Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: qqFbIknbWx5wwvEMeQa5qEu/bSu+t/LPC/Jr/2pe1EI=
Subject key identifier: C6:02:94:9B:9C:1E:BC:6E:71:48:2B:C6:6F:08:A7:DE:C9:4B:C0:99
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 0198838C764438E5E85CFE3C958E4ABE3AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 162C
Signing time: Thu 07 Aug 2025 08:01:17 +0000
Manifest this update: Thu 07 Aug 2025 08:01:17 +0000
Manifest next update: Fri 08 Aug 2025 08:01:17 +0000
Files and hashes: 1: 9PRjxeCqIjFBKjj9ZCsSUjWebm8.roa (hash: RUbumQikWEUJw86fkVBXkNxglUvMLn5BU1sBdU5SK10=)
2: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=)
3: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: KQyCFa5ojt7F/4TmoFvIoCz4UmS6WYy/SjZzCoT63N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:76:44:38:e5:e8:5c:fe:3c:95:8e:4a:be:3a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Aug 7 08:01:17 2025 GMT
Not After : Aug 8 08:01:17 2025 GMT
Subject: CN=c602949b9c1ebc6e71482bc66f08a7dec94bc099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6f:08:a2:d1:c6:2a:53:f3:66:9d:af:f2:0f:
9b:5c:c0:cb:bd:b3:56:d0:6a:f6:c8:07:a5:a1:fc:
6d:9f:e2:bf:2d:e6:50:48:f9:a4:5b:ea:22:ad:5a:
94:f5:70:a3:94:88:d7:db:38:46:d2:79:dd:fc:c1:
ec:ca:60:2d:5a:71:c7:40:03:19:a1:52:59:7c:dc:
17:8c:2c:31:82:3e:cf:d9:c3:d0:42:2a:25:01:2b:
04:c2:9d:d9:db:90:7b:13:3e:d9:10:5e:28:02:2f:
b1:e7:6b:4f:e0:20:3f:6f:51:95:ab:c3:f9:9d:24:
7e:2c:3c:99:f2:4c:c3:58:3d:ad:fc:2e:13:bd:5e:
55:51:a9:22:eb:66:b3:b7:f7:c0:6c:d2:63:cc:72:
fc:40:2b:21:90:c0:9b:48:b9:dc:70:c6:1a:3b:21:
6e:0c:a2:29:f5:b5:d4:b1:cc:3f:60:f2:54:78:cc:
07:a3:68:5b:12:b2:53:52:44:65:06:ec:de:47:15:
83:43:90:72:2e:36:f7:dd:81:98:5a:7c:c8:a6:6e:
92:c5:20:a4:0d:08:71:0a:4f:45:4a:26:74:8c:8d:
e4:00:d5:d8:10:2b:8d:25:33:af:58:8a:30:4a:91:
85:65:a0:61:6e:7e:5c:88:42:33:0d:fa:18:cd:66:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:02:94:9B:9C:1E:BC:6E:71:48:2B:C6:6F:08:A7:DE:C9:4B:C0:99
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5b:e1:40:8d:ee:4d:7e:c4:82:77:10:d2:18:88:09:4c:46:
06:f0:a7:87:5a:5a:31:11:b4:bc:db:52:1c:43:5c:7a:42:52:
65:1e:10:d7:d1:27:50:8e:90:b8:db:82:5c:36:18:36:ee:ac:
7e:af:d7:c3:13:16:bd:78:72:8b:7f:a9:1a:a0:8a:e0:d3:f5:
ac:43:99:37:45:7b:db:66:30:38:4a:b5:60:6c:61:e5:4c:5f:
9c:09:fa:44:a5:b3:15:33:58:7d:ca:a3:58:05:dd:4b:d5:96:
c3:79:8a:85:31:39:a4:19:cb:51:c7:5e:1e:68:6d:5e:3c:f4:
c2:61:e8:57:af:72:5e:c6:fd:35:5a:49:d1:44:f8:e6:87:44:
b3:32:2e:6d:41:56:2e:36:c9:31:3b:54:fb:dc:fa:e9:46:f1:
d8:55:fe:b2:b8:4b:2d:12:b2:bc:f5:bf:d6:a7:86:1a:59:bb:
99:bd:40:aa:8b:a9:0a:eb:1b:04:54:f7:ca:e3:f4:46:78:76:
eb:8c:a6:f2:53:44:38:80:81:92:54:9d:77:63:3e:09:35:18:
74:df:88:53:fd:04:0b:83:3d:c3:9b:70:84:c2:10:37:80:37:
95:fb:f9:bf:ee:3f:ee:e4:96:a4:61:7e:b6:9f:ab:18:8a:b6:
89:83:8e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:56:47 2025 by rpki-client