Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
File: snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json)
Hash identifier: mXek9xeleanwMV39Ee98YQSjeK2xtw8L0xmt0POIZgs=
Subject key identifier: BD:2A:86:4F:4D:05:CD:28:98:2F:4F:E3:5F:61:7A:84:AB:61:65:75
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial: 019A7225A628DA7560CBE22055431B12A76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
Manifest number: 0F52
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: HRiBqkMm3jYdrvB2_suIlLpeJLU.roa (hash: thuo/2wKh04k5fV07y+BJSuu+CRS6TthbxD3yT9m+AM=)
2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: TCxxoaOuFOq9Y6R0z14mIb9y7258N9Sg0ejrJnuv18U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a6:28:da:75:60:cb:e2:20:55:43:1b:12:a7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=bd2a864f4d05cd28982f4fe35f617a84ab616575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1c:af:e1:b6:27:e6:d9:33:db:12:89:96:67:
83:8f:d5:a5:1c:87:6b:d7:16:41:ed:fb:b3:43:b3:
53:16:01:86:5e:83:2b:b5:0c:e0:f9:22:82:6a:21:
83:34:e0:c0:45:64:0f:7e:78:2c:ce:06:11:c0:32:
c0:e2:1f:20:bd:9c:15:ff:65:d3:e6:d6:fd:10:a3:
5f:cc:ef:58:79:60:88:48:8d:01:86:c0:83:34:bd:
8b:19:3b:31:46:55:26:49:1b:65:db:4b:a2:a2:ed:
70:aa:9a:d3:44:c2:1d:e7:b9:c6:c1:9e:30:4d:54:
7c:17:fc:c6:7c:7a:4e:58:a7:6f:19:0d:a2:9d:41:
c8:63:c7:2b:4f:d7:ca:76:4e:44:70:98:6f:0c:fa:
50:18:dc:1d:49:cb:cc:2e:71:23:ed:c2:a3:16:7a:
4b:c5:d7:f3:f3:79:bb:89:c5:43:7f:be:db:76:f0:
5b:60:c1:1b:a4:29:9e:62:47:12:de:ad:7f:b1:f7:
80:1f:e9:70:38:dd:36:6e:75:a2:21:e6:3a:23:f2:
11:01:e4:88:60:90:61:3e:95:58:7f:9e:1c:2b:b0:
a4:f1:e0:dd:3b:ef:65:29:41:b1:46:10:af:d6:d0:
70:44:46:d5:c0:72:d4:53:21:97:35:13:03:ab:d7:
01:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2A:86:4F:4D:05:CD:28:98:2F:4F:E3:5F:61:7A:84:AB:61:65:75
X509v3 Authority Key Identifier:
keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:92:57:1a:1a:ae:ce:8d:03:86:78:d1:0b:63:bd:6f:46:c3:
d4:a8:e0:63:0a:2b:83:ae:98:db:53:aa:01:7b:48:f6:c6:ab:
11:90:e2:5e:c2:28:5e:90:61:ab:d1:87:b2:78:bf:33:58:98:
c0:b6:86:2f:f8:34:d8:97:41:90:a0:3d:64:91:9c:ab:2c:b5:
f9:6c:6c:b7:15:ee:27:4c:93:4a:b4:aa:0e:59:26:fd:97:55:
05:06:e0:52:8e:9e:e1:03:32:20:64:04:9b:38:c2:9c:d1:4c:
ce:37:5c:bd:40:25:9b:e4:f0:2f:9e:53:ff:37:70:b7:cb:cb:
ec:bc:e8:85:5f:7c:56:01:b2:ed:3f:ca:99:3a:a5:36:42:2b:
e1:d0:9a:38:28:f1:78:13:b5:28:da:3c:63:29:46:14:e3:3f:
3a:b8:f4:51:06:8b:53:df:d3:89:c0:20:4a:b1:38:64:03:ac:
b2:3f:a1:08:9c:3b:8c:86:cb:c2:9f:c0:c7:af:ec:5d:ba:23:
6a:8b:e1:36:40:4f:aa:f0:1a:9b:a1:69:2d:95:9f:97:46:f0:
a3:24:1c:27:6e:18:9c:45:f8:ce:62:2f:92:a2:a3:85:6a:84:
ef:12:95:11:37:44:11:9e:6e:f8:82:12:8e:30:2c:d7:c2:3c:
36:57:70:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:29 2025 by rpki-client