Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
File: Snz-iBFothWgvUEcwxS9BApNJ_Y.mft (raw, json)
Hash identifier: whYiiHfEjy5fIFmPRaE/3lEJdKBmavHOxgT4T/Qo8bg=
Subject key identifier: 71:03:9D:04:4F:50:1D:92:40:8E:56:78:57:F0:49:5A:F0:5E:19:3E
Authority key identifier: 4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
Certificate issuer: /CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Certificate serial: 019922C391EA9F13C2A52FA2AF9CD98DFCEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 06:01:05 +0000
Manifest this update: Sun 07 Sep 2025 06:01:05 +0000
Manifest next update: Mon 08 Sep 2025 06:01:05 +0000
Files and hashes: 1: Snz-iBFothWgvUEcwxS9BApNJ_Y.crl (hash: Eg2DDyddMCaQz5obqsqGPOI6fmGpKQwXKUhUfl0Om3k=)
2: h_GYODiIwy0tVyLDmKAyNCK7Ui8.roa (hash: EVyFdfHvchtGYnioVymnJTf1ceZLIXds+uNSkp7sgG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:91:ea:9f:13:c2:a5:2f:a2:af:9c:d9:8d:fc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Validity
Not Before: Sep 7 06:01:05 2025 GMT
Not After : Sep 8 06:01:05 2025 GMT
Subject: CN=71039d044f501d92408e567857f0495af05e193e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:08:66:5e:49:22:f2:a3:3d:43:f0:9d:4b:65:
36:c4:19:c0:8b:70:07:e2:03:eb:c3:84:2f:08:5c:
58:2e:c0:c3:8b:e9:09:e0:cc:d4:32:0e:03:6e:91:
37:db:0b:f8:fe:24:ee:9a:ed:ec:49:3c:4a:ab:c2:
84:e2:2d:2f:b2:b2:63:fa:84:27:66:91:f1:63:10:
93:bb:cd:2a:83:c1:e2:19:0f:a4:44:de:37:6e:e4:
82:31:94:41:0e:5f:fb:c7:87:c4:b6:03:99:d9:5c:
ee:b5:6e:77:f5:9b:f2:94:33:22:50:5f:0f:f7:8b:
b6:3c:2d:a1:5d:15:73:2f:de:c9:d6:8d:23:8b:9c:
40:c8:45:70:41:02:12:c3:b7:90:1c:c2:e1:0e:07:
73:07:db:c8:3c:df:92:41:97:44:f7:ba:68:ba:18:
ab:13:2f:5a:ee:a1:fb:a0:c2:c7:cf:a8:80:d8:dc:
b8:fb:48:79:95:d0:fc:b9:fc:4f:ba:d9:92:c0:25:
8d:b9:c3:d9:cf:32:fc:17:08:5b:01:eb:68:bc:b0:
57:bb:91:61:e0:a8:3d:04:25:21:d7:d7:da:7d:b1:
d9:03:e6:14:e1:86:58:22:42:32:42:03:97:ed:3c:
e2:31:35:57:cb:fa:39:63:67:2e:dc:40:c4:fc:fe:
72:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:03:9D:04:4F:50:1D:92:40:8E:56:78:57:F0:49:5A:F0:5E:19:3E
X509v3 Authority Key Identifier:
keyid:4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:89:2d:b5:da:56:45:2a:77:62:f9:5c:2c:a2:d6:6e:0f:b7:
17:2e:50:3e:54:78:7e:21:6a:63:22:90:bc:4c:16:3d:4e:d4:
f2:5a:9a:6e:04:af:0a:b1:e6:30:dd:a9:7a:a9:48:b8:8a:22:
97:fe:fd:02:dd:72:9c:75:9c:0a:8b:58:ab:81:4c:4e:31:9d:
76:bb:e4:27:68:ac:f8:9a:32:2b:46:ef:33:20:8d:65:1e:3d:
b5:a8:2a:44:a4:83:33:73:c8:ae:27:65:94:ed:3b:1e:cc:60:
97:8c:4d:8d:d0:1f:b6:cc:37:41:86:c9:58:08:89:69:dd:16:
3d:86:db:e7:39:27:4d:da:de:2e:99:cc:07:7f:68:84:28:c7:
b6:23:23:5c:bf:8b:2c:1f:04:77:23:b6:95:2d:be:d0:91:16:
4b:fe:62:8b:d6:de:72:93:bd:14:68:69:aa:d3:df:a7:fe:3e:
32:72:67:23:b1:6b:ed:e8:34:6e:59:dc:3e:44:08:56:a3:b8:
8b:6f:6e:a1:b8:f5:07:d7:39:f2:34:62:33:b4:2c:8b:da:0b:
27:65:3b:1e:9d:a6:65:44:94:24:ae:da:c2:6a:53:ff:dd:b9:
1d:38:5f:c9:06:d1:3b:88:5d:45:af:d9:de:31:63:6f:55:76:
e9:f5:0d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:48 2025 by rpki-client