Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
File: SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json)
Hash identifier: W/gnMh+tuq3gkiYYZg4MCDc0pC1+ScwxWqz38WLX4NY=
Subject key identifier: 97:4A:90:93:E8:72:2D:F2:2E:B1:EA:8E:E7:07:ED:E9:34:0D:40:54
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Certificate issuer: /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial: 019A4DE154F59C9CFE3D3B41F0665EED0FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
Manifest number: 150B
Signing time: Tue 04 Nov 2025 08:00:04 +0000
Manifest this update: Tue 04 Nov 2025 08:00:04 +0000
Manifest next update: Wed 05 Nov 2025 08:00:04 +0000
Files and hashes: 1: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: FW6gOu8xSliBm7Z+IVbrgEO5cjPf8+vExSAPkWXSb8I=)
2: V2Y4d-TLmNFHJ4lClsc4ERneXIs.roa (hash: PHo5kCdxREAK30hAhZYcMgPNVkKaDt5dMWxCCahvYBE=)
3: bazUCWmUnVsUPI48K1m2IjF_KYM.roa (hash: AyYWdQS+wgobcYMMdY+5yoadUDioqr0YVD4DAeG57TU=)
4: vG2nuL1igzgqWJUWOISEpJLLdWQ.roa (hash: eVGIn7eVFi1uovTluqkckWewyyXRYQcdEO/+J7uhkjQ=)
5: z4qyX-331qkRpNendrVE2vuUwMg.roa (hash: 1tgnSBh6zavqUvITN/dHmAA7avLexZgbuVDSxY+JNpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:54:f5:9c:9c:fe:3d:3b:41:f0:66:5e:ed:0f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Validity
Not Before: Nov 4 08:00:04 2025 GMT
Not After : Nov 5 08:00:04 2025 GMT
Subject: CN=974a9093e8722df22eb1ea8ee707ede9340d4054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:02:c9:9e:07:f0:69:40:97:66:41:23:71:
51:a5:02:e4:7c:9b:59:81:f3:03:16:31:14:0b:22:
58:1a:61:ec:af:c9:c3:2d:cb:a8:bb:76:7a:21:0c:
1f:a0:2e:a8:62:26:48:e2:2a:9e:e8:f0:2c:16:cd:
2a:6c:02:b6:ff:35:4c:6c:7c:be:35:be:8d:8f:52:
03:4b:a6:f0:08:4b:a4:65:76:ad:87:ac:12:38:1f:
4d:99:00:40:f3:bb:25:00:2a:59:47:fe:b1:cd:62:
a5:0a:e4:eb:f5:92:3d:d4:10:de:04:c9:77:af:b2:
3c:26:f2:76:06:04:24:bd:9a:be:a0:66:fc:07:ba:
03:88:34:c9:c1:e7:19:90:1e:b5:8e:10:30:fd:9f:
8c:a1:46:de:1f:03:a7:0f:e2:3a:17:82:ea:48:d3:
6f:f2:d5:21:6e:1d:22:66:b9:8a:ed:2f:f4:9f:b0:
fb:72:4a:fd:a7:47:a6:d6:4c:9a:8f:7a:cb:99:ec:
44:ed:4f:39:a5:84:63:f8:72:e2:87:59:83:f1:92:
ec:6c:f0:8f:0d:66:bb:59:c6:65:99:88:38:ad:fa:
bb:fe:0a:bf:13:21:42:e2:2c:b0:17:0c:2b:80:b7:
26:28:65:36:e7:d3:3a:fc:8a:f6:60:d8:ca:2c:13:
f9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4A:90:93:E8:72:2D:F2:2E:B1:EA:8E:E7:07:ED:E9:34:0D:40:54
X509v3 Authority Key Identifier:
keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:fa:54:58:c3:5c:c9:54:a1:80:e5:a0:7d:08:aa:a7:74:61:
42:80:88:1a:6a:59:ff:97:2f:32:25:bc:23:12:59:d0:5e:dc:
7d:9f:62:a9:ee:15:73:e4:5d:21:07:97:f7:3d:82:82:de:44:
03:22:ea:90:c1:d9:bd:6f:62:65:0b:ad:7e:9a:b2:f0:04:a6:
d4:64:4c:7d:bb:72:d6:67:1b:37:78:cf:9b:22:28:81:11:2f:
bd:a0:fc:ab:71:9f:48:3d:54:8a:8b:a8:b3:00:71:45:7a:66:
80:42:f6:27:9b:92:3f:42:0e:1e:fc:a5:dd:61:4a:bc:55:ca:
cd:eb:32:94:3c:06:8f:20:42:81:3f:62:3c:0d:9e:f0:af:8d:
d7:e4:e5:28:f4:00:15:92:82:3d:fd:d2:e7:3b:75:70:7c:a9:
05:05:ec:a9:f6:31:9f:1d:3d:75:20:f9:f8:26:96:cf:2c:67:
9a:92:e1:a3:37:36:d3:84:ca:42:d0:5c:54:90:09:1d:c0:66:
a9:0a:75:7e:9d:21:90:1d:33:15:8f:37:57:0f:68:bb:7e:8d:
9d:5a:d9:cc:50:c9:4d:88:9d:ff:5e:87:fc:7c:52:aa:e7:54:
89:49:73:0e:3b:42:36:e2:d7:af:7e:bc:99:a7:a6:01:fc:94:
03:2e:67:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:01 2025 by rpki-client