Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
File: SnqRfdz8JujIezCFi28H8po9tD4.mft (raw, json)
Hash identifier: nmOuA+3yPzZyqn7p+8f6w0l3FJCU4FHktKhJcfMxHi4=
Subject key identifier: D5:2D:B9:21:D6:B3:62:8E:90:6B:01:15:DF:DC:7D:90:40:6E:C4:7B
Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
Certificate issuer: /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Certificate serial: 0197B7EAB0C2B61FB00DFCC75EAD2F314D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
Manifest number: 1565
Signing time: Sat 28 Jun 2025 19:01:40 +0000
Manifest this update: Sat 28 Jun 2025 19:01:40 +0000
Manifest next update: Sun 29 Jun 2025 19:01:40 +0000
Files and hashes: 1: P2xh5AQS8g63oefSEJQg-RsTiE4.roa (hash: fyGkFWMTxDql0OoutRE6aQhGU1Ek1V6QoGNhwV3E3j8=)
2: SnqRfdz8JujIezCFi28H8po9tD4.crl (hash: letBTNtRkiGQfM1jIfwfihOyZQV4RJgIZY7iRf8G2lA=)
3: wZuLHZACRgaqannQqtWTgy9AnFY.roa (hash: ArTL5+VwNfVl+VzsgeZQzp979burQZd57vVQg0xpNM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b0:c2:b6:1f:b0:0d:fc:c7:5e:ad:2f:31:4d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Validity
Not Before: Jun 28 19:01:40 2025 GMT
Not After : Jun 29 19:01:40 2025 GMT
Subject: CN=d52db921d6b3628e906b0115dfdc7d90406ec47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:be:3a:b4:c6:cd:ad:18:29:e2:7c:fc:d8:45:
5a:21:3b:c6:e6:e6:f6:c1:79:09:8a:7a:f0:c6:f3:
29:81:9d:37:b4:78:74:3b:ce:8f:c5:e8:7c:e3:76:
10:60:c6:85:c7:00:d6:cc:04:84:0f:31:9f:ab:81:
9d:9f:88:32:ae:f7:12:de:4c:e4:c3:73:4a:d3:b5:
05:f0:ee:73:db:71:10:4a:9f:40:61:c7:28:5f:56:
9f:26:b7:3d:87:59:91:9e:e4:bf:d1:96:ea:ab:ca:
50:73:7e:31:14:52:53:bb:f7:d5:6a:a2:ef:b1:62:
51:72:ee:24:5f:d9:80:4e:00:9f:c6:af:97:f2:b0:
af:aa:29:da:c5:f8:cd:82:40:86:67:d9:95:5d:0c:
2e:c0:73:b2:a3:7d:81:7a:d7:2b:a6:3a:9c:25:50:
12:75:47:de:87:02:02:7e:b4:b6:98:11:51:32:dd:
92:b1:4d:da:e6:40:30:6a:81:ef:bb:11:7b:b8:ab:
b4:74:b7:c2:e4:e3:60:69:58:b6:07:9f:1a:e7:ab:
7f:3f:d3:19:d0:a8:85:2c:0b:ca:f4:dd:5c:24:66:
72:36:04:e0:cf:bf:21:30:4b:e4:ff:ea:6f:9d:e9:
46:08:57:12:80:4a:64:69:cf:1f:90:9d:c0:da:ec:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2D:B9:21:D6:B3:62:8E:90:6B:01:15:DF:DC:7D:90:40:6E:C4:7B
X509v3 Authority Key Identifier:
keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:22:80:67:d6:ad:97:b9:08:90:8d:6c:31:99:56:b1:f4:f0:
37:2a:b6:10:37:2e:b7:19:cd:16:9d:42:7a:b6:c1:26:83:9e:
0d:d6:5a:eb:31:a3:2a:4d:0f:19:f7:2a:0e:43:29:5e:96:3b:
54:e0:02:ae:3e:25:7c:52:cd:cd:5a:33:16:89:dd:c6:67:a5:
4d:f4:cb:78:89:c3:27:9b:91:f6:34:bd:94:b3:44:5d:1a:00:
98:03:81:48:87:9a:87:cc:16:9e:7c:b9:75:d6:8c:a6:e2:9f:
6e:fc:13:09:01:be:7c:f1:dd:fd:69:eb:6e:c4:70:1b:37:09:
24:26:6c:6f:cf:6b:58:ca:42:8c:4e:96:f4:77:6b:7f:12:9e:
98:66:3a:e7:c1:ad:e2:0e:38:f1:6f:31:38:77:48:1b:59:7c:
b9:15:66:e4:03:27:8d:56:74:01:c6:38:9a:da:9f:65:2a:fa:
86:7c:ec:30:6c:78:4a:a9:74:65:45:df:ca:b2:3f:d5:4f:70:
19:f6:d0:39:b2:ca:dc:f3:d8:e7:cf:e7:5c:ab:09:02:9e:f0:
63:29:50:9e:ca:5a:80:2c:bf:15:76:04:56:58:0b:8a:c8:1b:
1f:f7:9e:ff:f7:cc:c5:c0:aa:25:75:51:95:9b:63:63:01:1f:
98:fe:65:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:40 2025 by rpki-client