Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: OlcKxLx+FhobnelD7xvSA8aksqQU2m/H4Qhku37jzWM=
Subject key identifier: A1:C5:E7:6F:67:06:19:08:A7:53:F7:82:CC:CC:D5:0C:C2:BA:8C:0D
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 019A706E6D1DCC0B0D402718DAD0F81AE6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 1354
Signing time: Tue 11 Nov 2025 01:01:16 +0000
Manifest this update: Tue 11 Nov 2025 01:01:16 +0000
Manifest next update: Wed 12 Nov 2025 01:01:16 +0000
Files and hashes: 1: OaynJV0qbIIk7EsSxRIucNannDI.roa (hash: rLhfi7PeZU4mZH9NTsaCKUtzejxWWyeiOXooqE3dPpU=)
2: ZsJ1p0f-2YgNmBDafzu2GWckT34.roa (hash: kKQedLsISeBKSivLfM6tlDNDN9VJMt9n4EQssMfjNOQ=)
3: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: lOZDqGDdXmfS7mGnPHmlm0PDskt9XBY3zz7dK1F8GHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:6d:1d:cc:0b:0d:40:27:18:da:d0:f8:1a:e6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Nov 11 01:01:16 2025 GMT
Not After : Nov 12 01:01:16 2025 GMT
Subject: CN=a1c5e76f67061908a753f782ccccd50cc2ba8c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5a:2d:e6:b5:4f:bc:ce:aa:5e:60:4b:e0:96:
e4:9a:ac:07:32:b7:f8:fe:b0:93:12:a8:51:f2:1d:
d6:26:c2:4b:ba:08:8c:a8:76:0a:52:5e:b1:11:d5:
74:b1:4b:c1:11:7a:5b:1c:b2:79:43:28:44:7b:2e:
90:44:cc:7c:29:8f:88:66:14:54:88:d1:50:74:1a:
6a:43:b4:1a:9d:b9:c2:c2:54:be:57:4d:1b:51:17:
8e:27:3e:e5:07:1c:e2:b7:e8:50:99:95:da:db:07:
84:98:68:06:3e:c0:4a:ba:e5:99:07:cb:c5:37:85:
a9:55:0f:bf:00:ca:cd:c1:16:3f:83:ee:4c:4a:b9:
8e:31:1b:ed:89:ea:37:9c:69:08:54:9f:7c:fd:f0:
14:9b:be:96:7a:57:81:23:f5:17:47:1b:a5:71:7c:
14:0f:81:9c:e1:c7:96:c3:75:61:46:5d:a5:e9:c9:
e4:71:66:0d:e7:d2:23:d8:42:86:58:56:e8:c9:e4:
15:d4:f9:86:4d:90:ee:53:ec:9c:16:ae:d4:b5:3f:
e3:36:2e:fe:fe:15:38:15:3a:d1:df:a4:22:cb:4a:
a5:4f:df:5f:d4:af:b9:42:e0:28:bb:69:29:dc:ec:
47:42:53:8d:4b:1a:f2:9c:58:e3:8f:27:1f:f7:6c:
a0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C5:E7:6F:67:06:19:08:A7:53:F7:82:CC:CC:D5:0C:C2:BA:8C:0D
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:49:b1:9a:fb:97:bd:d9:ea:76:d8:60:bf:17:3b:68:9b:b0:
bb:e1:b0:2f:c2:fc:2d:45:7a:e7:b2:11:27:3a:90:e7:8e:75:
3d:a2:d3:6f:af:94:79:dc:0a:37:f6:f8:6b:9c:9f:f2:73:51:
af:ff:8c:32:ee:6e:af:76:c2:24:1c:91:0e:11:65:8a:15:0a:
fd:20:4f:a5:90:85:d5:b4:49:1c:e3:0e:bd:22:7e:15:c7:a0:
5c:7a:21:7a:f3:10:5b:41:8b:2f:7f:38:66:0b:f3:7b:e6:9b:
ea:f1:77:f0:ef:6d:d5:14:1f:37:5b:e6:06:f5:ce:86:b9:ae:
05:9a:0d:13:52:f1:07:ed:ba:63:f5:27:93:6f:bc:ed:21:17:
02:35:9d:27:4f:ad:91:21:47:5d:7b:76:a2:08:dd:5a:9b:02:
9a:16:82:51:bd:36:08:e3:83:66:9e:14:8f:72:4f:24:54:1b:
de:b1:27:ec:ec:f6:7f:28:77:bf:55:61:30:ad:d1:8e:a8:e9:
8d:1e:55:37:78:d1:11:e9:9f:8d:76:d0:23:7d:ef:46:aa:47:
07:dd:da:78:08:56:5c:73:a7:e2:de:df:7f:cf:24:90:1d:53:
06:0f:c1:ac:77:32:d9:44:f6:43:be:59:44:7f:40:47:d5:8a:
09:30:d9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:15 2025 by rpki-client