Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
File: snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json)
Hash identifier: ZHR+fxOVmyjI47QjvL4ty9XcnG1gXvfBFcIZRZrDVdA=
Subject key identifier: E6:1F:9C:AF:F3:07:FE:E7:59:E0:2B:D2:27:BA:F6:2E:15:7B:51:8B
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial: 0196BC00000E462375C67A6B080AEB86E39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
Manifest number: 0D66
Signing time: Sat 10 May 2025 21:00:38 +0000
Manifest this update: Sat 10 May 2025 21:00:38 +0000
Manifest next update: Sun 11 May 2025 21:00:38 +0000
Files and hashes: 1: HRiBqkMm3jYdrvB2_suIlLpeJLU.roa (hash: thuo/2wKh04k5fV07y+BJSuu+CRS6TthbxD3yT9m+AM=)
2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: NQfTPn1B4ammnKvdKmE2nwu7VcG1IZvRXN9zenBCQaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:00:0e:46:23:75:c6:7a:6b:08:0a:eb:86:e3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
Validity
Not Before: May 10 21:00:38 2025 GMT
Not After : May 11 21:00:38 2025 GMT
Subject: CN=e61f9caff307fee759e02bd227baf62e157b518b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:b3:9d:d1:bf:b5:5d:5f:a4:9a:96:9f:ba:
1d:3c:71:58:57:79:df:47:f4:e7:ee:63:7c:fb:4f:
b5:e7:1f:6f:41:13:85:e5:f8:3e:b3:30:38:8a:d8:
d7:1e:5e:ea:4d:93:1d:a6:f5:30:08:28:84:7d:58:
73:cb:0a:ea:53:37:7f:ee:06:68:51:29:1b:44:be:
d6:51:cc:83:1e:f9:68:28:13:10:15:e7:1e:68:fc:
1f:27:6d:49:85:c6:51:9c:ce:38:54:59:f1:25:fe:
28:a8:95:b1:0c:f8:27:2f:13:d4:ab:3f:03:66:32:
46:38:da:4f:fa:e7:25:33:c5:6f:19:13:aa:85:15:
0f:95:d5:2c:8b:3a:63:06:87:81:ff:84:04:82:d9:
08:a8:6b:08:a7:79:30:94:5b:12:18:64:33:a5:a7:
5f:29:e7:d8:63:af:a6:7e:9d:28:66:71:90:e2:80:
7c:2f:5e:08:0d:a7:7b:33:75:d3:17:5f:3c:f9:82:
1c:33:3b:25:1e:6f:0e:ad:d2:73:98:a5:02:75:b0:
ed:d1:83:2b:96:cc:a8:17:14:50:84:7e:50:c3:39:
eb:4b:d8:5d:e0:33:9e:cc:94:5d:88:f4:3f:e3:e2:
6b:f6:52:78:fd:28:77:df:13:97:6e:b7:10:39:5a:
ea:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1F:9C:AF:F3:07:FE:E7:59:E0:2B:D2:27:BA:F6:2E:15:7B:51:8B
X509v3 Authority Key Identifier:
keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2d:2d:f9:81:46:91:73:02:21:2a:f4:ba:97:80:b6:be:e7:
c7:02:94:90:86:c7:92:7b:eb:7c:f7:cd:41:8c:94:23:9a:4b:
0f:91:3b:a9:e9:dc:39:e8:78:8c:7c:a7:d4:28:4d:99:e0:5e:
46:d3:54:e9:e5:cd:81:8f:f7:46:15:49:18:53:09:3b:e5:5b:
e4:54:d1:74:00:da:5f:8d:aa:9f:ed:a7:c7:f8:b8:fe:af:a2:
63:56:82:e4:ab:5f:a5:b2:57:60:79:8a:48:a9:eb:22:5c:5c:
b0:3a:11:94:82:b2:7f:bf:10:6d:33:92:f9:c2:6d:d5:8e:d4:
f0:99:dd:ee:14:0a:19:79:26:aa:71:9a:74:51:3d:f0:e2:2f:
f2:14:b9:32:2d:ae:e7:95:cb:b1:29:21:2a:fc:83:a8:bb:37:
6a:43:15:17:7d:fb:9a:dd:ef:ea:26:a5:4c:a6:03:38:ec:dd:
7f:03:32:87:04:bd:30:ee:38:87:e9:75:7c:03:99:8b:50:6c:
b1:ab:58:a2:25:97:39:64:51:ca:d8:ba:31:40:99:9b:81:0f:
c3:53:d2:07:cc:a2:33:00:f3:4e:92:f7:46:1b:b1:80:24:66:
d6:65:92:23:bb:e3:7f:20:bf:a5:d9:c5:0c:67:c6:c9:74:bb:
20:cd:6c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:26:36 2025 by rpki-client