Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
File: snkS_-9nB4uwa9SpAh-6lq2xgL4.mft (raw, json)
Hash identifier: xHzVxC2ljzIWAioA6u6SPyrcGahaxw8TIzINp38KD1o=
Subject key identifier: A1:6D:4F:EE:AA:D1:DB:D3:BA:C9:0F:BC:4F:66:FF:C3:FC:B0:91:69
Authority key identifier: B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
Certificate issuer: /CN=b27912ffef67078bb06bd4a9021fba96adb180be
Certificate serial: 019922557DB9D472A56295CE3E6B4DFE7094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
Manifest number: 120D
Signing time: Sun 07 Sep 2025 04:00:52 +0000
Manifest this update: Sun 07 Sep 2025 04:00:52 +0000
Manifest next update: Mon 08 Sep 2025 04:00:52 +0000
Files and hashes: 1: Q0e2nZwWTgSOnN3XYro_yC3AqqY.roa (hash: p1jDlEZ3jtWSk1Gt2ui3hdbzWJmpWW1M0qlAGcolPG0=)
2: snkS_-9nB4uwa9SpAh-6lq2xgL4.crl (hash: zXLgItElANx+TYBGT6qQIjnIAEclgTDvXSG8AuiRez0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:7d:b9:d4:72:a5:62:95:ce:3e:6b:4d:fe:70:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27912ffef67078bb06bd4a9021fba96adb180be
Validity
Not Before: Sep 7 04:00:52 2025 GMT
Not After : Sep 8 04:00:52 2025 GMT
Subject: CN=a16d4feeaad1dbd3bac90fbc4f66ffc3fcb09169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5c:0e:5c:c5:ee:d4:fe:8c:e7:48:22:02:ff:
4e:6b:0d:df:fe:21:76:5e:40:2b:6b:52:e8:c1:22:
26:df:73:4d:59:8d:e3:a2:26:ab:d7:5a:c0:3e:96:
aa:0f:20:99:84:31:ad:f0:fb:6a:d9:09:b3:1a:85:
bf:98:80:ee:69:12:e7:5e:02:90:f0:57:d5:97:b4:
2c:6f:d0:39:31:55:28:71:3c:68:16:52:54:5b:ac:
be:5d:10:1b:a6:25:c2:1c:be:ca:e4:39:f2:68:be:
1b:a2:ac:3c:cf:5b:42:78:76:20:2a:e2:11:ad:20:
7f:f1:7a:48:33:8b:97:e4:7d:2c:ad:89:82:16:9b:
bf:67:67:e9:0c:28:0a:c1:98:9d:0a:7f:ba:b0:ea:
1d:02:15:08:aa:2b:95:cd:b6:28:eb:9e:ff:9d:6d:
df:59:c6:ab:c4:75:a5:bb:a3:9c:7a:54:ae:84:a5:
65:29:d1:a7:ee:5b:b2:51:6b:23:09:f9:b8:30:a2:
e9:78:4e:fe:ba:52:b8:df:d7:ea:6e:74:7d:91:1e:
e6:32:e9:4b:8f:75:29:32:7d:4a:63:6b:19:8b:c0:
64:a4:52:e1:98:ff:04:93:10:bb:1a:8d:3b:b5:fc:
43:d0:c5:70:7e:7f:01:3d:f6:66:a8:19:45:ef:69:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6D:4F:EE:AA:D1:DB:D3:BA:C9:0F:BC:4F:66:FF:C3:FC:B0:91:69
X509v3 Authority Key Identifier:
keyid:B2:79:12:FF:EF:67:07:8B:B0:6B:D4:A9:02:1F:BA:96:AD:B1:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snkS_-9nB4uwa9SpAh-6lq2xgL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2b87c5-380d-476f-a714-5c0d92f9a49f/1/snkS_-9nB4uwa9SpAh-6lq2xgL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0f:85:03:f6:ea:8c:12:09:0c:fc:0a:d7:49:2f:c5:c6:d4:
83:00:e6:1e:a7:21:77:18:af:e8:f6:59:2a:9d:ee:33:27:4c:
70:2d:3b:45:ec:e5:fa:c4:4f:24:d8:5a:4b:89:32:e9:0a:5a:
49:d9:89:51:df:94:d3:07:52:72:20:d9:a8:1e:b7:e8:c3:8c:
24:a7:6e:b9:54:04:8b:1c:f7:5a:5f:ef:b4:18:83:53:ab:2d:
3e:c9:b8:bc:38:1b:f8:81:c6:31:e4:4f:b3:14:e7:dc:09:00:
b1:c4:7b:7a:83:92:53:fd:6d:f2:fd:3b:26:e2:fd:c8:6b:a7:
74:b0:6e:4b:0b:ad:b0:17:d5:73:c1:a4:a2:93:2f:34:9f:22:
a9:43:53:c6:7e:68:3a:07:ef:51:93:51:e1:f7:fb:9c:ee:43:
ff:18:29:d0:9b:51:2d:d9:02:32:c4:1b:50:fb:fa:7f:9e:ba:
2e:13:4f:68:94:26:0f:f2:16:8b:29:e9:89:e4:f2:91:d3:6d:
13:34:a9:91:65:94:48:b0:a1:e7:80:67:65:1e:c7:b6:b6:d4:
ea:53:b5:06:e0:54:17:94:fc:f7:65:4e:0d:c3:c1:00:cc:23:
90:99:07:99:75:97:00:72:68:0d:39:34:d9:41:48:02:df:ec:
63:8c:c7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:27:27 2025 by rpki-client