest number: 15F9
Signing time: Sat 23 Aug 2025 07:01:45 +0000
Manifest this update: Sat 23 Aug 2025 07:01:45 +0000
Manifest next update: Sun 24 Aug 2025 07:01:45 +0000
Files and hashes: 1: P2xh5AQS8g63oefSEJQg-RsTiE4.roa (hash: fyGkFWMTxDql0OoutRE6aQhGU1Ek1V6QoGNhwV3E3j8=)
2: SnqRfdz8JujIezCFi28H8po9tD4.crl (hash: w1ruWISa7FdS6xN6+FLCKIGPlv5jJAvWIsdG+xqLjSE=)
3: wZuLHZACRgaqannQqtWTgy9AnFY.roa (hash: ArTL5+VwNfVl+VzsgeZQzp979burQZd57vVQg0xpNM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b4:d8:41:7c:93:a3:d2:b0:0c:26:b2:5b:e8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Validity
Not Before: Aug 23 07:01:45 2025 GMT
Not After : Aug 24 07:01:45 2025 GMT
Subject: CN=227b8aa69454b325b385f1b2032711833bc19193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d6:63:b5:60:64:08:d9:6c:73:eb:3d:cb:d7:
6e:3f:fc:de:9f:a6:01:76:e1:c3:ec:5b:38:8e:ae:
6d:71:b9:3c:ac:e0:54:3c:79:67:a8:07:ab:c0:49:
5f:fe:cf:a9:c1:f1:ac:a9:9b:21:14:99:80:30:31:
af:05:69:5a:5c:eb:15:03:25:5f:67:83:22:7d:e2:
10:13:e3:8d:20:b0:19:5a:66:ba:92:f1:7f:9c:25:
93:09:10:ed:6e:bd:3a:83:b6:4e:e3:f5:0a:a2:91:
29:fb:a5:73:5d:14:06:b1:13:17:d5:b1:b6:6d:76:
4c:42:49:cd:35:ca:ba:c0:0b:32:51:c3:00:de:fa:
a9:54:0a:b6:61:a9:64:17:89:64:b6:90:0a:14:c4:
95:5a:16:dc:f5:77:e4:62:56:3f:b1:57:68:0a:49:
f9:be:d0:6e:87:01:7d:87:fb:8d:5d:f4:61:57:1b:
24:f3:07:c9:72:ce:ea:94:9b:64:a5:f6:3a:5a:ab:
52:e0:23:61:9d:9b:3c:99:fb:91:ea:d8:bb:c8:fc:
d2:92:84:d6:75:4e:bc:af:05:99:eb:a5:a5:14:f4:
99:99:7d:dc:4e:02:2a:6e:ca:75:58:19:98:73:b0:
f7:4f:a8:ee:08:a6:28:6a:84:12:49:7e:e6:7c:ea:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7B:8A:A6:94:54:B3:25:B3:85:F1:B2:03:27:11:83:3B:C1:91:93
X509v3 Authority Key Identifier:
keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:43:0c:81:2b:21:cb:72:40:98:c7:83:99:99:ad:d3:1d:94:
04:d4:3b:d5:a7:20:0f:e9:f1:a2:79:3a:87:72:4f:c6:a7:f6:
71:58:01:3b:73:a0:e8:0d:cd:27:da:4a:a8:1a:ee:39:79:86:
d9:d4:cf:c5:fd:bc:00:dd:4e:64:44:da:26:49:80:5e:b4:ee:
10:87:34:ff:cd:90:3c:2e:f0:84:16:74:ac:9c:d4:91:e0:62:
cc:17:ee:9c:61:dc:d5:f4:7c:ff:36:a9:1d:7a:f7:a1:96:12:
ba:c9:70:98:14:d6:e4:a0:9a:c1:fe:9f:a9:24:2b:72:26:88:
cf:43:05:d4:2d:20:d7:29:61:ae:99:71:43:3a:2a:08:8f:b1:
cb:cf:64:8a:d0:4e:9a:75:5c:b1:81:c9:ef:9c:8e:44:df:10:
c3:c7:4c:04:17:45:0a:7f:fd:29:23:46:c8:5f:06:39:09:f1:
b5:31:f6:e4:6a:6c:a4:9e:d0:e1:41:20:db:30:a5:b6:e0:17:
d6:f6:4e:9f:f4:3e:09:0a:e2:c1:59:a6:8c:3b:72:5d:26:ff:
86:6a:46:73:10:e0:c2:03:22:82:82:46:44:c2:90:13:0e:33:
ec:b4:39:1f:47:f5:67:73:c1:80:ba:ea:0d:a8:01:0b:92:f3:
6e:45:0d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:21 2025 by rpki-client