Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: 3a5MavA1gTn8J3ol2Ipr51ph398UiO1K4+IWOOSR4BE=
Subject key identifier: 85:8B:01:6D:6C:62:C8:9D:D9:08:08:BF:F3:CB:F3:EF:2C:EE:FC:2A
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 019676431DE3B6E73042DE300ADA3D4A148F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 151C
Signing time: Sun 27 Apr 2025 08:00:32 +0000
Manifest this update: Sun 27 Apr 2025 08:00:32 +0000
Manifest next update: Mon 28 Apr 2025 08:00:32 +0000
Files and hashes: 1: 9PRjxeCqIjFBKjj9ZCsSUjWebm8.roa (hash: RUbumQikWEUJw86fkVBXkNxglUvMLn5BU1sBdU5SK10=)
2: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=)
3: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: kHisip0UN1yd3RDNuJ7QIiOE+qqgQVpI+yWhZ27ASl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:43:1d:e3:b6:e7:30:42:de:30:0a:da:3d:4a:14:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Apr 27 08:00:32 2025 GMT
Not After : Apr 28 08:00:32 2025 GMT
Subject: CN=858b016d6c62c89dd90808bff3cbf3ef2ceefc2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:8f:c9:9c:fd:5c:2b:f0:5f:cf:70:2f:20:
fe:a0:90:59:ff:a3:e6:c8:9e:8d:11:f9:bd:f6:52:
15:dc:d4:33:de:46:b5:ca:d4:44:1a:87:12:f8:d0:
27:cd:a8:f2:78:06:90:2f:3f:98:4c:1c:13:f0:5d:
d4:26:cb:85:fd:8a:57:8a:86:77:23:f0:d1:08:01:
8c:51:ae:f1:b6:8c:4c:65:58:8f:c8:1b:ca:a2:59:
2e:fd:09:40:3b:15:80:a7:50:93:f7:c9:1b:c0:6c:
a2:53:88:fd:b9:47:92:31:bc:34:c0:6b:36:dd:08:
8d:26:43:8f:c9:9b:d6:ca:f0:60:2c:a4:1b:f6:9a:
be:8b:b9:de:af:35:a8:36:55:25:d4:96:eb:68:e4:
a2:40:c2:50:bd:0b:1d:b6:ee:8b:02:df:06:14:89:
79:4e:73:3e:a7:6d:83:da:5e:58:ca:e6:4a:eb:00:
4b:95:eb:9b:fb:fb:74:60:73:67:04:27:a5:e3:05:
47:fd:28:90:1e:87:30:81:e2:58:ec:c7:31:b9:b9:
a5:1e:d7:87:5f:00:03:97:71:4d:9d:73:d4:72:85:
8a:70:f7:c8:0c:31:0a:c0:cc:15:a9:86:90:68:b7:
31:a5:15:90:99:9f:9b:8c:2b:f8:89:52:c7:51:30:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8B:01:6D:6C:62:C8:9D:D9:08:08:BF:F3:CB:F3:EF:2C:EE:FC:2A
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b7:77:80:86:98:11:0e:7b:4d:bf:45:d0:cb:a5:e9:16:c1:
ef:f7:a5:15:de:6f:85:1e:c1:11:f9:09:ba:48:57:2e:03:ea:
49:a4:fe:2b:f1:63:5a:4d:51:7c:8c:7e:2d:4e:47:16:e2:e2:
ab:69:73:9e:40:a9:01:f2:bf:58:03:47:46:6e:76:42:3e:af:
43:b1:6c:de:ea:93:78:58:e8:c0:9e:74:41:6f:99:af:23:a3:
a4:fc:d7:36:b6:8c:ee:aa:99:e5:85:08:30:2d:86:eb:80:61:
c4:a3:9b:12:5c:53:8f:05:86:c0:24:b3:e3:bf:34:6c:b2:14:
ee:a3:4c:bc:d7:70:d3:38:bc:2a:bd:b1:e5:e1:21:ed:7a:e5:
e3:2d:00:94:07:2f:f5:62:f4:5b:75:78:5b:ab:12:1d:9d:5e:
37:12:6f:0a:15:f0:a7:e8:91:59:a2:43:6d:12:0b:7b:a5:7a:
e4:72:31:96:65:aa:45:e5:93:d7:c4:e9:15:75:da:0e:08:a5:
66:4a:59:1e:06:b0:34:39:c6:8f:0b:2c:af:5b:a4:bb:61:c8:
44:ce:6d:7b:7e:01:c4:ce:38:43:0a:8e:ce:a9:17:17:ea:01:
1d:cb:34:ea:33:74:ec:03:f4:23:4d:a0:a8:8f:a6:a4:c8:02:
c4:ac:12:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2Qx3jtucwQt4wCto9ShSPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTRhNjAxY2EzNWM2YzgzNzZiODlhYWY0NDNiNjNlYTQz
OWNkYjgwHhcNMjUwNDI3MDgwMDMyWhcNMjUwNDI4MDgwMDMyWjAzMTEwLwYDVQQD
Eyg4NThiMDE2ZDZjNjJjODlkZDkwODA4YmZmM2NiZjNlZjJjZWVmYzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst6PyZz9XCvwX89wLyD+oJBZ/6Pm
yJ6NEfm99lIV3NQz3ka1ytREGocS+NAnzajyeAaQLz+YTBwT8F3UJsuF/YpXioZ3
I/DRCAGMUa7xtoxMZViPyBvKolku/QlAOxWAp1CT98kbwGyiU4j9uUeSMbw0wGs2
3QiNJkOPyZvWyvBgLKQb9pq+i7nerzWoNlUl1JbraOSiQMJQvQsdtu6LAt8GFIl5
TnM+p22D2l5YyuZK6wBLleub+/t0YHNnBCel4wVH/SiQHocwgeJY7McxubmlHteH
XwADl3FNnXPUcoWKcPfIDDEKwMwVqYaQaLcxpRWQmZ+bjCv4iVLHUTCtAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWLAW1sYsid2QgIv/PL8+8s7vwqMB8GA1UdIwQY
MBaAFLGkpgHKNcbIN2uJqvRDtj6kOc24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAt
M2E1NjI4Y2M4MWQ5LzEvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAtM2E1NjI4Y2M4MWQ5
LzEvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7d3gIaY
EQ57Tb9F0Mul6RbB7/elFd5vhR7BEfkJukhXLgPqSaT+K/FjWk1RfIx+LU5HFuLi
q2lznkCpAfK/WANHRm52Qj6vQ7Fs3uqTeFjowJ50QW+ZryOjpPzXNraM7qqZ5YUI
MC2G64BhxKObElxTjwWGwCSz4780bLIU7qNMvNdw0zi8Kr2x5eEh7Xrl4y0AlAcv
9WL0W3V4W6sSHZ1eNxJvChXwp+iRWaJDbRILe6V65HIxlmWqReWT18TpFXXaDgil
ZkpZHgawNDnGjwssr1uku2HIRM5te34BxM44QwqOzqkXF+oBHcs06jN07AP0I02g
qI+mpMgCxKwSow==
-----END CERTIFICATE-----
Generated at Sun Apr 27 14:58:13 2025 by rpki-client