Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier: RGYUwNbLuuoMqnapwZxsTUT2UoY20XkgtudB8PEhk7c=
Subject key identifier: F1:99:8B:3C:DB:D0:6F:C6:6C:E5:E4:88:B1:6B:B1:24:BA:FE:5B:27
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 019747B119B1E46389229A27BC864BFDE1A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number: 086A
Signing time: Sat 07 Jun 2025 00:01:18 +0000
Manifest this update: Sat 07 Jun 2025 00:01:18 +0000
Manifest next update: Sun 08 Jun 2025 00:01:18 +0000
Files and hashes: 1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: Zc1IosduH5S8gX2O9wWJaaOnIVF64hlXQq0E7UWU1D4=)
2: _2GPXm0W5pqTGfOSlDVI1ePI1QE.roa (hash: 9R3xfYmKYkm/k3uZLHas6Z2h3l83dSwTWGdwQsjNnVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:19:b1:e4:63:89:22:9a:27:bc:86:4b:fd:e1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: Jun 7 00:01:18 2025 GMT
Not After : Jun 8 00:01:18 2025 GMT
Subject: CN=f1998b3cdbd06fc66ce5e488b16bb124bafe5b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:e2:67:60:e6:c9:12:ca:45:27:14:06:3d:
89:fc:12:7c:78:0a:f3:d5:54:c2:54:62:cb:aa:56:
36:a8:fb:59:5a:2a:51:aa:b6:a3:3c:48:37:c0:22:
62:f5:9e:b1:7a:cf:95:6b:89:81:bd:9c:7b:d3:a7:
e8:c2:55:3b:85:2d:40:d3:3c:8e:03:11:1e:51:9c:
89:44:0e:d7:1b:ab:29:1d:0b:11:0d:9d:c4:04:d0:
49:28:87:92:87:1b:fe:7f:bd:cf:b6:bf:0a:27:b6:
d5:a2:4c:68:05:07:fd:af:9f:ce:e2:ea:6b:bf:d8:
2a:9c:94:63:24:eb:33:67:4a:31:b5:09:35:27:8c:
25:f3:96:af:5d:63:dc:b4:d0:dc:81:c0:eb:97:eb:
37:33:51:a2:b7:9a:ba:47:fe:20:8d:bd:11:a0:69:
27:6c:5c:73:9e:2e:95:67:54:be:c6:ef:50:49:06:
4d:d6:b6:13:ec:36:7e:13:f0:a9:cb:86:3c:93:12:
ff:0b:4d:1b:c5:d3:ef:d0:45:d6:eb:14:7a:6b:08:
74:7f:9c:d9:6d:72:51:8d:a0:c2:f1:94:4e:cf:c8:
57:65:ce:31:16:9a:60:55:34:c1:32:4e:e0:d2:ba:
c9:e5:4b:58:6a:44:fc:45:72:af:f6:04:4a:82:47:
b1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:8B:3C:DB:D0:6F:C6:6C:E5:E4:88:B1:6B:B1:24:BA:FE:5B:27
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bc:2d:5a:2f:ad:03:6b:c1:0b:3f:63:5e:30:6f:c7:40:44:
af:8e:62:74:e9:1a:29:1e:f4:b2:93:df:44:e5:43:68:95:fd:
78:58:5c:22:03:e9:a7:7a:f1:c5:3c:32:70:77:ca:00:16:41:
a2:11:95:98:50:b9:c9:87:6b:4e:e3:c4:99:99:2c:4e:76:9c:
49:b1:53:d1:3a:7c:27:98:18:8f:3e:59:4b:9b:00:f5:d8:5d:
0a:ff:41:d6:e7:70:8b:85:90:7f:22:5d:2b:26:b1:90:8d:8f:
46:c3:03:6d:60:79:16:54:19:f6:da:06:4c:35:71:b8:10:14:
e1:27:3c:32:f3:10:70:a0:bd:00:11:91:36:d5:5b:e1:99:db:
43:e6:c8:c1:81:bd:af:f6:3f:47:64:6d:30:2e:87:3c:fc:01:
23:b7:77:87:7e:c6:5e:13:61:ab:e1:8e:eb:c7:b4:2c:b3:d2:
30:ed:c5:e1:9e:05:96:76:60:5f:f4:44:8b:23:2e:2c:50:53:
0b:b2:1f:ed:06:d1:1e:3a:eb:b1:40:6f:8c:59:0a:b5:16:4b:
d3:74:c4:7c:a8:ce:39:33:c6:92:3e:18:61:d0:06:3a:bb:e0:
e4:2a:07:99:52:4b:4d:23:3b:38:c6:bc:51:c7:a6:4f:76:c9:
ef:fb:b5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:52:03 2025 by rpki-client