Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
File: snNZg9-yJ6JG35iHbsnRr5Hz13k.mft (raw, json)
Hash identifier: Ps/4gSiNdKKgCj6/a9qPaYu1I0RlfhxJMJhoyDnOC+k=
Subject key identifier: 75:21:D1:DF:84:7D:CE:A3:A8:AD:46:3B:44:3F:C3:BF:4C:02:12:BA
Authority key identifier: B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
Certificate issuer: /CN=b2735983dfb227a246df98876ec9d1af91f3d779
Certificate serial: 0199221E8BAF92EBD5DCDFD2D0B340BA4A0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
Manifest number: 0EA4
Signing time: Sun 07 Sep 2025 03:00:50 +0000
Manifest this update: Sun 07 Sep 2025 03:00:50 +0000
Manifest next update: Mon 08 Sep 2025 03:00:50 +0000
Files and hashes: 1: HRiBqkMm3jYdrvB2_suIlLpeJLU.roa (hash: thuo/2wKh04k5fV07y+BJSuu+CRS6TthbxD3yT9m+AM=)
2: snNZg9-yJ6JG35iHbsnRr5Hz13k.crl (hash: TWXdqA67zibVSpOkIgFs+MD43mhf4ZC+2bQ8qME3nP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:8b:af:92:eb:d5:dc:df:d2:d0:b3:40:ba:4a:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2735983dfb227a246df98876ec9d1af91f3d779
Validity
Not Before: Sep 7 03:00:50 2025 GMT
Not After : Sep 8 03:00:50 2025 GMT
Subject: CN=7521d1df847dcea3a8ad463b443fc3bf4c0212ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:0c:d4:5d:0c:e8:2b:d6:7e:4a:66:37:38:
3d:8e:b4:e8:c9:1d:47:98:7a:7f:5b:0c:b0:4a:21:
f5:8a:b7:15:91:cc:18:fa:a0:81:f0:0a:eb:68:75:
de:ee:bc:c3:ab:08:c8:1a:de:cd:98:a8:b9:85:28:
f6:3f:01:ed:7f:1e:dd:8e:f0:3e:bf:41:e5:ff:e5:
77:be:26:ab:3f:a5:e5:f1:12:ad:7c:f3:86:93:22:
07:da:6a:73:c3:d2:f1:07:5c:7f:c6:c6:56:fd:4e:
9f:6a:1a:ad:40:6f:f5:3b:28:3e:15:cd:40:61:c4:
9f:fd:c0:a5:65:7c:98:b5:65:7d:21:18:60:22:a3:
5b:e3:f9:71:c3:b3:82:3e:ba:f2:a8:3e:92:30:b4:
a3:84:d0:5b:3d:63:fd:44:8d:79:d9:6d:9f:f7:e4:
27:21:84:5f:f2:91:79:9b:7d:98:37:88:85:fd:c2:
25:7f:67:77:7d:d4:e7:88:6c:71:2b:4d:4e:0f:37:
9c:76:2b:5b:45:be:b8:c6:1e:82:5a:c5:d3:aa:82:
68:eb:ae:75:5b:2e:2b:53:2d:8e:0a:3d:09:da:43:
7a:d5:af:8c:d9:04:72:9c:81:7b:f5:67:28:5d:2f:
15:b6:6c:7b:f7:1a:9d:06:2e:d0:51:30:c5:07:dc:
17:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:21:D1:DF:84:7D:CE:A3:A8:AD:46:3B:44:3F:C3:BF:4C:02:12:BA
X509v3 Authority Key Identifier:
keyid:B2:73:59:83:DF:B2:27:A2:46:DF:98:87:6E:C9:D1:AF:91:F3:D7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snNZg9-yJ6JG35iHbsnRr5Hz13k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/475e19-9fbf-4d43-9285-ec5b325c6eb2/1/snNZg9-yJ6JG35iHbsnRr5Hz13k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2d:ce:ed:48:72:5e:e0:8f:a2:08:f6:95:6a:e2:00:12:25:
7d:66:41:88:7c:49:85:34:7a:96:e3:92:a3:a2:d6:58:fd:fa:
4e:8c:8f:a8:93:80:c1:49:83:df:93:de:17:17:c0:a6:76:2b:
a8:00:74:c2:c0:fa:28:19:69:20:04:3e:d4:56:b9:6e:b9:43:
33:37:95:2c:56:d3:c4:7b:0f:76:f8:61:76:12:49:67:7e:3b:
d6:fa:28:a1:fe:e2:e9:42:50:e5:6e:3a:01:a1:87:e7:18:cb:
5f:6f:74:1d:8b:8a:8e:78:66:d5:c5:02:f9:79:e7:bb:53:e2:
66:62:7e:50:9a:0b:68:40:0f:af:1e:d0:9e:b2:52:5f:d6:08:
98:7a:86:37:e0:f4:27:ca:e3:ad:cd:c5:c6:d6:28:21:7b:ab:
da:ff:42:25:8f:f2:b4:1d:d2:51:22:01:ca:d1:a4:c6:11:9f:
35:a9:13:36:be:f7:f6:ad:df:4d:29:06:80:ea:c5:f5:54:2b:
32:fb:be:b0:80:c5:95:5e:9a:54:b4:2d:3a:e6:cf:e6:0d:1c:
83:eb:a4:59:f5:19:9b:97:eb:25:65:38:20:c9:41:50:7f:b0:
0e:1f:4e:fb:ee:83:96:35:2a:82:da:7e:54:8b:79:6a:b9:68:
36:36:60:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:13 2025 by rpki-client