Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
File: SAqutTeS1SAWm84oDD3Yb4N27GM.mft (raw, json)
Hash identifier: er9CB3myLZUi8szmPAiWVQz3bE2AYvp87FGKnPvi050=
Subject key identifier: CA:E9:4A:3B:30:BC:21:F1:36:A8:EC:2A:B3:BB:C4:3D:71:61:ED:CA
Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
Certificate issuer: /CN=480aaeb53792d520169bce280c3dd86f8376ec63
Certificate serial: 01987BD2593C21A00B68223344F927DBF575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 20:00:39 +0000
Manifest this update: Tue 05 Aug 2025 20:00:39 +0000
Manifest next update: Wed 06 Aug 2025 20:00:39 +0000
Files and hashes: 1: Kc84xCLoopoVZjLsNJRLj2XaVE4.roa (hash: EYoVSxaior1IONB3NcpWKZcJ8AkylxdNSnDbeuoh7e8=)
2: SAqutTeS1SAWm84oDD3Yb4N27GM.crl (hash: 7kKcSP60VIx5vRq80vOyvvIlZ2txC5TKYEo+l9K8azw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:59:3c:21:a0:0b:68:22:33:44:f9:27:db:f5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63
Validity
Not Before: Aug 5 20:00:39 2025 GMT
Not After : Aug 6 20:00:39 2025 GMT
Subject: CN=cae94a3b30bc21f136a8ec2ab3bbc43d7161edca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:49:b6:f4:16:f2:f2:92:03:fe:8a:02:90:c6:
7b:bb:c9:8a:03:3e:39:73:ca:2e:86:6d:ff:ee:e9:
76:a9:cb:4b:94:45:e0:81:05:73:31:db:fd:4c:73:
e7:16:b9:c1:e5:3f:5e:7c:c4:e8:0c:e8:d8:11:4b:
dc:1d:36:ac:b6:ae:71:a9:94:28:f7:13:f8:96:30:
d2:c4:cc:f2:ab:f6:5f:17:cc:bd:cf:75:b2:b6:49:
dc:f0:1c:b4:0e:67:a9:39:d0:8e:d0:61:b5:26:9c:
80:46:10:51:a9:96:98:69:47:dd:f6:b8:e8:e3:af:
fb:8e:95:62:a1:57:96:c5:a6:37:f7:4e:42:46:28:
41:f3:54:09:b6:5b:2b:63:f5:6a:fc:4d:70:1c:fc:
21:d5:01:90:82:40:4c:9f:8c:38:c2:3a:04:c1:a3:
86:3a:68:9d:52:b5:a4:3b:bd:f9:ee:bb:e5:11:4f:
21:4d:8c:9f:80:d6:61:c1:67:81:19:c0:e1:1c:7d:
3d:d5:7a:e1:a0:5b:07:5b:10:88:50:34:df:dd:8e:
02:ce:ff:8d:37:3b:a6:11:0a:3c:93:f3:b0:5c:b3:
1f:5a:57:b1:71:87:cd:e9:06:47:c6:d6:da:eb:ff:
8d:98:e3:7f:9f:e3:7e:28:f1:ed:9a:44:c4:89:96:
a0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E9:4A:3B:30:BC:21:F1:36:A8:EC:2A:B3:BB:C4:3D:71:61:ED:CA
X509v3 Authority Key Identifier:
keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:67:46:63:67:0c:ec:ca:a7:76:be:3e:bb:43:48:37:4a:e8:
0c:2e:6d:a5:05:52:c1:4a:3e:82:0e:23:0a:72:c8:25:52:b6:
1a:68:18:45:b9:65:0f:19:c5:01:6f:f4:93:69:0a:8e:3e:d3:
4f:ac:5f:ea:57:1c:db:d9:4b:b4:46:19:d2:65:8c:34:53:b4:
b4:cd:0c:aa:26:bf:80:c4:f4:5c:f0:5b:42:13:ab:da:70:f3:
f4:dd:05:29:1b:38:ba:6f:00:52:ac:bf:d3:a0:07:01:b7:1c:
52:b5:67:11:ad:30:16:32:8c:a4:6a:2d:f0:9f:dc:23:d8:6b:
ce:88:eb:1d:90:e9:79:57:e1:1d:94:31:e5:90:b8:b5:c6:53:
9d:da:e1:76:fd:81:f1:33:01:ad:4f:8d:a6:5b:78:62:0f:27:
8e:ae:0f:d8:3a:de:95:57:17:a4:08:9e:51:36:43:b5:36:c5:
75:38:c6:5b:91:f2:94:92:4c:97:30:ca:d7:d8:5a:8f:4b:15:
3b:98:1e:df:57:51:5f:03:5f:9d:a6:d4:ea:44:35:9d:42:64:
e4:ad:7f:8b:34:ce:81:ab:00:aa:f7:01:29:be:cc:0e:29:33:
f8:17:96:03:08:34:f6:9e:5f:2e:3b:7c:51:a1:52:bf:d6:9a:
c4:eb:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:53:26 2025 by rpki-client