Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
File: SnqRfdz8JujIezCFi28H8po9tD4.mft (raw, json)
Hash identifier: OlJvB36exuULDSLB5Qe4pmc1geFKjk0DQMUIxO5s/bg=
Subject key identifier: FB:E5:77:8D:84:40:C3:13:A7:06:9F:FD:B2:50:C7:B8:BD:4B:EA:E1
Authority key identifier: 4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
Certificate issuer: /CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Certificate serial: 01985268B00D87BCB7A7142F523FCBC78EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
Manifest number: 15B5
Signing time: Mon 28 Jul 2025 19:00:49 +0000
Manifest this update: Mon 28 Jul 2025 19:00:49 +0000
Manifest next update: Tue 29 Jul 2025 19:00:49 +0000
Files and hashes: 1: P2xh5AQS8g63oefSEJQg-RsTiE4.roa (hash: fyGkFWMTxDql0OoutRE6aQhGU1Ek1V6QoGNhwV3E3j8=)
2: SnqRfdz8JujIezCFi28H8po9tD4.crl (hash: VueM9KidYs9f1qSrPrbpG/ItOaQgQ4J3z0/lR7b6+JU=)
3: wZuLHZACRgaqannQqtWTgy9AnFY.roa (hash: ArTL5+VwNfVl+VzsgeZQzp979burQZd57vVQg0xpNM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:b0:0d:87:bc:b7:a7:14:2f:52:3f:cb:c7:8e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7a917ddcfc26e8c87b30858b6f07f29a3db43e
Validity
Not Before: Jul 28 19:00:49 2025 GMT
Not After : Jul 29 19:00:49 2025 GMT
Subject: CN=fbe5778d8440c313a7069ffdb250c7b8bd4beae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:83:da:5b:6c:61:1e:bc:69:47:e1:04:b2:
58:a8:1d:26:22:55:07:89:4f:0d:8e:4a:00:14:80:
32:10:c0:fb:40:56:f7:d3:85:c3:3d:51:7a:3e:2b:
b2:9d:4f:0a:77:7b:2d:5b:80:7a:85:52:92:2e:ce:
86:95:c1:0c:3f:a5:4c:f0:fb:c6:11:83:6c:a5:8e:
c2:42:94:f4:55:9a:ee:0d:2b:5c:c9:a8:59:a8:1c:
18:20:e1:bb:88:e9:98:57:54:ae:3d:aa:d8:3c:be:
f8:3d:6e:3e:4a:4b:13:e7:3d:3b:d0:38:7e:3c:dd:
e3:c9:fe:da:c1:35:c6:bd:39:e0:cd:f3:88:d9:d3:
85:ea:a5:00:e3:e8:02:e6:4e:c7:20:cd:42:7a:6a:
93:cf:2e:32:ae:d9:00:e5:64:81:b8:3a:34:1e:5a:
8e:6c:71:c7:7d:28:b1:aa:ca:40:8a:ad:4d:1e:10:
58:df:52:51:29:13:be:ab:ca:34:4a:79:23:88:49:
72:51:7b:0c:5c:21:cf:53:74:a6:f8:95:5f:d4:82:
82:80:74:09:dd:ab:ce:8d:90:e6:a9:fb:fd:70:39:
1f:c0:df:a6:44:67:ea:18:9a:f1:6c:80:a3:7e:03:
cf:f1:b4:af:e4:5c:87:65:69:91:f8:6e:41:58:78:
fb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E5:77:8D:84:40:C3:13:A7:06:9F:FD:B2:50:C7:B8:BD:4B:EA:E1
X509v3 Authority Key Identifier:
keyid:4A:7A:91:7D:DC:FC:26:E8:C8:7B:30:85:8B:6F:07:F2:9A:3D:B4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnqRfdz8JujIezCFi28H8po9tD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/34c2bb-79ea-4f39-ac82-82016de42212/1/SnqRfdz8JujIezCFi28H8po9tD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:33:16:8f:f6:98:6a:fe:ff:5a:0d:4e:d4:6f:93:7e:1e:93:
db:44:5a:18:8a:df:28:2f:6d:d1:69:2d:94:0d:21:50:ac:75:
3d:4b:43:ee:cd:05:32:5c:9f:b7:6c:e7:49:7e:5a:f8:d5:a3:
68:d0:bd:3c:eb:52:52:34:e5:dc:59:55:e9:3c:9f:38:5f:20:
a4:15:3d:21:8e:4b:10:c8:95:d2:60:e6:4a:f0:f0:3e:19:78:
b4:7b:d7:6e:bf:2c:c9:fb:f7:a1:8f:29:aa:17:1f:92:8c:2a:
4f:be:dd:13:9b:d1:dd:e6:a3:cb:59:7a:f3:f9:70:77:95:f6:
a7:3c:f1:e2:07:c7:95:7b:f8:e8:a1:94:2e:57:a5:81:71:2d:
aa:3f:2e:24:bc:dc:79:13:d0:93:3e:14:39:5f:9b:16:89:c0:
44:c0:b8:0e:4f:55:eb:0b:a7:73:a3:59:81:2f:45:62:3c:02:
a1:5b:9a:d2:91:d7:c2:00:30:f0:c4:1c:27:13:0f:f1:01:db:
c2:9f:27:fd:30:45:37:b0:b5:ce:20:03:20:8b:3e:e2:21:51:
94:0e:d4:d3:14:80:77:35:a6:1b:32:b1:8f:ca:a0:d3:d3:27:
27:ce:48:72:5c:e7:84:6a:73:95:25:7e:f1:e7:b9:56:0e:75:
3f:31:55:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:42:16 2025 by rpki-client