Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
File: SanokeBtQid9xPtfvWnpq9jimIM.mft (raw, json)
Hash identifier: aEc65jfPwohykWxVEvrTojInoPjci75WsI+qIPRz4Rs=
Subject key identifier: F8:DF:02:62:2A:5F:53:07:19:C9:04:EE:13:A1:F2:42:3B:41:3F:A7
Authority key identifier: 49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
Certificate issuer: /CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Certificate serial: 019A706E4DD7486FF2C3D1196FCEFFDD998B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 01:01:08 +0000
Manifest this update: Tue 11 Nov 2025 01:01:08 +0000
Manifest next update: Wed 12 Nov 2025 01:01:08 +0000
Files and hashes: 1: SanokeBtQid9xPtfvWnpq9jimIM.crl (hash: mFXz65DDOSBA0wHerIHmEdAUF+X92M+6lKgVp/s8nsQ=)
2: V8zD_fceDFK7bKm0UJWlvFSbGqc.roa (hash: Le4LPJ6tIhm6aij63pajwkdMuW6+ZunlQYJepBMOhII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:4d:d7:48:6f:f2:c3:d1:19:6f:ce:ff:dd:99:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49a9e891e06d42277dc4fb5fbd69e9abd8e29883
Validity
Not Before: Nov 11 01:01:08 2025 GMT
Not After : Nov 12 01:01:08 2025 GMT
Subject: CN=f8df02622a5f530719c904ee13a1f2423b413fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:2e:8b:bb:70:03:6a:9a:98:49:f2:01:7d:
df:24:5e:e0:ac:b1:7d:3f:b8:60:98:f3:0d:1b:54:
64:7f:74:24:65:56:4e:5c:0f:65:7e:7b:48:6b:9b:
00:8b:57:4b:cd:1c:2b:a1:cf:a6:2c:9e:c4:93:71:
77:db:95:13:03:83:21:9b:04:42:f0:53:1e:24:27:
ee:89:0b:52:72:23:4e:5a:89:65:71:5a:d3:85:be:
04:f3:95:58:9a:e4:74:b9:ef:54:82:7c:15:1e:77:
b3:c8:9a:bf:04:53:19:f3:c2:b9:08:d3:60:29:d5:
88:0c:28:64:c2:fa:d0:8c:c3:13:c7:0d:fd:6e:3f:
d0:29:b9:6f:97:1f:ce:40:9c:d9:d6:c9:73:76:a0:
93:5c:69:0a:f5:c2:9a:ab:68:b9:b7:4b:1a:44:e3:
ca:15:0d:30:54:fb:c2:eb:28:09:8e:37:3b:69:1e:
f1:13:1d:9a:ba:e4:8c:28:78:75:40:80:ac:72:5c:
68:0a:3c:d2:d7:06:93:b4:df:fd:cd:ca:92:cd:05:
0d:82:02:3f:38:fb:6a:34:d5:56:c5:60:05:5c:95:
d0:c2:49:50:2a:08:8e:e5:3f:28:f5:fa:ec:37:1f:
03:69:e8:72:6d:fd:8d:ca:2d:a9:d1:d6:33:3f:f3:
d5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DF:02:62:2A:5F:53:07:19:C9:04:EE:13:A1:F2:42:3B:41:3F:A7
X509v3 Authority Key Identifier:
keyid:49:A9:E8:91:E0:6D:42:27:7D:C4:FB:5F:BD:69:E9:AB:D8:E2:98:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SanokeBtQid9xPtfvWnpq9jimIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/53696f-f973-47fb-8d79-addc6d4bb2e7/1/SanokeBtQid9xPtfvWnpq9jimIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d3:2c:c9:9f:b0:f9:3f:f8:fe:77:f8:ac:a3:d3:6b:62:8b:
1c:ad:bc:2b:d6:68:40:9a:40:5d:a8:0f:dc:6e:fc:5b:cf:21:
a3:32:34:31:3e:04:af:15:49:f2:61:5c:2e:bb:81:9e:e0:01:
1b:22:62:dc:90:c5:32:de:89:65:24:81:5a:65:0b:04:fd:cc:
92:8d:ce:48:08:6e:e4:19:3c:55:30:15:52:ab:02:50:71:02:
59:f1:53:f8:80:11:2b:41:f2:74:6c:a7:3b:ca:b2:79:b1:6e:
c8:cb:35:28:ba:52:00:73:3f:85:0e:8d:1a:ba:1f:34:4d:9e:
69:42:f1:95:f7:24:37:81:c6:1d:f8:2d:5c:27:1c:b0:7c:91:
2a:28:ac:fc:57:a7:fd:93:34:3d:3f:e0:f3:fc:06:fb:e8:ae:
33:91:05:e3:e7:8f:89:ff:96:69:28:86:c8:82:8d:e8:8a:86:
a5:cd:2c:d6:94:a4:6b:c2:74:26:09:da:d0:d0:95:bb:ec:79:
a5:e4:40:93:78:10:4d:02:5b:81:46:c6:92:19:73:a2:6e:57:
05:d1:d8:b0:d9:f2:2a:29:71:4c:e7:3b:2c:92:27:18:96:fd:
f3:b4:5d:62:33:d3:5c:9f:9a:ef:86:71:0a:36:9e:c3:bf:40:
78:48:bd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:16 2025 by rpki-client