Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
File: snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json)
Hash identifier: nE9V0MFKFMm3TdjRIkh5QkJp0z2P2M+v+QXpfXXeRVY=
Subject key identifier: 88:F9:B1:F0:40:DF:0E:1E:4F:2E:08:48:3C:F7:B1:8A:14:71:20:6A
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial: 0199FC5837B5F56F63FAF079111EC60EB04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
Manifest number: 0F15
Signing time: Sun 19 Oct 2025 12:01:03 +0000
Manifest this update: Sun 19 Oct 2025 12:01:03 +0000
Manifest next update: Mon 20 Oct 2025 12:01:03 +0000
Files and hashes: 1: HRiBqkMm3jYdrvB2_suIlLpeJLU.roa (hash: thuo/2wKh04k5fV07y+BJSuu+CRS6TthbxD3yT9m+AM=)
2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: Nu8az/szdJi6LIu1mqAk7G3GOaFlzHp1hHVs+WbKoZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:37:b5:f5:6f:63:fa:f0:79:11:1e:c6:0e:b0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
Validity
Not Before: Oct 19 12:01:03 2025 GMT
Not After : Oct 20 12:01:03 2025 GMT
Subject: CN=88f9b1f040df0e1e4f2e08483cf7b18a1471206a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:fb:e2:b4:e9:b4:ab:08:da:2a:bf:2e:c5:
7e:5a:89:00:f3:2e:1b:c5:ab:20:d7:46:dd:e1:05:
ab:5a:77:57:91:d9:77:b4:0a:0b:ee:ab:18:5f:06:
33:54:15:ec:fc:08:0c:c9:ee:c2:c3:ac:04:c3:7a:
70:53:a7:d9:7d:5d:74:dd:b0:db:5c:58:17:57:7b:
8b:ae:53:34:84:24:c2:c5:1e:63:7c:c9:dc:8c:d7:
00:cd:39:ec:3d:08:49:59:5a:96:3d:8d:ed:3b:d1:
dd:1f:9d:9d:04:8b:f1:4d:33:3f:ce:87:5c:74:1c:
f7:a9:02:e8:11:cb:5f:85:36:37:f1:20:bc:a0:85:
67:cb:f4:49:fe:1c:3a:77:ff:33:13:bf:6f:1a:0f:
08:0d:88:21:c8:81:35:a4:b1:02:c9:48:04:9a:f0:
7f:1c:10:b9:4a:be:e9:08:dc:60:ee:a5:4a:76:70:
e0:98:b6:94:5c:f1:1e:e7:7a:53:7f:d2:c6:e6:a2:
66:4f:99:1e:c5:67:a7:b3:23:fb:ac:c2:34:f1:97:
32:38:28:91:5a:2b:17:b3:5a:a5:9f:a8:74:12:58:
1e:a1:71:e5:53:01:04:6f:e2:94:3a:13:23:c3:f0:
34:75:4b:fb:7d:12:28:c2:12:47:d1:8d:7b:78:cf:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F9:B1:F0:40:DF:0E:1E:4F:2E:08:48:3C:F7:B1:8A:14:71:20:6A
X509v3 Authority Key Identifier:
keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ee:61:f4:67:e0:c4:fc:8f:98:20:ef:0b:bf:5a:86:26:0d:
fc:3f:17:9a:04:39:f0:69:5a:4c:01:e6:0f:ca:91:09:1e:45:
b8:b2:2e:62:a3:b1:e1:ac:44:8f:34:57:01:16:e5:6b:46:e7:
b6:10:b2:4c:02:68:d4:11:19:af:9b:20:02:29:ff:41:27:de:
3e:60:33:d7:53:d4:5d:ac:cb:ef:2b:b8:a5:46:b0:25:9c:4b:
9c:53:3c:69:ed:4b:d1:a5:98:b3:cf:c0:14:76:e5:49:c8:e3:
12:32:c5:54:f5:a2:15:f4:12:3c:b4:1f:ab:b3:1b:ee:79:2b:
85:7b:32:15:48:e3:fe:a1:2f:12:34:e2:64:ff:3c:dd:62:64:
3e:97:2a:a4:ef:69:56:b7:bd:65:f1:1d:02:a0:43:32:40:75:
c8:88:e4:ee:87:b6:66:55:aa:c9:82:36:17:e4:5d:2f:61:dd:
8a:b4:d0:07:d4:ff:27:82:52:85:7c:b3:03:b9:5b:84:d8:74:
a2:24:fb:a0:53:8d:21:04:d6:8e:7d:cc:d3:61:4f:ce:ae:9e:
5d:cd:6e:02:52:bc:a0:f9:e4:8d:2d:9a:7d:de:39:74:2b:df:
35:92:49:46:4f:7f:61:a8:7f:91:e8:42:da:e0:3b:6d:d0:fe:
c4:91:90:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:40 2025 by rpki-client