Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
File: snkS_-9nB4uwa9SpAh-6lq2xgL4.mft (raw, json)
Hash identifier: JzbzWHBLIctPnZNllRmw7ikDHFx3FMvM9TSOMgygkcs=
Subject key identifier: 21:F3:25:F9:F0:CC:39:FB:AA:22:AC:64:29:38:A2:F7:35:87:4D:C3
Authority key identifier: B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
Certificate issuer: /CN=b27912ffef67078bb06bd4a9021fba96adb180be
Certificate serial: 01964A46913AFC2E3A0572B1DA7F3FBC01DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
Manifest number: 1094
Signing time: Fri 18 Apr 2025 19:01:00 +0000
Manifest this update: Fri 18 Apr 2025 19:01:00 +0000
Manifest next update: Sat 19 Apr 2025 19:01:00 +0000
Files and hashes: 1: Q0e2nZwWTgSOnN3XYro_yC3AqqY.roa (hash: p1jDlEZ3jtWSk1Gt2ui3hdbzWJmpWW1M0qlAGcolPG0=)
2: snkS_-9nB4uwa9SpAh-6lq2xgL4.crl (hash: Iam2IYj2KjniYJ90iH6hmnL+hzRluOGwfzDDbDJD8kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:46:91:3a:fc:2e:3a:05:72:b1:da:7f:3f:bc:01:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27912ffef67078bb06bd4a9021fba96adb180be
Validity
Not Before: Apr 18 19:01:00 2025 GMT
Not After : Apr 19 19:01:00 2025 GMT
Subject: CN=21f325f9f0cc39fbaa22ac642938a2f735874dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:bf:05:34:19:94:9b:10:2d:86:28:01:be:
37:47:3f:66:7d:0f:1e:96:46:49:af:f2:32:1e:65:
a1:6a:f0:74:b8:13:83:69:cc:42:d4:81:92:f0:73:
ee:5e:bc:69:43:ec:59:3f:51:88:4c:c5:39:3f:42:
ec:6a:69:8a:5e:fd:8b:b4:c9:7d:e2:13:d8:e1:b1:
b1:65:99:22:6d:3e:cd:cd:bf:71:0a:fb:b3:83:cd:
1b:f0:36:37:cd:7a:14:7c:68:5b:eb:20:8c:6e:88:
f8:c1:45:ad:ec:94:2a:92:6b:1e:5f:93:66:34:b6:
fc:d7:5e:31:19:9d:45:6d:49:4a:07:07:22:1d:94:
2a:b5:17:bf:5f:4f:25:ee:a9:06:1a:78:d3:5d:28:
dd:a1:ed:1b:fa:0a:75:c9:9f:58:57:e1:f0:a7:e6:
1a:56:2e:18:ba:17:4a:06:a3:32:5c:3d:73:56:e2:
8a:25:4e:d8:31:6a:9e:8e:b1:ee:c4:60:09:63:84:
0f:f4:f5:76:48:65:62:b4:b6:45:9e:12:b0:65:33:
14:24:70:df:46:ee:b5:c8:0c:a3:7f:ef:ba:d7:2c:
83:e6:27:f3:84:54:10:7c:7c:d4:99:41:86:d3:63:
30:0b:85:88:4a:9a:fd:ed:fe:bf:99:9b:27:5a:fc:
5a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F3:25:F9:F0:CC:39:FB:AA:22:AC:64:29:38:A2:F7:35:87:4D:C3
X509v3 Authority Key Identifier:
keyid:B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:e2:35:8b:6d:6d:c1:97:41:1c:76:1d:bb:22:0b:a0:6b:3b:
95:64:04:67:5d:c6:ae:db:bb:e6:93:a3:17:c6:e8:05:d5:41:
16:10:5c:b3:a9:3c:7a:4f:17:cd:5d:f4:0f:4c:97:28:75:67:
4f:d6:cd:1e:5a:e3:16:21:57:90:11:77:94:7e:5e:cd:95:0a:
ea:a5:a0:49:64:9b:6d:82:ef:e4:b5:bb:c8:f0:bd:67:33:e2:
95:41:fd:df:bf:c4:ad:dd:f8:fe:c3:6f:87:a7:1a:5f:39:e0:
99:fb:01:09:50:e6:19:04:45:01:13:c0:44:2b:b7:bf:dd:bd:
ff:4c:e1:d0:ae:47:4e:f8:6c:bc:c1:c6:22:c9:96:62:68:d8:
9c:90:6a:46:b6:c1:0d:52:a4:33:42:90:02:6e:8e:55:15:e3:
84:2c:93:15:64:fc:73:2a:a0:22:11:50:38:5b:88:8c:08:d2:
17:51:bb:70:0c:be:b5:a4:e3:47:cc:69:7b:02:65:66:15:80:
25:c9:d8:77:7f:5d:06:74:67:68:5a:e9:d5:5a:7f:70:8a:50:
0f:a4:29:08:29:30:0c:37:f4:31:6d:b3:52:70:9d:21:ce:26:
e0:c1:7c:eb:4c:dd:84:64:cc:a6:c7:6a:5c:32:fd:42:ca:a4:
97:31:1d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:57:30 2025 by rpki-client