Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: Bg7i8KXo4JfA8O/6IJrWaqQvTD9+ug/wXaGF5LMYRp0=
Subject key identifier: 04:CC:72:85:1A:BA:6E:D0:3D:97:9B:83:BE:2A:27:7F:D3:53:EB:7A
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 019A006C04A175EC6E7D01F1C433E7EA8A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 131A
Signing time: Mon 20 Oct 2025 07:01:10 +0000
Manifest this update: Mon 20 Oct 2025 07:01:10 +0000
Manifest next update: Tue 21 Oct 2025 07:01:10 +0000
Files and hashes: 1: OaynJV0qbIIk7EsSxRIucNannDI.roa (hash: rLhfi7PeZU4mZH9NTsaCKUtzejxWWyeiOXooqE3dPpU=)
2: ZsJ1p0f-2YgNmBDafzu2GWckT34.roa (hash: kKQedLsISeBKSivLfM6tlDNDN9VJMt9n4EQssMfjNOQ=)
3: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: tA6sdT+LFC16pUr+/8zNwqzf85NfOoWPXyK/helecZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:04:a1:75:ec:6e:7d:01:f1:c4:33:e7:ea:8a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Oct 20 07:01:10 2025 GMT
Not After : Oct 21 07:01:10 2025 GMT
Subject: CN=04cc72851aba6ed03d979b83be2a277fd353eb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:63:a2:52:53:a5:bd:2d:60:15:a4:b0:9d:
74:37:33:ee:f3:f9:d7:ae:ef:0c:a2:d7:18:e1:fd:
6f:6f:97:a9:f1:58:25:57:41:c0:80:eb:fd:09:b9:
8e:e6:7e:f4:b4:aa:4e:1c:a0:62:73:d0:de:b3:93:
95:75:3b:72:52:5f:c4:a6:48:d1:bd:34:c0:5e:3b:
2b:2d:55:3a:d7:f7:0e:17:bc:c2:d6:53:bd:1c:dd:
b2:19:fc:22:eb:2d:b5:fa:6c:7f:7a:1b:2e:b2:7d:
5a:2c:38:5c:82:b7:6b:c4:40:e3:5a:6c:2a:28:e4:
fa:25:35:f4:b1:ac:f0:59:7d:3c:eb:29:41:ee:06:
2a:13:2b:47:1d:05:bd:57:a5:01:8b:e7:b3:fa:21:
19:4f:fe:7f:c9:71:a7:f4:45:b0:d1:73:45:65:e6:
6f:ff:d3:b0:69:5f:39:fa:7f:1b:fc:d7:e1:ba:73:
66:ef:32:5c:5c:f9:f6:20:77:12:c8:4e:a0:51:16:
f3:dd:76:f1:4e:67:bf:74:da:21:61:58:31:fe:cf:
71:a8:2e:98:0b:98:38:e4:5a:d8:33:86:30:73:6a:
f3:2d:a8:9a:3c:ee:7b:29:02:09:9d:e8:df:7c:b8:
02:fa:9d:bb:a9:fc:e5:08:8b:6d:33:0d:a7:39:db:
14:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CC:72:85:1A:BA:6E:D0:3D:97:9B:83:BE:2A:27:7F:D3:53:EB:7A
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d0:34:0d:d7:1f:96:9c:ba:6f:d7:68:a2:5e:6d:d0:0c:8f:
32:b4:7b:64:7f:87:58:9f:81:39:9a:5a:e7:1b:9b:d9:fa:ec:
a9:5c:04:96:a8:33:9a:be:6d:17:ba:8e:69:10:75:e5:52:7a:
4f:f1:04:10:74:39:09:96:1e:ec:59:84:87:78:29:23:bb:a1:
5b:5b:44:db:f8:7f:b6:74:e6:c7:12:dc:ca:eb:96:1d:30:b8:
1c:4f:2f:f1:3b:f9:2e:bd:5e:70:f0:e5:ce:b9:b7:e1:50:f0:
fb:de:fa:be:d8:9a:36:75:cd:bd:ec:c0:ed:49:52:f9:46:7b:
d9:71:e4:55:38:b8:57:c9:e9:6c:c1:d3:fd:47:18:0e:e8:0b:
11:5d:bc:a3:fd:15:4c:2b:66:9c:dc:90:ae:85:4e:a5:2c:b9:
6b:10:d4:cd:cd:0c:33:89:32:93:96:ac:59:ad:25:d3:f5:66:
63:b3:4e:fe:fb:bc:b1:c6:16:d6:4c:52:37:75:31:eb:f0:27:
d0:1d:3b:16:ca:0c:14:9e:aa:21:bd:71:5c:8a:cf:ea:88:49:
99:1c:99:bd:75:cd:cd:06:c4:91:49:1e:f0:0a:4f:81:36:28:
03:c8:78:51:57:0f:2d:60:ad:aa:b1:e8:ad:8a:f6:3f:34:56:
9f:04:09:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:02:21 2025 by rpki-client