Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
File: SanokeBtQid9xPtfvWnpq9jimIM.mft (raw, json)
Hash identifier: fCEJj/9Yrj837CfLWWKOosYglkVjlq8LTiz9wPhfAnc=
Subject key identifier: 6E:F5:30:7A:E2:E1:15:5C:31:00:98:FB:15:80:9B:A6:F6:8D:71:73
Authority key identifier: 49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
Certificate issuer: /CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Certificate serial: 0198578EDFDE62A36A9F19A6E29EF3A5659A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
Manifest number: 160B
Signing time: Tue 29 Jul 2025 19:00:37 +0000
Manifest this update: Tue 29 Jul 2025 19:00:37 +0000
Manifest next update: Wed 30 Jul 2025 19:00:37 +0000
Files and hashes: 1: SanokeBtQid9xPtfvWnpq9jimIM.crl (hash: w0HE9ijMvLefjCqrPeQWvWKYjbuy9yPcov7M6hzefH8=)
2: V8zD_fceDFK7bKm0UJWlvFSbGqc.roa (hash: Le4LPJ6tIhm6aij63pajwkdMuW6+ZunlQYJepBMOhII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:8e:df:de:62:a3:6a:9f:19:a6:e2:9e:f3:a5:65:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Validity
Not Before: Jul 29 19:00:37 2025 GMT
Not After : Jul 30 19:00:37 2025 GMT
Subject: CN=6ef5307ae2e1155c310098fb15809ba6f68d7173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cf:62:54:fc:6f:86:b1:92:2a:6e:62:52:dd:
42:88:f3:3a:84:93:69:c0:98:1c:25:59:e9:4d:d1:
cd:ff:42:75:15:d8:80:7d:f4:76:a9:a3:c5:28:fc:
34:b2:f4:71:cf:1c:64:f0:5f:89:26:f1:98:14:dc:
76:06:a7:73:b4:69:ce:6b:99:fb:1f:1b:ff:44:75:
85:c7:22:ee:44:81:e3:70:20:ca:a8:56:a4:ca:61:
0a:36:01:5a:c8:4e:6d:81:e9:2b:ad:df:6e:eb:f5:
eb:b3:36:74:0f:2b:6a:eb:22:69:4b:c6:8b:93:fa:
8e:13:64:d9:27:0b:d1:62:85:45:29:9d:c6:f4:78:
c7:4a:80:6f:54:45:cc:39:ec:ac:31:5c:11:9f:bf:
bb:c7:37:ac:62:ef:91:2d:60:e1:11:4f:ac:d7:29:
cc:4b:c9:10:5c:25:07:5e:5a:04:66:21:dd:4d:b3:
88:57:92:fd:3d:27:ff:51:dd:82:f0:c2:c3:75:4f:
d0:8a:49:af:67:7e:be:95:8d:d6:5e:5f:93:38:cf:
8b:e6:d3:b1:cd:5f:2e:73:46:9d:ed:44:e2:af:0d:
3b:03:99:15:7d:84:25:4f:b0:80:d2:03:d7:21:43:
be:d2:de:ff:65:a6:be:fe:41:fb:66:81:4e:b6:d1:
1c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F5:30:7A:E2:E1:15:5C:31:00:98:FB:15:80:9B:A6:F6:8D:71:73
X509v3 Authority Key Identifier:
keyid:49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:44:3c:c0:2d:b6:f4:ee:53:8e:b2:98:2b:88:57:9b:36:64:
62:f6:7c:e4:92:52:d3:99:fb:0b:d2:f0:ec:d6:64:73:90:b0:
5f:3a:26:35:6d:28:3c:be:70:d2:5d:fe:b6:cf:d0:f8:89:a7:
1d:db:68:a1:8f:e9:48:91:7f:7f:7f:7e:33:68:64:6c:00:72:
49:c6:cd:a4:53:2e:cd:94:1f:05:5b:6b:e2:a1:40:34:43:30:
ca:5c:d6:e8:40:3c:fb:1a:0a:b3:a6:e2:75:f8:b0:98:99:36:
c6:27:d7:15:13:8f:e8:23:05:f7:58:cc:bd:0d:2f:d2:b0:11:
ce:5e:6e:2c:8b:f4:c8:04:2d:43:73:78:97:66:1d:6f:fb:b1:
a8:a9:7b:20:79:cb:e2:a3:96:6e:4c:0d:b5:c6:e6:22:89:5f:
d5:56:32:6e:32:d9:19:ce:63:7e:f6:a7:e7:8f:7b:12:dd:3d:
a6:0a:d0:f6:63:b3:d0:e8:62:37:9a:53:bc:db:d1:fa:5a:7d:
a0:8b:73:14:33:9d:83:b3:b8:2f:63:64:a9:56:9e:16:b7:3d:
54:94:d6:23:46:7f:4d:30:3a:5a:b7:e2:ac:b0:7f:ac:3e:36:
bd:a9:c1:b1:7b:5d:c3:c7:71:5e:c0:f9:c5:74:8d:dd:87:e1:
da:84:03:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:35:28 2025 by rpki-client