Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
File: SnX6lUdbre63H4ROCwtEtqj-qf4.mft (raw, json)
Hash identifier: ARxe2NmxWWZn3Yt3bNkUOf+2hbg4/2ZsUbwO04/yUL0=
Subject key identifier: EA:31:3F:33:5F:2A:3D:5D:6A:47:1B:46:F1:0B:A1:E9:FE:C8:6F:B7
Authority key identifier: 4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
Certificate issuer: /CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Certificate serial: 019922C3BA0294B116A4E961A91048503B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
Manifest number: 0960
Signing time: Sun 07 Sep 2025 06:01:16 +0000
Manifest this update: Sun 07 Sep 2025 06:01:16 +0000
Manifest next update: Mon 08 Sep 2025 06:01:16 +0000
Files and hashes: 1: SnX6lUdbre63H4ROCwtEtqj-qf4.crl (hash: uF9rDtmsYfvwWUni9aZeFXFW+5NDoZIiG8TwArp+//g=)
2: _2GPXm0W5pqTGfOSlDVI1ePI1QE.roa (hash: 9R3xfYmKYkm/k3uZLHas6Z2h3l83dSwTWGdwQsjNnVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:ba:02:94:b1:16:a4:e9:61:a9:10:48:50:3b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a75fa95475badeeb71f844e0b0b44b6a8fea9fe
Validity
Not Before: Sep 7 06:01:16 2025 GMT
Not After : Sep 8 06:01:16 2025 GMT
Subject: CN=ea313f335f2a3d5d6a471b46f10ba1e9fec86fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:9c:ee:12:2b:55:67:cb:62:96:41:78:ed:
43:61:94:22:f0:bf:65:88:a1:a5:a7:41:3e:ee:3f:
a8:51:48:24:a5:b6:7b:e2:65:98:ba:da:d7:72:b1:
5e:2c:a2:34:4d:5c:31:84:ba:2a:d8:93:3f:05:7b:
fd:7a:24:2e:dd:66:28:6a:cc:22:a6:dd:f7:cb:f6:
16:96:b9:e8:aa:da:93:3e:eb:e0:97:69:30:3f:8d:
25:2e:e6:7d:0c:8d:df:9f:dd:a8:01:a8:ac:a2:69:
81:3f:f6:84:36:01:ab:61:24:9a:0c:2f:01:c4:31:
86:bb:09:ec:fc:67:c5:5b:3b:1c:49:8a:1f:50:46:
41:31:90:34:b3:7a:cb:4d:c0:68:1a:27:45:9d:b6:
21:80:68:cb:cd:ee:16:e0:36:36:f3:93:3c:cb:ed:
5f:1d:19:42:f0:c3:6a:61:4c:38:39:44:8f:92:20:
81:44:09:d7:60:bd:13:cc:63:53:3b:d0:ee:ab:49:
2a:f1:97:2f:2b:f6:a5:97:ee:38:0e:9b:c4:e6:55:
a6:a3:91:28:bb:7b:07:4f:44:e2:4f:ed:2c:ea:06:
64:b7:28:7f:6c:30:f4:7e:e3:30:ce:72:03:a8:e7:
e5:d8:4b:7f:dc:59:08:18:43:6a:13:86:00:42:b6:
bd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:31:3F:33:5F:2A:3D:5D:6A:47:1B:46:F1:0B:A1:E9:FE:C8:6F:B7
X509v3 Authority Key Identifier:
keyid:4A:75:FA:95:47:5B:AD:EE:B7:1F:84:4E:0B:0B:44:B6:A8:FE:A9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SnX6lUdbre63H4ROCwtEtqj-qf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/990595-5157-4036-b601-60843b5bbb81/1/SnX6lUdbre63H4ROCwtEtqj-qf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:45:12:98:c0:e2:b9:08:aa:f7:9a:4f:9f:12:e2:2b:89:8b:
f5:71:2d:48:f0:e9:b5:45:d7:ee:a6:9f:b9:a6:ad:9b:2d:05:
b6:5a:f3:ba:c0:e8:67:c1:4b:88:c4:76:da:11:8f:6a:b6:fc:
9e:c5:a8:ad:b9:4e:eb:33:0e:b4:32:fb:1d:ba:cf:4e:e4:27:
10:7d:b3:99:7c:60:28:ca:35:ce:88:ce:62:d7:02:02:91:ad:
81:77:fc:ee:1c:13:b4:37:38:fe:6e:27:ab:c8:39:14:55:bb:
33:46:fc:58:3a:c7:af:6f:3b:bb:df:3d:9f:84:70:60:b6:80:
ec:3d:6f:c3:2a:76:b4:de:aa:7c:5c:5a:11:5e:d6:4c:22:c9:
4e:bc:e9:0f:b1:e4:de:bc:06:e7:cd:44:bc:34:bf:d6:15:1d:
61:b9:dc:11:6e:31:c2:63:c0:fb:5a:58:83:fc:d7:99:91:6c:
7d:5d:86:f0:9d:9c:57:35:33:7c:63:e7:c9:33:9a:2e:ab:d6:
44:3b:50:58:3b:a7:a8:08:fc:91:52:9b:cc:95:6a:86:3a:25:
e3:64:9a:4b:85:59:78:40:ee:50:82:3f:91:68:09:f7:80:ae:
77:5c:0e:dc:b4:b1:ad:59:3f:2f:f5:da:75:fe:bd:bc:a6:66:
d1:67:26:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:36 2025 by rpki-client