Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: diNAmwqQtmaHrU/qsvfB7M25rqs9vOugdqdQAXu9QTQ=
Subject key identifier: 3F:D0:DC:7B:A5:E3:95:87:CB:B4:3E:27:42:A1:E8:9B:80:12:C1:08
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 0198481BB8E89FCCE8EED4700C55DD228C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 1236
Signing time: Sat 26 Jul 2025 19:00:33 +0000
Manifest this update: Sat 26 Jul 2025 19:00:33 +0000
Manifest next update: Sun 27 Jul 2025 19:00:33 +0000
Files and hashes: 1: OaynJV0qbIIk7EsSxRIucNannDI.roa (hash: rLhfi7PeZU4mZH9NTsaCKUtzejxWWyeiOXooqE3dPpU=)
2: ZsJ1p0f-2YgNmBDafzu2GWckT34.roa (hash: kKQedLsISeBKSivLfM6tlDNDN9VJMt9n4EQssMfjNOQ=)
3: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: 3GRwuy1omPMH/0ifVnda3Dr4XX3GzLmAyZRHccd6iSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:b8:e8:9f:cc:e8:ee:d4:70:0c:55:dd:22:8c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Jul 26 19:00:33 2025 GMT
Not After : Jul 27 19:00:33 2025 GMT
Subject: CN=3fd0dc7ba5e39587cbb43e2742a1e89b8012c108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:30:78:aa:19:5b:16:52:74:fe:7f:c7:28:
2c:34:fb:d9:cd:a2:15:c6:3f:71:79:13:36:4a:18:
57:c5:f9:a6:94:28:91:b4:47:8f:cd:b6:1d:3a:06:
73:af:3f:3f:5f:7c:78:98:b0:e2:8e:fd:6f:55:3f:
62:67:da:82:51:b4:3e:6b:56:6a:bb:70:6e:83:b4:
e6:9a:6a:d2:e4:66:d9:8a:6b:25:d9:06:22:af:3d:
62:89:8c:48:3e:a1:ec:52:1c:09:ff:63:29:eb:aa:
de:2b:cd:33:1d:78:df:52:b4:b5:76:7a:0f:ed:26:
16:9a:ef:ef:7f:4f:c7:0d:5b:57:c5:a9:07:f1:2c:
80:5d:f3:39:97:f2:c7:eb:d4:f4:5c:a9:a9:1f:19:
13:c9:00:56:13:49:d3:7d:02:02:63:b8:ac:1f:d7:
05:07:7b:55:aa:29:fe:37:96:25:f3:74:36:00:aa:
07:2b:69:06:55:27:a5:8d:76:66:32:cd:e9:94:4e:
fa:29:26:0c:68:d9:4e:64:cb:03:22:8d:48:de:62:
c8:03:ca:96:5f:6b:2f:57:c8:1a:a5:23:2b:b4:00:
bb:27:bb:02:20:99:f8:6c:1f:39:ab:d1:c4:72:7e:
6a:c6:ec:f0:63:d1:95:c0:0f:de:b3:5f:40:9f:04:
47:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D0:DC:7B:A5:E3:95:87:CB:B4:3E:27:42:A1:E8:9B:80:12:C1:08
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7f:b1:79:f8:4d:2a:97:c7:0e:0d:82:6b:a7:a6:e2:f8:4d:
96:f2:2e:92:96:b8:a5:31:da:78:51:77:10:3c:18:6c:90:a7:
a6:27:00:29:70:60:05:b4:57:f6:66:f1:e8:fc:34:ed:24:03:
10:8a:1f:c4:43:8a:f9:ea:21:dd:82:cf:94:67:34:83:be:3e:
a3:83:97:d0:c1:1d:c7:2f:f4:9f:91:b5:74:b3:9a:74:c0:a8:
cd:16:18:43:7c:97:81:d2:2c:af:ec:8f:22:58:ba:4e:0a:34:
77:31:63:f9:e5:33:b1:6b:68:7b:df:84:46:0f:24:6d:b0:93:
3d:c2:08:2a:ba:db:1f:b1:b7:f5:88:c0:b0:3a:cf:ca:b8:68:
6e:3f:66:4a:36:2c:e7:1d:54:f6:ec:99:ab:ab:8b:1f:11:c9:
ee:09:03:42:0e:25:83:4b:6b:8b:36:49:6b:da:9b:b8:f6:12:
0e:66:0b:9f:2d:35:b3:b6:cb:5b:8a:1f:52:05:9f:c5:31:cf:
df:76:44:84:89:8e:c2:13:18:ba:01:27:50:87:cf:45:86:f9:
36:f4:1e:1d:07:0e:62:80:a5:9f:07:f4:60:49:ca:41:1a:6c:
84:47:b0:c6:9d:e1:5b:57:3c:ca:dc:58:fa:6c:64:65:17:b6:
74:a4:5e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:43:36 2025 by rpki-client