Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
File: snjtj5eA8p2voi-f3wM3TaSYDpQ.mft (raw, json)
Hash identifier: oEpK0wafuVq50tyq7fbolTJt9yKjFtuQllQwyWXO6R4=
Subject key identifier: D0:21:A3:D8:39:00:87:32:63:E8:45:0A:0F:BD:01:1F:C6:8F:9E:91
Authority key identifier: B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
Certificate issuer: /CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Certificate serial: 0199FBEC0D95A865DAD7816450FD38C77339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
Manifest number: 113A
Signing time: Sun 19 Oct 2025 10:02:55 +0000
Manifest this update: Sun 19 Oct 2025 10:02:55 +0000
Manifest next update: Mon 20 Oct 2025 10:02:55 +0000
Files and hashes: 1: Q2ddpl6C3V4vYBl0I3228luG5oU.roa (hash: gKtH3NhXGtSIchcMlB2GM3eSMYDb2zE1qytNooqyMO0=)
2: snjtj5eA8p2voi-f3wM3TaSYDpQ.crl (hash: y3tWHQH/jtrxtIpSi4stuILWG30rBNItJoPDE5eDTes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0d:95:a8:65:da:d7:81:64:50:fd:38:c7:73:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Validity
Not Before: Oct 19 10:02:55 2025 GMT
Not After : Oct 20 10:02:55 2025 GMT
Subject: CN=d021a3d83900873263e8450a0fbd011fc68f9e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:45:8e:0f:d2:b3:a9:e2:1b:b6:7f:d9:97:
9b:db:e7:cf:12:eb:fc:9e:4a:02:71:0f:c8:c4:b6:
3c:e0:57:ae:0a:64:70:15:a5:1d:3e:61:5a:f7:76:
9a:41:8a:2d:d1:35:27:bf:4a:1f:7b:10:32:ff:d8:
c4:57:6a:2b:3a:ac:62:69:b5:9f:27:bb:c7:e7:fa:
40:5a:46:0f:9f:9f:9a:15:12:25:f6:cb:a7:16:41:
d9:c1:ab:df:20:ad:3f:fe:24:6a:e5:ad:b6:a1:94:
a0:51:88:17:9f:17:63:56:87:bc:63:1a:69:ea:69:
8c:3c:27:e7:f6:c2:35:7b:43:05:26:55:08:18:50:
0b:b9:36:30:2a:5a:59:85:c9:c6:bf:2a:a8:9a:e7:
84:b8:fc:62:e8:81:16:d9:a3:73:3d:c5:22:19:26:
8f:03:4f:6b:96:1a:a7:91:16:bc:a5:f7:ba:3e:c6:
99:ff:30:db:b7:9e:1e:ca:69:33:7d:9a:b6:0a:cc:
6c:24:d7:f4:24:34:f3:8e:0a:39:9c:5a:29:3c:9e:
5c:a2:c6:0a:b4:37:d2:0e:46:63:2d:36:37:ff:cb:
88:17:c9:48:36:7f:d2:97:d2:4c:4f:2e:bc:8c:9a:
71:34:26:d9:1c:10:f0:a5:4f:42:e1:ad:93:43:39:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:21:A3:D8:39:00:87:32:63:E8:45:0A:0F:BD:01:1F:C6:8F:9E:91
X509v3 Authority Key Identifier:
keyid:B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:36:fe:dc:7a:b2:10:2b:ff:84:17:ca:18:1a:82:56:fe:11:
cd:ed:14:56:b3:08:76:8d:36:39:fa:2d:6b:ca:65:a6:d3:3d:
69:d3:3c:54:91:17:09:7b:f9:a3:88:c7:0e:c8:54:95:a6:9e:
da:8f:a3:a0:2c:bc:db:e7:69:bd:d7:28:0f:08:66:be:a2:a8:
d2:5d:84:3e:d1:6f:8c:98:16:4d:bf:0f:9e:6f:49:dd:53:73:
a4:3e:1c:e4:31:a1:6a:35:42:6b:aa:5a:b8:ff:18:f8:b8:f1:
fe:20:a6:51:46:e2:ec:2f:3c:e0:fe:0e:a7:1c:60:62:9a:e1:
51:78:85:0e:7d:73:58:b7:e4:82:98:9f:0a:51:90:d1:83:bf:
64:0e:f9:a1:2a:20:4b:fc:7e:cf:7e:83:89:3e:76:6e:a7:b2:
92:66:81:e8:d5:86:60:a3:bf:6a:71:08:0a:1d:a1:ff:91:eb:
ce:a8:1e:b5:0d:a3:ee:11:4b:d1:e8:dc:38:45:e2:18:66:95:
b6:96:b7:21:dd:d9:cb:55:07:3b:d4:f1:f1:d6:d6:95:5f:05:
13:c3:2e:93:6e:e9:06:37:d8:bd:36:b1:de:53:b1:f6:4d:84:
73:50:23:96:46:f6:e6:21:d1:af:4a:72:30:bb:58:ac:2a:bf:
2c:fb:c7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:32 2025 by rpki-client