Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
File: snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json)
Hash identifier: YwUJ5CpZ8Yg+ApbzxeULZHO1kK7tIoSDHy/gceUPU18=
Subject key identifier: 9B:41:3E:A2:E4:36:0A:A0:23:F5:A9:F3:16:AD:D0:B4:56:E1:6F:D4
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial: 019748FA7BBA453BE2D842B74BE35A490A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
Manifest number: 0DAF
Signing time: Sat 07 Jun 2025 06:01:04 +0000
Manifest this update: Sat 07 Jun 2025 06:01:04 +0000
Manifest next update: Sun 08 Jun 2025 06:01:04 +0000
Files and hashes: 1: HRiBqkMm3jYdrvB2_suIlLpeJLU.roa (hash: thuo/2wKh04k5fV07y+BJSuu+CRS6TthbxD3yT9m+AM=)
2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: txmU2/LBxSYrs0tHMIq6XepubemICTFBa+TAHAZUvfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:7b:ba:45:3b:e2:d8:42:b7:4b:e3:5a:49:0a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
Validity
Not Before: Jun 7 06:01:04 2025 GMT
Not After : Jun 8 06:01:04 2025 GMT
Subject: CN=9b413ea2e4360aa023f5a9f316add0b456e16fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:df:df:00:84:37:79:02:bc:4b:15:ae:50:
9f:7e:90:6f:e6:f8:da:80:25:02:e7:e4:c2:d7:24:
78:8c:83:3d:bc:bf:dc:c6:7b:f9:b8:82:4e:b7:77:
d4:29:ce:63:1a:ee:f4:d1:81:e8:4d:b1:c1:56:65:
4a:af:6b:23:47:f6:9f:c8:50:ff:77:c2:bb:fe:81:
db:ca:cf:fa:ce:28:22:c9:58:ac:6e:be:bf:f5:f6:
d1:d4:81:96:f4:15:34:5d:c7:ba:2b:93:62:c2:c9:
ad:72:d0:59:0a:ae:e6:24:15:fe:8b:ee:61:9c:61:
f2:8d:db:49:70:88:2d:66:95:de:33:76:ea:7e:64:
f8:88:b2:37:f0:c7:0a:2c:6c:22:81:a5:94:03:b8:
1a:b3:f6:d8:3b:e2:91:75:f1:ec:ca:97:1b:1e:15:
3f:0c:88:42:2b:87:95:27:f0:cf:61:53:85:35:12:
2d:1c:c3:39:84:8a:5d:fb:16:51:06:91:91:64:0d:
07:f0:f1:29:5b:5f:de:19:c8:5e:eb:86:a4:19:10:
3c:67:ca:57:3a:cb:9d:c3:f0:7b:2e:ba:1e:c3:54:
58:95:5c:c3:8f:bc:37:5d:04:67:8a:3e:c0:10:51:
d6:c6:3b:d9:37:de:b3:50:4a:6e:9a:f3:1a:bc:f1:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:41:3E:A2:E4:36:0A:A0:23:F5:A9:F3:16:AD:D0:B4:56:E1:6F:D4
X509v3 Authority Key Identifier:
keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ec:3f:79:c0:d7:2e:55:ca:54:d7:8e:42:9f:dd:90:8f:df:
01:10:04:ea:88:fe:f9:8c:84:ed:73:cb:64:05:aa:5f:d6:a5:
63:36:22:09:b0:14:65:46:f7:7b:47:80:7a:c6:24:84:6b:27:
b5:3f:61:4c:b9:8d:e9:df:e2:bf:c8:02:40:16:62:db:6a:5e:
cb:1e:c3:38:28:24:43:ca:46:b3:95:e1:dd:30:50:5e:79:a4:
08:05:13:b6:39:1b:ce:fc:2b:3b:57:80:2d:0d:36:30:f3:02:
20:b2:cb:5b:04:8a:6b:7e:a1:59:39:1f:73:e6:63:4a:31:95:
f5:91:29:4b:1f:c5:1d:0a:b0:53:be:be:59:6f:f3:fd:b1:9a:
b1:f3:b1:a7:9c:30:a7:1a:8a:b2:50:7c:cc:2a:75:38:4b:ed:
dd:57:82:83:b1:80:73:fc:b2:94:ae:4e:2a:39:af:23:5f:c9:
9a:c9:38:72:c3:09:44:6a:45:ba:d5:6a:d7:03:51:44:0b:ba:
db:a7:24:6c:eb:6e:41:9b:a0:e5:9b:1b:55:d9:d6:48:12:bd:
68:6f:76:62:18:e9:7b:86:91:19:26:82:df:62:83:af:b4:69:
71:62:2e:8e:a9:0c:48:84:8c:15:97:ab:41:52:cf:da:17:1c:
17:b2:08:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+nu6RTvi2EK3S+NaSQpVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyNzM1OTgzZGZiMjI3YTI0NmRmOTg4NzZlYzlkMWFmOTFm
M2Q3NzkwHhcNMjUwNjA3MDYwMTA0WhcNMjUwNjA4MDYwMTA0WjAzMTEwLwYDVQQD
Eyg5YjQxM2VhMmU0MzYwYWEwMjNmNWE5ZjMxNmFkZDBiNDU2ZTE2ZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJnf3wCEN3kCvEsVrlCffpBv5vja
gCUC5+TC1yR4jIM9vL/cxnv5uIJOt3fUKc5jGu700YHoTbHBVmVKr2sjR/afyFD/
d8K7/oHbys/6zigiyVisbr6/9fbR1IGW9BU0Xce6K5NiwsmtctBZCq7mJBX+i+5h
nGHyjdtJcIgtZpXeM3bqfmT4iLI38McKLGwigaWUA7gas/bYO+KRdfHsypcbHhU/
DIhCK4eVJ/DPYVOFNRItHMM5hIpd+xZRBpGRZA0H8PEpW1/eGche64akGRA8Z8pX
Osudw/B7Lroew1RYlVzDj7w3XQRnij7AEFHWxjvZN96zUEpumvMavPEaWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtBPqLkNgqgI/Wp8xat0LRW4W/UMB8GA1UdIwQY
MBaAFLJzWYPfsieiRt+Yh27J0a+R89d5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc25OWmc5LXlKNkpHMzVpSGJzblJyNUh6MTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi80NzVlMTktOWZiZi00ZDQzLTkyODUt
ZWM1YjMyNWM2ZWIyLzEvc25OWmc5LXlKNkpHMzVpSGJzblJyNUh6MTNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi80NzVlMTktOWZiZi00ZDQzLTkyODUtZWM1YjMyNWM2ZWIy
LzEvc25OWmc5LXlKNkpHMzVpSGJzblJyNUh6MTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALew/ecDX
LlXKVNeOQp/dkI/fARAE6oj++YyE7XPLZAWqX9alYzYiCbAUZUb3e0eAesYkhGsn
tT9hTLmN6d/iv8gCQBZi22peyx7DOCgkQ8pGs5Xh3TBQXnmkCAUTtjkbzvwrO1eA
LQ02MPMCILLLWwSKa36hWTkfc+ZjSjGV9ZEpSx/FHQqwU76+WW/z/bGasfOxp5ww
pxqKslB8zCp1OEvt3VeCg7GAc/yylK5OKjmvI1/Jmsk4csMJRGpFutVq1wNRRAu6
26ckbOtuQZug5ZsbVdnWSBK9aG92Yhjpe4aRGSaC32KDr7RpcWIujqkMSISMFZer
QVLP2hccF7IIxg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:09:41 2025 by rpki-client