Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: IHhHysG6AXf6bf6ZV/rM8RBjKz7yRlFj9iOnPe8GTps=
Subject key identifier: F8:36:E0:F0:DC:33:73:C1:98:91:E4:3B:DE:25:87:E8:8F:F6:3E:63
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 019935A5AA5109998269919F587E73AF1C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 12B1
Signing time: Wed 10 Sep 2025 22:01:13 +0000
Manifest this update: Wed 10 Sep 2025 22:01:13 +0000
Manifest next update: Thu 11 Sep 2025 22:01:13 +0000
Files and hashes: 1: OaynJV0qbIIk7EsSxRIucNannDI.roa (hash: rLhfi7PeZU4mZH9NTsaCKUtzejxWWyeiOXooqE3dPpU=)
2: ZsJ1p0f-2YgNmBDafzu2GWckT34.roa (hash: kKQedLsISeBKSivLfM6tlDNDN9VJMt9n4EQssMfjNOQ=)
3: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: x6OX0p2CPjC4n362kyP3H/sVB1z8h7WXA06DVWWtkug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:aa:51:09:99:82:69:91:9f:58:7e:73:af:1c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Sep 10 22:01:13 2025 GMT
Not After : Sep 11 22:01:13 2025 GMT
Subject: CN=f836e0f0dc3373c19891e43bde2587e88ff63e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:de:96:d5:77:41:bd:47:a3:9b:4e:91:e1:
e6:14:77:24:93:e7:54:e6:26:8c:c5:9d:8f:1f:15:
ee:7f:b2:c3:dc:9f:f9:cd:83:e4:cb:67:3c:1a:e9:
59:f1:61:3b:0e:39:24:ec:33:2c:7d:cc:85:5a:35:
2a:a3:87:73:d9:2b:4b:f4:f6:48:00:0f:15:c0:c0:
ef:8e:b2:a0:07:10:c6:38:58:6a:59:22:38:ec:7e:
57:39:22:bc:d8:4d:e7:be:4d:af:45:5b:30:77:5a:
0f:c9:10:c4:64:9b:58:1f:f1:c5:01:bf:23:e3:cc:
6b:a8:ca:11:29:4d:25:46:95:69:f9:9a:b9:bf:51:
8e:bf:31:f0:cc:87:4d:04:af:2d:d6:cd:d2:0c:90:
d1:50:92:31:6c:9c:78:87:e8:5d:34:57:29:27:b9:
88:94:61:60:91:5e:88:77:cc:c0:1c:e5:26:0d:0b:
47:8f:c6:a4:97:9b:af:3f:c4:72:44:89:43:70:2e:
b5:c4:13:a7:96:d3:9f:07:38:eb:2c:09:29:be:f4:
50:55:cc:f0:a2:8d:ca:a4:0a:e4:4c:53:8b:06:35:
b1:ed:78:85:0a:c5:12:30:2d:57:f0:ee:53:8a:d0:
1c:a8:0e:89:c3:4c:84:cf:03:3f:09:e3:f0:7c:21:
b8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:36:E0:F0:DC:33:73:C1:98:91:E4:3B:DE:25:87:E8:8F:F6:3E:63
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e4:ae:0d:0d:18:ba:d5:4f:89:17:c0:72:4c:64:10:00:92:
e0:40:84:83:f6:92:7a:19:b5:e8:12:5b:89:ad:46:18:59:ad:
e1:ee:52:db:0c:45:94:da:b3:15:0e:1d:8d:d3:29:71:0c:79:
01:7c:25:b0:0b:46:db:23:2b:44:62:f2:85:4a:b7:63:87:40:
0d:09:7d:bf:80:da:01:13:aa:86:94:98:03:98:6e:fc:af:9d:
35:6f:fc:8c:75:12:cc:21:0d:a2:5c:8e:39:bc:2d:7f:7a:27:
5c:22:69:d9:e5:05:e7:e5:8c:93:75:f7:5f:f9:f5:de:6c:0e:
54:29:ff:b2:0e:20:5c:3c:7b:d4:8d:d4:73:4e:0f:6b:13:29:
34:a8:8d:2a:dc:ae:c5:a1:8d:01:79:f3:b1:34:04:25:07:3f:
e5:f2:48:37:d1:24:de:91:cc:34:e1:91:f2:d4:72:fb:bb:7a:
29:48:53:58:57:b8:19:39:8c:08:0a:fe:fc:bb:10:6e:f5:41:
f3:c8:fc:2e:f3:4a:cd:da:2a:26:4c:98:d4:40:ab:a5:a0:6f:
57:2f:24:99:f9:d3:7a:09:0e:82:2d:57:dc:9d:2d:28:c3:08:
cd:b6:2d:a6:1a:b3:7a:54:6e:68:93:73:4b:4f:86:cb:08:42:
56:94:19:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:34:21 2025 by rpki-client