Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
File: SAqutTeS1SAWm84oDD3Yb4N27GM.mft (raw, json)
Hash identifier: Yanpq8+cIW73ge/bC/m5rh2ar8TLctQtIJhIE6/RuYU=
Subject key identifier: D4:C7:28:82:65:2E:D7:BF:28:CC:0F:0C:B6:0F:4C:65:7A:A7:E8:35
Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
Certificate issuer: /CN=480aaeb53792d520169bce280c3dd86f8376ec63
Certificate serial: 019A4D3CD7DF870AC321D1338DFD9B700DB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 05:00:24 +0000
Manifest this update: Tue 04 Nov 2025 05:00:24 +0000
Manifest next update: Wed 05 Nov 2025 05:00:24 +0000
Files and hashes: 1: Kc84xCLoopoVZjLsNJRLj2XaVE4.roa (hash: EYoVSxaior1IONB3NcpWKZcJ8AkylxdNSnDbeuoh7e8=)
2: SAqutTeS1SAWm84oDD3Yb4N27GM.crl (hash: 7QzJgUfTjN79823WoQw3Zcd3E4DatI/LeuMgw77AO7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d7:df:87:0a:c3:21:d1:33:8d:fd:9b:70:0d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63
Validity
Not Before: Nov 4 05:00:24 2025 GMT
Not After : Nov 5 05:00:24 2025 GMT
Subject: CN=d4c72882652ed7bf28cc0f0cb60f4c657aa7e835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:23:e8:51:f9:79:fa:3b:bd:0d:b7:96:bb:
61:bd:29:73:8b:61:53:9a:89:14:df:21:7b:0d:bb:
97:3a:c3:6c:dd:33:42:5f:1e:f6:de:6e:4a:a3:f5:
74:eb:0b:53:f8:8f:61:6a:19:38:b9:c2:bc:c5:40:
bc:ac:ad:ea:a6:07:0b:67:3e:69:f6:e8:35:f5:71:
1d:16:45:5e:68:dd:4c:3d:67:6e:16:77:4f:a2:58:
b6:b0:c0:03:b7:d1:24:ab:3e:a3:61:57:21:8d:46:
10:65:e9:35:cb:33:51:2d:e9:90:bd:e9:0a:15:4d:
0c:ef:84:85:bd:53:bd:e7:0b:b4:d8:70:bb:79:8f:
89:5e:82:0b:0e:5b:0e:a0:ba:de:86:e2:ab:e0:07:
b0:64:77:da:31:15:93:ce:26:11:94:9e:a8:73:2b:
3e:fa:b0:b5:a9:6f:6c:63:71:58:08:6b:3f:45:15:
2c:a6:d2:4f:c3:6e:fe:38:ec:f4:c0:65:f2:a6:b6:
40:1c:12:ab:6f:66:47:5f:db:c3:69:45:0d:ad:7b:
c9:2f:9d:46:2d:e0:c1:82:97:36:d0:0a:8a:b2:26:
09:ac:15:a4:c7:24:5b:81:90:5e:bf:dc:e0:77:d7:
96:2f:ba:ff:b4:ac:e6:87:9c:c0:44:11:a9:1a:13:
d8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C7:28:82:65:2E:D7:BF:28:CC:0F:0C:B6:0F:4C:65:7A:A7:E8:35
X509v3 Authority Key Identifier:
keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:6d:ef:33:cf:64:e9:15:57:b8:65:d0:7c:91:58:d5:fa:87:
ef:55:1b:5e:38:ba:2d:05:d3:9b:a2:cb:2b:a7:76:91:b8:21:
4a:9c:27:bd:46:68:e6:3a:f0:41:51:fb:9d:93:7e:7b:5c:fe:
9c:95:a6:fc:e3:2e:d1:55:67:40:8c:f6:36:90:ac:53:b2:f8:
38:01:1e:73:e6:89:ae:3a:ea:f6:e5:98:e9:0f:68:e1:87:98:
90:bf:02:18:06:a3:8d:db:f2:d7:cf:d9:0b:57:70:06:20:25:
c7:b0:ec:b5:b3:66:1d:25:f0:ce:33:d1:91:ab:f1:48:8c:ab:
fd:61:9c:25:46:73:09:33:20:5b:29:88:97:f9:d1:20:37:a5:
2a:fd:32:e0:53:87:07:3d:f6:b2:d1:09:a5:54:21:96:ef:2b:
7b:ca:f6:81:aa:f1:7e:3c:d0:e1:21:01:77:f2:29:c3:81:46:
1d:d4:9f:65:63:f4:db:2a:4e:66:33:46:a4:65:6c:ee:69:34:
db:b6:cd:be:63:3c:48:14:29:fe:ff:de:ab:63:ff:1f:4c:22:
91:9c:e9:8c:ec:cf:8c:b7:35:44:bf:c3:b7:2f:2c:0f:4a:6e:
cc:48:8d:87:c7:70:43:8e:94:22:2c:05:c3:10:03:45:03:8b:
aa:b8:6a:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPNffhwrDIdEzjf2bcA21MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MGFhZWI1Mzc5MmQ1MjAxNjliY2UyODBjM2RkODZmODM3
NmVjNjMwHhcNMjUxMTA0MDUwMDI0WhcNMjUxMTA1MDUwMDI0WjAzMTEwLwYDVQQD
EyhkNGM3Mjg4MjY1MmVkN2JmMjhjYzBmMGNiNjBmNGM2NTdhYTdlODM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDkj6FH5efo7vQ23lrthvSlzi2FT
mokU3yF7DbuXOsNs3TNCXx723m5Ko/V06wtT+I9hahk4ucK8xUC8rK3qpgcLZz5p
9ug19XEdFkVeaN1MPWduFndPoli2sMADt9Ekqz6jYVchjUYQZek1yzNRLemQvekK
FU0M74SFvVO95wu02HC7eY+JXoILDlsOoLrehuKr4AewZHfaMRWTziYRlJ6ocys+
+rC1qW9sY3FYCGs/RRUsptJPw27+OOz0wGXyprZAHBKrb2ZHX9vDaUUNrXvJL51G
LeDBgpc20AqKsiYJrBWkxyRbgZBev9zgd9eWL7r/tKzmh5zARBGpGhPYCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTHKIJlLte/KMwPDLYPTGV6p+g1MB8GA1UdIwQY
MBaAFEgKrrU3ktUgFpvOKAw92G+DduxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zZDU3OWYtODE1YS00NDZlLThlZDkt
ZDE2NjkxYWQ2OWZhLzEvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8zZDU3OWYtODE1YS00NDZlLThlZDktZDE2NjkxYWQ2OWZh
LzEvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI23vM89k
6RVXuGXQfJFY1fqH71UbXji6LQXTm6LLK6d2kbghSpwnvUZo5jrwQVH7nZN+e1z+
nJWm/OMu0VVnQIz2NpCsU7L4OAEec+aJrjrq9uWY6Q9o4YeYkL8CGAajjdvy18/Z
C1dwBiAlx7DstbNmHSXwzjPRkavxSIyr/WGcJUZzCTMgWymIl/nRIDelKv0y4FOH
Bz32stEJpVQhlu8re8r2garxfjzQ4SEBd/Ipw4FGHdSfZWP02ypOZjNGpGVs7mk0
27bNvmM8SBQp/v/eq2P/H0wikZzpjOzPjLc1RL/Dty8sD0puzEiNh8dwQ46UIiwF
wxADRQOLqrhqFQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:17 2025 by rpki-client