Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
File: SAqutTeS1SAWm84oDD3Yb4N27GM.mft (raw, json)
Hash identifier: E03F/N+O/Aab/RDKeoH1EVuJwvugpf9ZJRKMCfRmxQg=
Subject key identifier: 34:29:8E:17:6F:BC:EA:BF:4B:47:90:53:7C:A8:17:A6:C5:F5:C1:9D
Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
Certificate issuer: /CN=480aaeb53792d520169bce280c3dd86f8376ec63
Certificate serial: 01976D745CF84343FF0B687A81A387EBE623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 08:00:31 +0000
Manifest this update: Sat 14 Jun 2025 08:00:31 +0000
Manifest next update: Sun 15 Jun 2025 08:00:31 +0000
Files and hashes: 1: Kc84xCLoopoVZjLsNJRLj2XaVE4.roa (hash: EYoVSxaior1IONB3NcpWKZcJ8AkylxdNSnDbeuoh7e8=)
2: SAqutTeS1SAWm84oDD3Yb4N27GM.crl (hash: xC3tSGVhrih5gorViWLU9Nxr0YfrZWTXr56NFtJbwyE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:5c:f8:43:43:ff:0b:68:7a:81:a3:87:eb:e6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63
Validity
Not Before: Jun 14 08:00:31 2025 GMT
Not After : Jun 15 08:00:31 2025 GMT
Subject: CN=34298e176fbceabf4b4790537ca817a6c5f5c19d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:46:71:bd:d9:0b:74:db:d8:b1:4f:0e:1c:d5:
77:40:71:1f:ab:09:c7:ca:1c:97:bd:f9:8b:6f:78:
eb:08:bb:53:f7:8f:ae:19:d1:fa:ff:f5:8b:d8:aa:
03:d8:77:6b:13:43:0a:f3:a3:ed:e7:c4:ae:27:12:
ab:61:8b:b1:08:cc:e8:09:a4:0b:3a:50:f7:51:a5:
c0:fd:1b:4a:aa:f2:3a:cd:e6:c7:b7:f5:cb:6d:4f:
11:33:65:c5:4b:cf:df:64:bf:69:29:9b:55:06:3e:
49:65:57:5a:49:d5:97:b8:c0:e8:fd:10:75:27:94:
b2:f3:ed:30:d9:60:c8:7c:37:2e:36:da:80:3d:46:
ec:d8:6c:da:c9:49:8c:65:e5:22:4e:1b:77:36:53:
70:45:0e:67:bd:9b:9e:96:f8:6c:08:5d:d2:85:c8:
2b:c6:dd:e6:e8:9f:32:a9:44:54:6b:c8:d0:ad:99:
0e:b7:e5:a3:d2:d7:53:c1:78:b4:12:ca:a0:f9:90:
44:34:17:a5:50:ee:ae:5f:6a:7d:a4:ff:9f:f1:fc:
8b:6f:08:8d:b6:8a:33:0a:d0:0f:fa:58:93:eb:e1:
cd:bc:0e:3a:84:ee:c2:19:ca:fd:c9:3b:52:31:94:
08:d9:a0:70:ca:47:d4:1f:a2:55:90:6e:3f:3a:e7:
37:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:29:8E:17:6F:BC:EA:BF:4B:47:90:53:7C:A8:17:A6:C5:F5:C1:9D
X509v3 Authority Key Identifier:
keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:86:7d:b7:e4:73:01:fc:3e:48:b7:05:fd:1b:1e:dc:49:72:
4e:d5:1e:07:db:41:8d:73:69:5e:5a:94:64:6a:af:c5:49:25:
70:a4:0d:59:67:08:a2:62:f1:b6:66:d4:a0:9b:7f:76:9f:df:
18:e9:0b:5a:91:de:7f:46:13:08:e6:20:af:ef:7b:8b:72:0f:
e0:1e:96:45:ea:ac:94:16:2f:37:4a:61:94:f0:28:74:d0:66:
e3:30:01:0e:10:0d:e1:ad:d3:42:ee:8d:bb:73:7f:5e:08:b3:
fb:1a:28:21:55:7d:a4:01:4d:ef:95:36:8c:b9:13:3c:ae:9a:
bd:62:c4:72:10:4d:b3:3f:e7:e3:db:4f:1f:e1:9a:60:50:0d:
f6:3d:9a:b1:e2:a5:33:8a:52:01:bd:42:64:db:5d:fc:c7:8f:
c7:b0:ee:f4:62:25:56:86:a2:98:77:db:e1:f5:6e:ae:c4:c2:
1f:11:93:b5:ae:e2:20:9b:f3:a5:1e:00:bf:16:73:eb:3a:6e:
55:30:9c:82:7f:96:0b:02:41:ad:32:15:18:8b:80:dc:22:74:
5f:6b:ca:38:46:be:32:2b:01:53:cf:4b:cc:8c:14:ae:5d:19:
43:30:2c:14:af:bc:00:4c:32:d7:b6:18:cf:45:be:05:d0:f8:
b7:bb:e3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:53:51 2025 by rpki-client