Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
File: snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json)
Hash identifier: X/RVb0YX7e2pq3LaMwioEtfpu1f0EEQ0P1LDotORKLk=
Subject key identifier: F4:7A:87:95:90:0C:3D:64:83:23:F3:EC:B9:B0:88:71:98:03:34:7C
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial: 0198D6CE04B46033DF3655314353144B7C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
Manifest number: 0E7D
Signing time: Sat 23 Aug 2025 12:01:22 +0000
Manifest this update: Sat 23 Aug 2025 12:01:22 +0000
Manifest next update: Sun 24 Aug 2025 12:01:22 +0000
Files and hashes: 1: HRiBqkMm3jYdrvB2_suIlLpeJLU.roa (hash: thuo/2wKh04k5fV07y+BJSuu+CRS6TthbxD3yT9m+AM=)
2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: ROj7klrOOLOppu26QqWaemuIJkffbtXpPlQdNEsrsXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:ce:04:b4:60:33:df:36:55:31:43:53:14:4b:7c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
Validity
Not Before: Aug 23 12:01:22 2025 GMT
Not After : Aug 24 12:01:22 2025 GMT
Subject: CN=f47a8795900c3d648323f3ecb9b088719803347c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:f8:ec:dd:eb:ed:d1:d3:80:38:c9:95:64:
b8:38:2a:4b:7a:8c:c4:db:a8:d8:ad:e9:aa:1f:7f:
f8:a2:a0:23:4e:7b:aa:e5:b3:ce:9c:67:8f:a0:97:
1d:37:a4:b1:bc:0d:a3:f9:67:00:f0:4a:55:26:08:
1a:da:de:46:71:18:66:c9:4f:db:9e:24:36:3b:ca:
b5:38:85:3b:09:9a:00:cd:2f:fa:bb:45:33:ec:f7:
8a:84:f7:3e:ba:1b:3e:e5:bc:d0:21:8f:59:1e:ee:
e7:89:22:4c:37:ed:69:5d:6e:0d:21:4a:a3:f2:67:
14:02:cd:b5:7d:7d:79:83:98:b1:5c:b6:f8:22:2b:
00:7d:1f:ee:07:1c:17:db:64:b6:c7:21:a8:b0:ce:
89:51:d4:d6:eb:07:9c:12:c4:d8:32:8b:a5:38:33:
21:fc:13:5c:78:e4:cb:6f:38:2d:b9:4a:5b:81:7d:
89:ee:a7:0c:f7:32:d8:48:2f:bb:ac:17:f6:c6:dc:
25:d0:41:dc:d9:62:80:3b:d2:59:67:d1:0b:40:44:
06:1c:af:5c:04:f2:5f:a1:dd:64:fa:49:92:9c:d7:
38:95:ae:7b:36:ef:9e:e8:97:c4:69:f8:f7:6a:40:
2f:5a:14:88:f1:5c:44:b7:a9:f5:09:11:23:16:c2:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7A:87:95:90:0C:3D:64:83:23:F3:EC:B9:B0:88:71:98:03:34:7C
X509v3 Authority Key Identifier:
keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ca:c6:00:91:a1:ab:19:18:bc:9e:54:77:63:45:cf:f1:62:
66:60:53:c5:c6:eb:3f:80:7d:6e:85:72:31:bd:dc:d9:f4:f3:
bd:9b:55:00:80:bd:a2:e4:25:a2:5a:d7:cf:5f:29:e7:39:77:
af:01:06:18:f2:50:9f:40:e9:c3:c5:3e:3d:16:8a:8c:ff:9c:
21:39:ec:f4:bf:b5:59:01:74:3c:c1:78:76:9d:8b:a1:84:a7:
61:c0:01:8a:03:44:79:63:6a:c2:fa:4b:2d:c4:d4:ec:07:d0:
73:52:94:59:00:c2:1f:04:bd:89:46:0b:4d:3c:f8:2c:e8:d1:
c8:27:ef:3a:b4:1d:ad:38:da:d7:e3:9b:33:0d:d8:5d:67:62:
a3:e2:52:22:e4:fb:2a:8d:ec:60:01:7e:7b:b4:a7:4b:92:a5:
25:c8:32:60:59:3a:88:58:3f:2b:60:ad:3a:9b:51:2c:53:8d:
63:ba:19:87:80:d2:07:6e:c5:eb:00:c0:0d:0d:9c:18:e5:cc:
a7:44:07:95:ef:17:f4:9c:8e:62:31:98:1c:9c:12:1c:48:da:
ff:80:78:81:26:2d:85:73:cd:34:59:b5:6f:bc:3a:c7:68:ce:
5d:c2:22:41:2f:dd:36:a3:95:79:b5:67:c6:7f:45:d0:e1:71:
f1:85:d4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:03:06 2025 by rpki-client