Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
File: Snz-iBFothWgvUEcwxS9BApNJ_Y.mft (raw, json)
Hash identifier: 3EatUQLgOG8guOwz7lFf2vBbjXoiFYihHcjerUOrV6c=
Subject key identifier: 56:AC:23:6B:C0:6D:AF:CE:E9:7B:2D:2D:E6:07:FB:5A:FF:8B:02:E9
Authority key identifier: 4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
Certificate issuer: /CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Certificate serial: 01958B84513E304B03310FDDDD57D9DCADE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
Manifest number: 1493
Signing time: Wed 12 Mar 2025 18:00:59 +0000
Manifest this update: Wed 12 Mar 2025 18:00:59 +0000
Manifest next update: Thu 13 Mar 2025 18:00:59 +0000
Files and hashes: 1: Snz-iBFothWgvUEcwxS9BApNJ_Y.crl (hash: sDAZkWDnKMmI3s1pCYUeCVQkLGgAHdynkIV+7zxa26Q=)
2: h_GYODiIwy0tVyLDmKAyNCK7Ui8.roa (hash: EVyFdfHvchtGYnioVymnJTf1ceZLIXds+uNSkp7sgG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:51:3e:30:4b:03:31:0f:dd:dd:57:d9:dc:ad:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a7cfe881168b615a0bd411cc314bd040a4d27f6
Validity
Not Before: Mar 12 18:00:59 2025 GMT
Not After : Mar 13 18:00:59 2025 GMT
Subject: CN=56ac236bc06dafcee97b2d2de607fb5aff8b02e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7f:f5:ae:a5:f5:b4:41:09:57:c0:1d:7e:d5:
9a:28:8c:5d:c3:be:d6:83:c5:4c:e7:27:50:55:fc:
26:4d:68:d0:31:a7:38:47:b1:ae:0b:cf:9c:7d:3f:
b9:ef:76:1f:88:1f:3a:89:92:1f:13:97:2c:be:b4:
0c:70:44:4e:4a:ab:f3:e5:a4:1b:ee:8e:d0:5c:64:
41:f6:2b:46:ff:af:e6:33:18:7a:85:4f:8c:e5:48:
5c:2b:84:1f:00:31:24:50:7a:86:a3:cc:b2:50:dd:
f5:19:51:82:08:a1:be:86:fc:22:eb:67:b6:21:4a:
58:0c:20:46:cd:c1:bd:4e:df:63:e4:d2:85:d3:ec:
c6:34:08:0a:63:0f:5a:0d:dc:4a:76:dc:f5:30:18:
9d:29:9c:79:1b:94:7f:68:61:90:8f:3d:9b:25:6a:
47:be:a1:fb:5c:11:27:e9:f7:dd:b2:c3:7a:c2:41:
b7:5b:87:97:57:42:f4:f7:83:04:b3:80:67:b2:78:
62:d8:dd:75:79:d6:2f:d8:c7:7d:2f:34:6a:85:d9:
9d:69:7d:27:6a:67:e9:f5:15:94:e1:fc:0a:e6:7b:
ba:86:ce:4f:e5:19:fc:e7:42:f1:12:ca:fd:07:0d:
9c:84:86:d1:83:3c:57:1a:31:db:cf:64:64:f2:5b:
29:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AC:23:6B:C0:6D:AF:CE:E9:7B:2D:2D:E6:07:FB:5A:FF:8B:02:E9
X509v3 Authority Key Identifier:
keyid:4A:7C:FE:88:11:68:B6:15:A0:BD:41:1C:C3:14:BD:04:0A:4D:27:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Snz-iBFothWgvUEcwxS9BApNJ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/322450-21ca-41af-9b65-cbe084872174/1/Snz-iBFothWgvUEcwxS9BApNJ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3d:64:24:f7:41:de:d5:58:81:b5:17:25:ff:5c:8d:bd:f5:
e9:85:5f:e7:ce:e1:e7:70:dc:87:82:1b:8f:fb:56:f5:17:47:
32:b5:bc:ef:c0:51:87:99:6f:8a:03:6f:9e:b9:07:01:b7:12:
16:67:09:af:f5:b6:b2:52:ee:f8:db:98:f4:ee:3e:52:64:c7:
b4:99:11:23:99:4d:6c:87:bd:b0:88:b6:7e:ba:37:cb:35:07:
bf:1a:c4:db:44:8d:bc:b9:5f:67:90:ef:b9:11:17:f7:62:4c:
32:e2:05:af:9f:6c:77:ba:2a:ef:5e:3b:48:a8:2f:5f:a2:79:
6a:21:9d:b1:3b:01:d6:1c:b4:ac:40:d5:90:fc:7c:be:f6:d5:
60:bf:c1:75:98:54:ee:9a:bc:fb:6a:6f:95:4c:81:64:3d:26:
7a:5f:fa:15:69:13:c3:94:83:d7:3f:c8:66:14:ac:86:d8:23:
70:95:1a:30:d4:ae:b6:e1:b5:93:aa:04:6b:18:6c:06:b8:86:
3c:75:42:80:36:4e:4c:d2:24:a9:55:33:7c:91:50:ae:9e:d8:
d9:28:c5:4a:fc:76:e9:f4:06:a7:c4:4d:65:41:37:fd:c0:48:
66:0b:97:a7:22:2b:8c:e5:2c:c8:cd:e2:3f:76:ed:a7:b5:64:
de:f6:e2:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLhFE+MEsDMQ/d3VfZ3K3oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhN2NmZTg4MTE2OGI2MTVhMGJkNDExY2MzMTRiZDA0MGE0
ZDI3ZjYwHhcNMjUwMzEyMTgwMDU5WhcNMjUwMzEzMTgwMDU5WjAzMTEwLwYDVQQD
Eyg1NmFjMjM2YmMwNmRhZmNlZTk3YjJkMmRlNjA3ZmI1YWZmOGIwMmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln/1rqX1tEEJV8AdftWaKIxdw77W
g8VM5ydQVfwmTWjQMac4R7GuC8+cfT+573YfiB86iZIfE5csvrQMcEROSqvz5aQb
7o7QXGRB9itG/6/mMxh6hU+M5UhcK4QfADEkUHqGo8yyUN31GVGCCKG+hvwi62e2
IUpYDCBGzcG9Tt9j5NKF0+zGNAgKYw9aDdxKdtz1MBidKZx5G5R/aGGQjz2bJWpH
vqH7XBEn6ffdssN6wkG3W4eXV0L094MEs4Bnsnhi2N11edYv2Md9LzRqhdmdaX0n
amfp9RWU4fwK5nu6hs5P5Rn850LxEsr9Bw2chIbRgzxXGjHbz2Rk8lspcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFasI2vAba/O6XstLeYH+1r/iwLpMB8GA1UdIwQY
MBaAFEp8/ogRaLYVoL1BHMMUvQQKTSf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU256LWlCRm90aFdndlVFY3d4UzlCQXBOSl9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zMjI0NTAtMjFjYS00MWFmLTliNjUt
Y2JlMDg0ODcyMTc0LzEvU256LWlCRm90aFdndlVFY3d4UzlCQXBOSl9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zMjI0NTAtMjFjYS00MWFmLTliNjUtY2JlMDg0ODcyMTc0
LzEvU256LWlCRm90aFdndlVFY3d4UzlCQXBOSl9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcj1kJPdB
3tVYgbUXJf9cjb316YVf587h53Dch4Ibj/tW9RdHMrW878BRh5lvigNvnrkHAbcS
FmcJr/W2slLu+NuY9O4+UmTHtJkRI5lNbIe9sIi2fro3yzUHvxrE20SNvLlfZ5Dv
uREX92JMMuIFr59sd7oq7147SKgvX6J5aiGdsTsB1hy0rEDVkPx8vvbVYL/BdZhU
7pq8+2pvlUyBZD0mel/6FWkTw5SD1z/IZhSshtgjcJUaMNSutuG1k6oEaxhsBriG
PHVCgDZOTNIkqVUzfJFQrp7Y2SjFSvx26fQGp8RNZUE3/cBIZguXpyIrjOUsyM3i
P3btp7Vk3vbi0Q==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:28:56 2025 by rpki-client