Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
File: Snz-iBFothWgvUEcwxS9BApNJ_Y.mft (raw, json)
Hash identifier: VKGR5XkoszMtO3bYU88OWc0B9MmJvQMEI2ZT0vUjGfw=
Subject key identifier: 62:77:EF:4D:4E:7F:9F:CD:1E:42:EE:27:47:B7:22:2C:A5:0D:EA:16
Authority key identifier: 4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
Certificate issuer: /CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Certificate serial: 0198D7733E2B4C133A02E06099E9E3F7077E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 15:01:50 +0000
Manifest this update: Sat 23 Aug 2025 15:01:50 +0000
Manifest next update: Sun 24 Aug 2025 15:01:50 +0000
Files and hashes: 1: Snz-iBFothWgvUEcwxS9BApNJ_Y.crl (hash: k+Knch1qZ5OSIgtDBa385HJnbAfh59AoJBgeSCVmCZg=)
2: h_GYODiIwy0tVyLDmKAyNCK7Ui8.roa (hash: EVyFdfHvchtGYnioVymnJTf1ceZLIXds+uNSkp7sgG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:3e:2b:4c:13:3a:02:e0:60:99:e9:e3:f7:07:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Validity
Not Before: Aug 23 15:01:50 2025 GMT
Not After : Aug 24 15:01:50 2025 GMT
Subject: CN=6277ef4d4e7f9fcd1e42ee2747b7222ca50dea16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:3a:fb:0d:0f:e7:83:bf:cf:0f:af:37:2c:
1f:38:5a:fa:ea:d0:2d:88:b8:e6:25:62:44:51:fe:
09:0b:15:9c:77:83:84:7d:60:7f:79:ad:1c:14:13:
6f:7f:9e:ef:e6:0c:5a:fa:de:20:ec:6d:a1:b3:f0:
22:32:d3:0e:6b:79:37:2c:c2:8f:50:bb:0d:ea:a1:
e9:69:97:f3:c7:6b:a3:b1:28:f4:e6:63:84:b7:2c:
ea:25:a7:51:a4:0d:14:4d:94:86:5c:65:2e:0b:6c:
f2:61:fd:e8:04:19:df:e7:10:26:32:47:82:bc:0c:
37:c1:08:32:84:56:41:8f:f5:63:d8:f6:14:aa:4c:
91:ff:4e:76:db:32:b7:ba:ff:52:c1:06:12:6d:ea:
58:1f:5b:6b:67:80:29:7f:dd:fb:74:b9:4f:46:1e:
12:b2:84:76:29:0a:ae:9b:e8:bd:2f:ec:7c:df:f2:
01:7d:f9:fe:ac:fc:88:f5:10:15:e3:b0:d8:d2:cc:
c8:0a:44:cf:0c:57:e1:b3:37:e0:33:28:27:59:8d:
f8:55:a4:47:c2:ed:5a:85:49:f1:50:65:2a:b2:e7:
93:b1:b5:b4:16:ff:50:b6:9d:03:fe:74:ce:6c:9f:
be:a8:0f:b6:f8:96:e0:96:b0:f7:77:a4:e4:e0:fc:
f0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:77:EF:4D:4E:7F:9F:CD:1E:42:EE:27:47:B7:22:2C:A5:0D:EA:16
X509v3 Authority Key Identifier:
keyid:4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f1:69:10:65:85:6f:81:30:ee:fb:9d:63:cd:2d:fa:c0:1a:
d0:8d:40:73:cc:9a:c8:7b:6d:0d:43:90:81:43:6c:d1:bc:79:
12:fe:b7:0e:bc:2b:00:73:d4:ba:93:75:3f:0b:ac:48:f5:97:
a0:ef:47:2c:4d:6e:af:45:ba:b6:1b:79:6d:4b:a7:6b:29:9e:
62:92:94:82:b0:ea:97:dd:35:38:8d:f9:a2:c3:2f:f7:8f:99:
50:56:7b:74:d8:e1:2b:44:d7:0d:39:71:33:72:56:2b:b9:4e:
7c:57:41:42:f3:cf:73:98:c3:81:eb:22:5b:b2:40:58:f9:18:
bf:e0:27:8e:b1:b9:c2:f9:5f:6b:0a:10:fa:eb:88:a5:61:58:
1e:39:17:46:41:6b:67:d5:78:3c:40:33:a3:45:06:30:95:34:
2d:98:c6:4c:69:04:8b:eb:4f:1b:97:67:1e:7e:cd:5a:df:81:
65:21:4d:11:d1:1b:bd:3d:8d:1c:01:a8:b5:93:f5:96:c9:d0:
72:71:cc:39:48:d0:3a:f1:58:22:d5:92:50:5f:32:a1:c8:ff:
9b:26:7b:9e:90:2e:61:28:93:c5:08:13:41:68:89:e7:a8:c2:
4a:ce:1a:0d:c6:f9:25:93:4a:6c:5a:0e:a3:cd:65:79:2e:bb:
55:7a:85:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXcz4rTBM6AuBgmenj9wd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhN2NmZTg4MTE2OGI2MTVhMGJkNDExY2MzMTRiZDA0MGE0
ZDI3ZjYwHhcNMjUwODIzMTUwMTUwWhcNMjUwODI0MTUwMTUwWjAzMTEwLwYDVQQD
Eyg2Mjc3ZWY0ZDRlN2Y5ZmNkMWU0MmVlMjc0N2I3MjIyY2E1MGRlYTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2Y6+w0P54O/zw+vNywfOFr66tAt
iLjmJWJEUf4JCxWcd4OEfWB/ea0cFBNvf57v5gxa+t4g7G2hs/AiMtMOa3k3LMKP
ULsN6qHpaZfzx2ujsSj05mOEtyzqJadRpA0UTZSGXGUuC2zyYf3oBBnf5xAmMkeC
vAw3wQgyhFZBj/Vj2PYUqkyR/0522zK3uv9SwQYSbepYH1trZ4Apf937dLlPRh4S
soR2KQqum+i9L+x83/IBffn+rPyI9RAV47DY0szICkTPDFfhszfgMygnWY34VaRH
wu1ahUnxUGUqsueTsbW0Fv9Qtp0D/nTObJ++qA+2+JbglrD3d6Tk4Pzw5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJ3701Of5/NHkLuJ0e3IiylDeoWMB8GA1UdIwQY
MBaAFEp8/ogRaLYVoL1BHMMUvQQKTSf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU256LWlCRm90aFdndlVFY3d4UzlCQXBOSl9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zMjI0NTAtMjFjYS00MWFmLTliNjUt
Y2JlMDg0ODcyMTc0LzEvU256LWlCRm90aFdndlVFY3d4UzlCQXBOSl9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zMjI0NTAtMjFjYS00MWFmLTliNjUtY2JlMDg0ODcyMTc0
LzEvU256LWlCRm90aFdndlVFY3d4UzlCQXBOSl9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvFpEGWF
b4Ew7vudY80t+sAa0I1Ac8yayHttDUOQgUNs0bx5Ev63DrwrAHPUupN1PwusSPWX
oO9HLE1ur0W6tht5bUunaymeYpKUgrDql901OI35osMv94+ZUFZ7dNjhK0TXDTlx
M3JWK7lOfFdBQvPPc5jDgesiW7JAWPkYv+AnjrG5wvlfawoQ+uuIpWFYHjkXRkFr
Z9V4PEAzo0UGMJU0LZjGTGkEi+tPG5dnHn7NWt+BZSFNEdEbvT2NHAGotZP1lsnQ
cnHMOUjQOvFYItWSUF8yocj/myZ7npAuYSiTxQgTQWiJ56jCSs4aDcb5JZNKbFoO
o81leS67VXqFyw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:35:34 2025 by rpki-client