Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
File: snSbyc0s-N_88v_teIT7wTyz5F0.mft (raw, json)
Hash identifier: 2ZWwPr9jBMoV/dI2R6XIDw7RAzwf3kbR5ciSqCXrOmA=
Subject key identifier: D3:D9:D8:4C:AA:BE:D3:AA:C7:4B:4C:10:01:14:2A:6F:81:C6:7C:FF
Authority key identifier: B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
Certificate issuer: /CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Certificate serial: 01974742F02AA44328361C4A211FB68ED9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
Manifest number: 11B1
Signing time: Fri 06 Jun 2025 22:00:58 +0000
Manifest this update: Fri 06 Jun 2025 22:00:58 +0000
Manifest next update: Sat 07 Jun 2025 22:00:58 +0000
Files and hashes: 1: OaynJV0qbIIk7EsSxRIucNannDI.roa (hash: rLhfi7PeZU4mZH9NTsaCKUtzejxWWyeiOXooqE3dPpU=)
2: ZsJ1p0f-2YgNmBDafzu2GWckT34.roa (hash: kKQedLsISeBKSivLfM6tlDNDN9VJMt9n4EQssMfjNOQ=)
3: snSbyc0s-N_88v_teIT7wTyz5F0.crl (hash: eOpO274g5gnXKrhOAeC9vnzicHrL2/QgndoSbrRpY4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:f0:2a:a4:43:28:36:1c:4a:21:1f:b6:8e:d9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2749bc9cd2cf8dffcf2ffed7884fbc13cb3e45d
Validity
Not Before: Jun 6 22:00:58 2025 GMT
Not After : Jun 7 22:00:58 2025 GMT
Subject: CN=d3d9d84caabed3aac74b4c1001142a6f81c67cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:dd:89:da:c8:2f:f6:d6:00:74:2b:ed:fa:
9a:31:18:d7:26:a6:6e:b9:b0:f8:fc:a0:93:e4:7e:
5c:07:c9:04:bd:89:cb:d0:8f:b1:2e:62:34:0d:6c:
6c:49:f2:f9:88:62:a5:92:6d:cb:e9:22:cf:06:62:
14:10:75:f1:25:a1:e2:44:83:c0:ed:09:03:7e:40:
c3:f6:01:18:3f:21:3e:a7:48:20:8c:3d:bd:4f:5f:
04:17:c3:3d:96:69:01:92:c8:5d:00:f6:59:1c:36:
46:a1:18:ed:ff:83:7e:a7:24:46:f6:23:fd:46:31:
20:e9:b0:d1:5d:12:dc:29:99:a9:ed:3a:6b:d7:7c:
90:4b:49:9d:13:49:f5:26:82:3a:f7:44:45:09:a5:
47:2c:d7:46:5a:82:1b:9f:ba:49:1b:1c:5d:a2:00:
56:45:b2:b5:0c:32:a6:19:5b:8e:d2:c9:04:4e:d4:
c6:c5:9f:10:8d:5e:4e:90:3c:b0:d4:ee:f2:85:e4:
cd:84:77:af:17:e4:57:cd:1c:40:3f:dc:07:e9:45:
3e:69:73:a5:bb:19:40:e6:44:73:3b:1f:d2:bd:6a:
59:cf:6b:61:df:29:ab:87:81:4e:df:88:18:b4:ab:
c9:11:44:97:48:09:26:56:3e:df:05:71:73:98:6f:
a1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D9:D8:4C:AA:BE:D3:AA:C7:4B:4C:10:01:14:2A:6F:81:C6:7C:FF
X509v3 Authority Key Identifier:
keyid:B2:74:9B:C9:CD:2C:F8:DF:FC:F2:FF:ED:78:84:FB:C1:3C:B3:E4:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snSbyc0s-N_88v_teIT7wTyz5F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac8fdc-9d55-45db-a243-f16697d72a71/1/snSbyc0s-N_88v_teIT7wTyz5F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:12:96:77:6c:44:5a:e2:5f:8b:60:7a:7c:77:80:8c:58:93:
9d:92:f7:6c:c1:9c:8a:2f:70:12:c4:62:1e:68:cb:b0:89:2f:
c4:4b:3a:66:10:fb:c3:99:c6:9f:1f:f0:80:fe:26:43:3c:16:
40:5d:1e:14:16:53:6c:07:14:71:61:16:ca:23:7f:a8:ab:41:
98:76:12:d2:e9:35:3b:93:2b:44:03:86:cf:3d:b4:bc:5d:7c:
59:d9:0e:9c:37:6a:45:0f:8c:b5:06:4b:56:b4:35:56:3f:4a:
7e:36:46:ec:0b:b5:05:9b:05:60:21:3b:92:96:28:5a:d4:d4:
0f:ce:ef:68:88:a9:dd:77:a0:25:20:3b:15:56:34:87:c2:6c:
3f:3e:73:1c:03:28:7e:e4:98:0e:37:6e:0c:f5:63:dc:7a:a9:
4a:46:e9:51:25:0e:b9:33:7d:67:28:69:20:14:a1:12:73:ca:
10:6f:cf:b0:1a:8c:7e:bf:35:bf:20:77:02:2a:00:4e:5a:b5:
71:2d:94:ae:61:4b:8b:2e:0e:aa:6f:77:6a:c9:0f:bb:0d:9f:
24:61:26:05:2a:c7:5b:70:6b:a5:df:3a:09:04:4d:e6:c9:25:
e2:5d:ef:65:41:47:b8:b7:82:7f:96:a6:09:5b:64:cf:68:ed:
e1:37:24:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:12:51 2025 by rpki-client