Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
File: Snz-iBFothWgvUEcwxS9BApNJ_Y.mft (raw, json)
Hash identifier: lFzqmm0PvSu1ML/z9UB39vW0Ka6DN9sk//XXwnWk7Bo=
Subject key identifier: CA:F1:7F:BC:32:E2:E6:6C:EB:C5:13:D6:3B:FC:94:45:BC:E6:BD:A1
Authority key identifier: 4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
Certificate issuer: /CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Certificate serial: 019A70DC3C47B9851D4E32EA128F3F1E57EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 03:01:12 +0000
Manifest this update: Tue 11 Nov 2025 03:01:12 +0000
Manifest next update: Wed 12 Nov 2025 03:01:12 +0000
Files and hashes: 1: Snz-iBFothWgvUEcwxS9BApNJ_Y.crl (hash: ITsYs4FoN4ykSqFSmtosGaFkRBe3A4jZOUxONzVX/RY=)
2: h_GYODiIwy0tVyLDmKAyNCK7Ui8.roa (hash: EVyFdfHvchtGYnioVymnJTf1ceZLIXds+uNSkp7sgG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:3c:47:b9:85:1d:4e:32:ea:12:8f:3f:1e:57:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Validity
Not Before: Nov 11 03:01:12 2025 GMT
Not After : Nov 12 03:01:12 2025 GMT
Subject: CN=caf17fbc32e2e66cebc513d63bfc9445bce6bda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:04:87:bc:06:01:42:58:cb:19:79:e8:da:42:
03:1b:2c:c5:e3:7c:1b:55:60:54:aa:59:80:9c:04:
54:63:ad:1a:66:fc:e2:98:76:9e:36:cd:54:82:86:
57:95:3e:d9:a9:01:b9:c1:e6:d9:98:d4:0d:c2:8d:
63:cb:bb:58:7c:ac:4b:5c:fa:3a:07:1b:70:01:48:
94:bb:77:09:1a:48:48:fc:fd:ff:3c:3e:00:90:60:
da:2e:23:57:37:a4:25:0d:79:e9:26:ce:54:18:3c:
78:cd:22:5b:90:6b:a8:36:64:06:91:35:78:15:18:
6d:bf:7e:9c:d1:b8:5a:c5:ff:5e:87:8e:7b:fc:cc:
a3:ce:f6:00:78:a6:76:d6:1e:58:d5:6c:6f:6d:63:
71:37:ca:cb:f2:74:8b:2e:93:a9:07:2d:8b:d0:ca:
3e:c1:85:ff:dd:24:9a:0c:79:57:a1:af:90:0a:72:
9c:78:ee:a3:c9:83:a7:6b:d3:2d:24:d5:b1:51:f3:
e9:2d:61:ac:e1:c8:06:c7:fb:62:fe:27:3f:d1:19:
29:8c:dc:52:da:28:4e:26:6a:ae:65:74:b5:ee:42:
c9:e4:dd:13:be:06:31:60:2f:0c:e6:87:3b:86:7d:
64:b6:a7:62:40:42:dd:1b:a1:e5:86:f7:c8:2c:92:
74:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F1:7F:BC:32:E2:E6:6C:EB:C5:13:D6:3B:FC:94:45:BC:E6:BD:A1
X509v3 Authority Key Identifier:
keyid:4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fd:89:0e:40:71:e8:25:7f:9a:f5:9d:d5:af:18:72:3f:00:
f7:bf:e1:27:56:67:26:29:93:fd:86:25:30:5e:94:da:0f:4b:
71:f1:0f:fa:4d:65:5c:2f:be:e8:49:c2:43:aa:f8:2a:bb:f4:
0a:88:6c:29:28:bd:23:13:fc:1b:3c:d5:22:d9:6d:9d:ed:3f:
c9:7f:f7:bf:30:92:74:67:70:71:7d:12:c8:86:26:f6:af:f8:
a2:e8:b6:ed:21:f4:97:06:ae:dc:9f:cf:f3:ce:05:b3:65:26:
72:80:21:a9:0e:89:72:30:83:95:22:4f:89:9d:16:da:79:f4:
c6:52:76:7b:1c:57:d0:52:29:8e:1f:0c:7c:17:ba:33:59:dd:
89:22:74:6f:ba:64:6e:aa:3b:09:eb:49:8d:2c:10:25:0d:a5:
60:32:d6:28:9e:49:9b:b2:6e:8b:6c:f7:ca:af:b0:59:01:24:
db:13:9b:a2:30:30:bc:d7:c1:ef:b1:0c:6f:e3:b7:61:17:06:
d7:d1:39:96:a4:b0:2c:0e:80:cd:3d:3b:5d:b3:31:dd:29:03:
e1:da:67:d3:5f:0d:e0:97:01:43:08:64:47:db:2d:16:44:d5:
7a:8d:c9:b0:01:06:67:31:c5:44:11:a5:c9:b8:df:79:b3:4d:
d0:5f:4f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:52 2025 by rpki-client