Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
File: snjtj5eA8p2voi-f3wM3TaSYDpQ.mft (raw, json)
Hash identifier: 8tkdsC/G9OIg64xBorSFHM7hXs1Mjx5/NIO3m3MBesY=
Subject key identifier: 55:7E:D6:B0:02:A6:D1:93:24:79:32:63:E6:76:4D:50:99:A3:8E:B2
Authority key identifier: B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
Certificate issuer: /CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Certificate serial: 0199239FEE567EBCC70FC4C6E8DE4D78DDEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
Manifest number: 10CA
Signing time: Sun 07 Sep 2025 10:01:47 +0000
Manifest this update: Sun 07 Sep 2025 10:01:47 +0000
Manifest next update: Mon 08 Sep 2025 10:01:47 +0000
Files and hashes: 1: Q2ddpl6C3V4vYBl0I3228luG5oU.roa (hash: gKtH3NhXGtSIchcMlB2GM3eSMYDb2zE1qytNooqyMO0=)
2: snjtj5eA8p2voi-f3wM3TaSYDpQ.crl (hash: XAMTMkDKJwQn7Wiany2HIzcGE4gtlES/lnnPFgQvzCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:ee:56:7e:bc:c7:0f:c4:c6:e8:de:4d:78:dd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b278ed8f9780f29dafa22f9fdf03374da4980e94
Validity
Not Before: Sep 7 10:01:47 2025 GMT
Not After : Sep 8 10:01:47 2025 GMT
Subject: CN=557ed6b002a6d19324793263e6764d5099a38eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:9a:1e:ac:d8:2c:dd:8d:49:97:5f:cc:d0:
ef:5d:9d:ef:37:8b:2c:3e:40:d7:7e:d2:5e:22:56:
3a:5f:2c:ce:58:b9:50:b8:6a:78:00:2b:4b:33:ed:
d8:35:2e:a6:ce:33:a7:98:c5:a6:0c:e3:a6:24:97:
f9:c7:80:d9:bc:58:99:ff:d8:9a:77:18:bf:5b:40:
fc:3f:5c:63:cc:42:4d:40:0f:11:b5:1c:a8:63:95:
ca:af:17:d6:67:dd:7d:9a:0a:c5:4b:4c:89:6b:a6:
d9:a6:d4:f8:b9:d9:fa:e0:1a:96:5b:c8:6f:42:b9:
aa:1b:d8:d9:58:97:7d:7a:00:c9:53:08:00:2d:36:
ab:5e:be:87:19:c2:37:0f:35:56:11:b3:42:6b:cc:
da:89:8b:01:c3:04:53:26:92:72:16:3c:d5:2e:4c:
47:ba:83:a0:ee:e7:fc:0d:83:98:ca:80:98:9b:c8:
f7:3a:76:4b:a9:dd:f2:00:9e:65:8e:83:0a:92:9a:
bc:c3:f6:27:a9:11:02:09:64:40:05:52:e9:57:bc:
39:26:ab:d5:e4:1e:31:0a:99:98:14:5b:01:42:67:
e3:84:6d:80:c6:36:85:d9:fc:07:36:a1:66:bb:04:
74:75:27:da:20:e8:ca:72:fb:09:61:c5:64:de:e0:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7E:D6:B0:02:A6:D1:93:24:79:32:63:E6:76:4D:50:99:A3:8E:B2
X509v3 Authority Key Identifier:
keyid:B2:78:ED:8F:97:80:F2:9D:AF:A2:2F:9F:DF:03:37:4D:A4:98:0E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snjtj5eA8p2voi-f3wM3TaSYDpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1e2316-1b5b-4ba5-937d-02864c58519c/1/snjtj5eA8p2voi-f3wM3TaSYDpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:91:61:86:d2:25:9c:a1:a5:25:12:e8:3b:0a:c3:ff:b0:23:
a7:d3:c3:9d:2b:57:87:b2:0e:b8:cd:ee:51:56:3c:8c:d2:4e:
f8:53:c5:5c:3d:a9:08:36:d3:f0:5b:39:7b:23:c5:58:86:fd:
43:86:a8:f5:81:05:c1:a6:2b:06:01:89:7f:8d:59:a6:f8:b7:
23:8b:6b:82:d3:a0:24:72:8f:17:53:34:ba:0e:3e:3f:da:ec:
e0:a9:4e:16:cc:79:32:aa:09:8e:1f:be:03:f7:b0:88:fd:41:
dd:90:18:c0:3d:f8:31:55:a3:c3:97:58:04:bb:aa:77:d7:37:
5f:50:ef:42:be:2a:a1:0e:f5:b3:63:a7:30:e0:f0:fa:ea:ad:
dd:0e:70:50:b3:62:e3:7d:84:f6:9b:15:bb:75:ef:43:48:bc:
64:54:f1:98:4a:40:7d:02:93:ec:31:ee:29:8f:31:ef:8b:8e:
96:a7:1f:9e:ac:1d:fb:ef:a2:6d:6c:c6:82:00:5b:5a:73:de:
cc:65:94:9e:d8:f1:06:1c:a0:45:09:30:93:9c:e6:0c:a3:46:
a3:86:4f:14:1c:45:78:c7:94:49:d7:6b:ee:34:17:e6:6c:20:
ea:b8:7e:4c:29:d8:ff:e5:df:b3:f4:75:b5:5a:6e:96:66:f5:
ad:b2:a8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:05 2025 by rpki-client