Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
File: SAtOZTD1jbM45B1DTlwkjri0nrU.mft (raw, json)
Hash identifier: nxZkYdKAXWZkCxu1Am5LVVjlnMryatoM8yZ+JC1yFUg=
Subject key identifier: 66:A2:6A:67:1A:1A:FC:1E:10:3F:C8:DF:4B:13:79:D3:B2:E6:57:8D
Authority key identifier: 48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
Certificate issuer: /CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Certificate serial: 01987CE5435BD1701679F7717C1D2A7104EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
Manifest number: 0D79
Signing time: Wed 06 Aug 2025 01:00:56 +0000
Manifest this update: Wed 06 Aug 2025 01:00:56 +0000
Manifest next update: Thu 07 Aug 2025 01:00:56 +0000
Files and hashes: 1: 7uSiA8HXWA8UBPDhlbJf6OPrStI.roa (hash: FkBj3YOFMPVe1t2rUxjgfIEksgfiFnto6OU3DC0lCyA=)
2: SAtOZTD1jbM45B1DTlwkjri0nrU.crl (hash: l1pqyQrQ2dXMeLFKlioU0VHB2vpkUMz5F9b0jMcpb8M=)
3: USDR-3S3Ht8uHMQ4E3_c_aswiFo.roa (hash: V2Oob57cuCUs4jtdyHi3fUFQvcz8PYQW8jqX4krUZXU=)
4: gNRsmV0XFCKJkgH1T9VLPl0qkP8.roa (hash: 7DieLwMe7vSj5T5/A8Tf5cCcPLC+4LWTW8IbIDeyX70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:43:5b:d1:70:16:79:f7:71:7c:1d:2a:71:04:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Validity
Not Before: Aug 6 01:00:56 2025 GMT
Not After : Aug 7 01:00:56 2025 GMT
Subject: CN=66a26a671a1afc1e103fc8df4b1379d3b2e6578d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a8:8b:ba:c5:4d:ac:76:85:21:27:bc:6d:a1:
81:78:7d:41:5b:60:b4:c0:a4:cc:9c:24:56:5d:03:
18:37:73:a5:2e:08:ff:57:af:ee:b5:9e:62:3b:88:
fa:82:05:6b:52:f3:53:d7:8c:3e:a5:e0:88:f7:c2:
99:3a:61:e6:4d:66:c9:cf:32:7f:c3:44:6c:c1:60:
6a:21:c0:47:5f:32:a0:ab:6f:0d:a7:86:84:3a:44:
19:99:bc:51:33:01:18:ff:ed:0f:fa:91:e0:37:44:
71:56:97:ad:ff:22:f1:d9:5b:1b:38:7c:b9:6f:51:
c0:4f:ba:a9:28:22:76:88:c0:87:c7:0f:7c:25:22:
be:d2:57:50:68:d8:33:44:90:35:21:61:b3:09:1d:
96:ac:d4:90:c5:e7:f7:6a:56:ea:ae:d5:da:e1:c7:
8e:97:36:17:1d:b2:25:27:87:b1:ad:ce:eb:f0:c6:
24:d9:e5:c8:0b:fd:da:59:98:0e:b3:df:d1:40:68:
cc:9c:62:48:d6:b2:dd:21:e0:cd:76:8f:88:de:38:
77:88:d6:4f:60:f6:20:81:d6:11:0e:89:2e:7f:96:
bc:d3:94:8d:6e:d3:60:a1:2d:0e:c4:aa:21:cb:40:
54:69:65:c6:35:16:8b:1e:9c:97:ca:80:3b:2a:dd:
95:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A2:6A:67:1A:1A:FC:1E:10:3F:C8:DF:4B:13:79:D3:B2:E6:57:8D
X509v3 Authority Key Identifier:
keyid:48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:a7:ea:99:cb:bc:90:af:1d:46:59:3b:fa:98:82:42:d7:9e:
52:07:52:a0:79:8f:9b:4a:25:0d:2d:c3:05:e5:65:aa:34:13:
bb:11:df:5a:42:a5:6b:b0:f2:b8:e3:4c:f1:8c:94:4d:e8:82:
ca:04:43:a4:3a:1d:b6:81:0f:d2:31:d3:d5:fa:5f:fc:27:b6:
c6:57:c4:5c:8b:e3:bb:c9:8a:26:aa:f9:8b:24:a9:98:19:3c:
5e:4e:d6:d6:dc:19:f7:6a:dd:b1:04:8c:7d:48:4b:4a:e7:36:
83:99:63:03:df:12:0a:a2:a7:34:52:44:c0:10:69:1e:88:26:
16:96:f0:81:6e:f9:1e:49:4d:9f:cf:ad:75:bd:3c:3e:2f:8d:
7c:43:63:c5:c6:50:e4:3c:9b:e8:03:ad:30:b9:d9:82:8a:6a:
ca:d2:de:60:e0:3e:d9:19:bf:35:c6:8e:3c:e8:e3:bc:59:81:
87:e4:76:60:d3:5e:0f:f7:9b:fa:79:05:80:b5:be:b4:42:b2:
23:24:71:7b:b9:3b:51:32:b7:77:cd:e2:6a:66:20:44:5a:02:
ed:05:d0:75:f5:fa:43:93:f2:19:66:b2:12:ec:0a:61:ae:c8:
94:a0:1d:4e:9c:f3:0f:8e:72:0a:7b:81:27:4f:cf:56:9f:ba:
08:0d:c4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:50:04 2025 by rpki-client