Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
File: Snz-iBFothWgvUEcwxS9BApNJ_Y.mft (raw, json)
Hash identifier: Yf7mZbgtrfp6RRCmGvvL3mCixKnUpRLLo5gJkBzxIhk=
Subject key identifier: B0:12:B9:22:A0:AB:ED:36:69:0E:D3:91:15:A2:CA:1C:4D:FB:95:5A
Authority key identifier: 4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
Certificate issuer: /CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Certificate serial: 0196CE06197D1FC987777AFA1F4DC0C34EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
Manifest number: 153A
Signing time: Wed 14 May 2025 09:00:28 +0000
Manifest this update: Wed 14 May 2025 09:00:28 +0000
Manifest next update: Thu 15 May 2025 09:00:28 +0000
Files and hashes: 1: Snz-iBFothWgvUEcwxS9BApNJ_Y.crl (hash: aCWqEDuP3fhFgbYUNB76Co5L8x28YOyY8f0S3zmKIM8=)
2: h_GYODiIwy0tVyLDmKAyNCK7Ui8.roa (hash: EVyFdfHvchtGYnioVymnJTf1ceZLIXds+uNSkp7sgG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ce:06:19:7d:1f:c9:87:77:7a:fa:1f:4d:c0:c3:4e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Validity
Not Before: May 14 09:00:28 2025 GMT
Not After : May 15 09:00:28 2025 GMT
Subject: CN=b012b922a0abed36690ed39115a2ca1c4dfb955a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:62:0c:86:58:34:59:fd:5d:da:b7:40:b2:c9:
19:ef:08:3f:b3:1f:b2:bc:e6:37:0e:55:cf:d2:d5:
c0:5b:c5:4f:ee:1b:6c:a0:48:93:b3:5c:d6:f8:9d:
7f:80:4d:76:8b:16:59:04:ae:78:71:fc:71:94:f8:
46:65:d3:48:1b:6d:e0:64:3c:36:9c:bf:6b:a2:9b:
f4:a3:31:6b:b2:2a:7c:1e:7f:64:99:93:dc:9e:02:
fb:74:70:34:9f:2b:73:f4:e5:34:34:78:54:d8:6b:
4e:1f:5b:1b:d0:42:ba:fc:e6:ba:4e:09:f9:41:c4:
e5:24:98:45:d0:6a:de:0e:75:9d:79:2b:a1:0c:3c:
84:a6:69:aa:fe:eb:cb:b9:f6:e1:98:44:a9:70:ef:
fb:55:85:e9:8c:af:19:66:de:b1:66:94:a6:84:df:
66:c7:94:84:d6:78:0a:5b:07:8c:9a:ff:b1:eb:29:
ca:d5:a7:c6:86:35:11:87:4c:20:08:44:44:c5:5e:
b4:bf:65:aa:9d:21:f3:67:4a:5a:f6:23:50:d1:25:
06:4b:92:21:4f:e3:84:33:0c:7d:03:8c:dd:2a:0d:
d5:55:4e:76:52:18:79:2b:c3:ec:f7:a6:0b:d3:fb:
58:b0:26:ef:4f:ed:a1:d2:39:a9:c1:72:34:9b:46:
27:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:12:B9:22:A0:AB:ED:36:69:0E:D3:91:15:A2:CA:1C:4D:FB:95:5A
X509v3 Authority Key Identifier:
keyid:4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:59:0f:02:39:7e:58:3a:10:6d:e9:ac:fb:77:03:a1:9c:5e:
92:0c:50:75:c2:c9:8f:88:25:e3:97:67:37:e5:9e:a6:ab:95:
62:ef:1f:81:ce:5c:f7:d3:6c:21:4f:da:7a:29:6f:23:b3:13:
0a:d6:d9:e9:45:3f:1a:de:c6:f7:d9:30:0b:b1:29:be:5c:2b:
16:48:6f:f5:c4:8c:2e:a7:2b:10:21:ce:e1:64:63:32:70:2d:
be:56:96:05:52:91:90:54:19:f0:05:77:6f:4b:12:4e:7a:48:
0f:b9:e7:88:a5:8c:95:1a:3d:8f:99:78:2d:e1:e6:e9:c0:8a:
31:15:d4:a4:1a:0a:b4:84:5a:2f:40:45:0f:2d:55:a4:52:e5:
2d:11:b1:29:25:3a:03:a7:68:25:07:f0:a3:dd:60:94:2a:8b:
b7:63:92:46:8e:37:89:8d:65:e1:f6:77:cd:a2:e8:83:8e:90:
f1:a3:11:26:4c:09:1e:d6:c6:12:a7:1a:81:bd:24:79:10:77:
69:26:5c:47:49:f9:36:8a:c0:ca:b0:ad:27:6d:18:93:a8:7f:
66:67:f8:f9:49:cb:e9:0f:66:3d:c5:fa:e5:ed:ff:e7:88:42:
5b:48:36:48:ad:1a:51:e8:e2:45:0f:a9:1a:0b:e5:f0:79:e0:
56:6c:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:08:18 2025 by rpki-client