Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
File: snkS_-9nB4uwa9SpAh-6lq2xgL4.mft (raw, json)
Hash identifier: AH8ztohByBK9qzbGbWZhk6/a5QAXOwJbW3PGpS54p2s=
Subject key identifier: EB:00:67:8D:4D:9E:F3:6A:2A:FB:3D:93:80:80:AA:C6:BD:74:79:F2
Authority key identifier: B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
Certificate issuer: /CN=b27912ffef67078bb06bd4a9021fba96adb180be
Certificate serial: 019A725C891E3D901D674B50178E8159CE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
Manifest number: 12BB
Signing time: Tue 11 Nov 2025 10:00:58 +0000
Manifest this update: Tue 11 Nov 2025 10:00:58 +0000
Manifest next update: Wed 12 Nov 2025 10:00:58 +0000
Files and hashes: 1: Q0e2nZwWTgSOnN3XYro_yC3AqqY.roa (hash: p1jDlEZ3jtWSk1Gt2ui3hdbzWJmpWW1M0qlAGcolPG0=)
2: snkS_-9nB4uwa9SpAh-6lq2xgL4.crl (hash: R5lV0VVUsmCSI3aPt79aQA34UuUq1bm8S76+YQJDDGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:89:1e:3d:90:1d:67:4b:50:17:8e:81:59:ce:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27912ffef67078bb06bd4a9021fba96adb180be
Validity
Not Before: Nov 11 10:00:58 2025 GMT
Not After : Nov 12 10:00:58 2025 GMT
Subject: CN=eb00678d4d9ef36a2afb3d938080aac6bd7479f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8b:67:04:b3:9f:46:63:b2:33:dc:a1:3b:15:
35:fc:b4:a4:dd:29:83:f9:e1:79:1b:57:a0:e0:a3:
01:d2:be:f0:a7:22:9f:07:ca:7a:b4:5e:8e:9d:07:
56:e8:fc:bf:66:31:9f:cb:8f:8e:bf:52:53:40:37:
6c:ab:04:0b:0d:1c:0a:a3:71:55:b0:0c:43:f9:8b:
99:1d:70:9b:cf:b1:cf:26:a4:0e:c3:42:03:a0:65:
bf:ca:9f:10:8c:b8:2a:b0:73:60:ec:37:ca:60:5b:
40:9e:45:96:8f:db:f9:de:5f:6b:a8:af:41:5d:7f:
5c:b9:c2:71:83:7b:46:32:ae:56:97:8d:46:15:ef:
e4:a3:27:e7:cd:8f:c1:c8:bc:07:0e:8e:b9:c3:9b:
45:6b:8b:f0:3e:de:18:bc:77:c0:4e:53:06:fc:78:
98:eb:8c:68:f3:4f:ea:7b:b6:c2:ec:59:bf:17:02:
5d:07:68:3b:41:77:5f:2b:95:5f:44:ad:67:21:f1:
81:a0:ad:8c:ba:ca:32:87:5f:4c:e2:fd:c4:2a:14:
87:bc:2a:fa:e7:bd:d9:3b:7b:5b:a6:b7:43:b0:8f:
99:34:06:b5:2a:bf:e3:d6:47:5a:ca:1a:6c:a9:de:
39:65:b4:a3:f0:22:f0:dd:f1:b0:f9:a9:45:74:3c:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:00:67:8D:4D:9E:F3:6A:2A:FB:3D:93:80:80:AA:C6:BD:74:79:F2
X509v3 Authority Key Identifier:
keyid:B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:81:1f:c5:21:b5:b5:a0:85:64:ba:44:52:0b:f5:e4:06:d5:
2f:98:b7:79:8d:5e:78:0e:50:d1:6d:3b:d7:e7:dd:16:0c:88:
a8:7d:0a:16:ca:07:01:78:a6:0a:51:27:55:16:db:8e:60:1e:
53:0d:27:ec:98:0b:a0:cc:c8:f0:dc:5e:6e:2d:ed:0a:28:10:
6a:89:4c:27:cc:41:ad:7a:cd:41:0d:6c:82:23:a5:83:a7:8a:
dc:21:03:4f:2f:b8:fe:c7:f8:7e:cf:fd:cb:24:24:b7:66:c7:
f4:80:82:38:08:e9:ab:ae:de:ad:7a:fb:dd:22:f4:ff:4b:14:
18:51:c8:22:87:37:3f:e1:7b:23:d8:bb:8d:11:71:2e:b9:98:
b5:90:48:ec:9a:95:ea:61:13:f6:6d:8c:98:f7:04:16:d2:f3:
66:de:da:bb:ea:f9:01:b8:1e:7e:e6:ba:b3:46:3a:77:b1:bf:
1a:e5:1b:c5:fc:bc:ef:eb:3e:22:e6:7d:8c:68:92:ca:d5:96:
8d:5b:81:cb:18:12:c0:b7:c8:10:77:4c:81:e1:8d:d3:a5:c6:
ab:bd:b3:79:72:1c:74:26:e9:6c:de:e7:8e:89:2c:14:a8:97:
20:46:66:d6:32:e9:a4:4b:c1:e2:a8:d0:28:66:bc:57:8b:bf:
87:45:8c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:56:40 2025 by rpki-client