Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
File: snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json)
Hash identifier: Ji+haHx0reTycsd9kgu1WccgP7wI3q3F+psHH3lIhB4=
Subject key identifier: DA:6B:F1:33:02:FD:D9:44:61:C2:7C:4B:6C:BD:4C:AD:76:FB:52:71
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial: 0197B70EEEB9FB040524A825E92F1FDC0DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
Manifest number: 0DE8
Signing time: Sat 28 Jun 2025 15:01:38 +0000
Manifest this update: Sat 28 Jun 2025 15:01:38 +0000
Manifest next update: Sun 29 Jun 2025 15:01:38 +0000
Files and hashes: 1: HRiBqkMm3jYdrvB2_suIlLpeJLU.roa (hash: thuo/2wKh04k5fV07y+BJSuu+CRS6TthbxD3yT9m+AM=)
2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: 4nVn2qidHV8Ntx4IrRVXPu8spUpyBYvxXi0KE0hVZfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ee:b9:fb:04:05:24:a8:25:e9:2f:1f:dc:0d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
Validity
Not Before: Jun 28 15:01:38 2025 GMT
Not After : Jun 29 15:01:38 2025 GMT
Subject: CN=da6bf13302fdd94461c27c4b6cbd4cad76fb5271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:04:8d:8a:38:83:0a:84:97:a1:23:21:32:72:
cc:48:fe:1b:12:f0:07:c0:8e:42:95:e0:94:97:6d:
6a:1a:31:26:20:5d:35:f4:96:c1:e9:3a:aa:96:81:
c0:6a:3c:af:0c:26:a5:49:2c:df:8e:36:08:0f:86:
ec:8f:0d:0a:7e:12:de:89:e4:01:e5:65:13:e8:10:
3a:dc:ad:b8:43:cc:88:9e:52:1c:75:b9:c4:b2:37:
6c:66:0d:d3:0d:c8:34:64:30:d0:01:eb:9e:17:88:
45:27:28:ce:e5:1a:4f:15:e7:de:d9:ed:9a:7e:5e:
3d:4d:79:76:8d:a5:95:4a:01:1a:88:9a:6b:f0:8f:
7e:cb:7f:e6:58:09:ee:01:61:21:85:a7:e8:a9:50:
51:ba:6c:db:d5:82:dc:8f:ec:e0:9a:83:04:01:73:
28:cb:99:9d:37:aa:20:92:b4:c3:3b:81:57:54:50:
d6:23:90:e1:28:52:d4:1d:f9:9d:2f:b0:bc:ae:56:
f5:c6:98:d5:04:28:f5:3d:7c:74:17:fe:e4:46:68:
0b:a3:a2:ce:93:7b:c0:25:3b:44:ce:10:6b:b5:ed:
40:27:c8:aa:12:08:2d:3d:4c:78:0b:38:33:60:e8:
5e:95:f0:9f:1d:18:65:aa:8e:1b:d2:c5:dc:05:c8:
45:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6B:F1:33:02:FD:D9:44:61:C2:7C:4B:6C:BD:4C:AD:76:FB:52:71
X509v3 Authority Key Identifier:
keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7e:62:0a:76:90:7f:cd:b2:14:46:16:85:f8:ca:08:4c:5d:
c2:c9:b7:10:01:d9:11:ae:a2:c7:e6:2b:56:bc:21:ac:fb:eb:
b7:65:2e:9f:63:77:d0:52:f6:44:74:43:4c:92:01:c2:a5:82:
58:75:90:c5:f0:9c:0d:85:5a:d7:9a:c0:86:b4:17:87:55:0e:
6a:2d:68:4e:ef:0a:b8:29:4e:0f:ea:73:57:b3:13:61:de:9b:
cf:ea:6a:f6:91:f3:29:43:93:15:bf:35:c2:0f:2d:53:72:fb:
49:de:ff:a3:79:16:f9:09:e7:cd:98:c4:ef:72:99:9a:82:12:
7b:ce:d1:43:b5:ce:35:ea:49:93:74:f5:93:86:02:fe:6e:e7:
47:1c:97:8a:1f:20:f5:ed:3a:64:5e:71:13:5b:01:3d:d9:f7:
95:9b:a2:08:e5:b8:9c:9e:da:fd:85:60:0c:13:e9:67:98:49:
5c:18:ac:66:f4:fb:d6:1f:ff:b8:7f:3a:a1:c4:4b:da:87:03:
6f:4d:c0:8b:89:b9:af:59:ee:84:00:26:8b:17:4b:67:87:ee:
dc:58:ec:fd:3b:5d:46:8d:e2:0c:4c:ce:b9:2c:89:b4:99:49:
78:05:b5:37:4e:e2:13:23:f8:12:83:b6:1b:48:47:d5:d6:a3:
1c:bb:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:48 2025 by rpki-client