Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: EdBnjYCgYQxnAAogg4hDrwkw9sJ7qfmlhwErd8T4+T8=
Subject key identifier: 56:67:D6:52:AA:E6:4F:F5:08:1C:2A:5F:25:38:B4:51:51:8D:9F:8B
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 01976D7436D0EDF88DAE953D00EFCA0B597D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 159C
Signing time: Sat 14 Jun 2025 08:00:22 +0000
Manifest this update: Sat 14 Jun 2025 08:00:22 +0000
Manifest next update: Sun 15 Jun 2025 08:00:22 +0000
Files and hashes: 1: 9PRjxeCqIjFBKjj9ZCsSUjWebm8.roa (hash: RUbumQikWEUJw86fkVBXkNxglUvMLn5BU1sBdU5SK10=)
2: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=)
3: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: V9KV3YhlAVo/jZ7sfVhpTGEnCUHoiMeoYGSqt/Bpiok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:36:d0:ed:f8:8d:ae:95:3d:00:ef:ca:0b:59:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Jun 14 08:00:22 2025 GMT
Not After : Jun 15 08:00:22 2025 GMT
Subject: CN=5667d652aae64ff5081c2a5f2538b451518d9f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:50:87:3f:ce:63:9f:f7:d3:a3:04:f9:f0:
da:ab:01:60:e7:72:23:92:65:fa:21:6f:e3:84:75:
8d:d5:23:46:f2:4a:eb:3c:46:e1:4e:a0:84:91:f6:
5a:31:7b:a5:2a:4e:60:01:0e:f6:7d:bf:ab:8a:72:
40:0d:d2:61:1a:25:04:62:d7:a1:07:03:83:54:e5:
78:4c:0a:c4:6e:c2:5e:c4:1c:2e:bc:f4:aa:7c:5a:
74:1d:e0:8c:4e:54:3f:a9:0b:aa:e5:fb:e8:94:68:
76:ab:54:16:9f:94:11:65:81:6c:71:af:69:30:07:
84:27:89:7f:ba:e5:7d:fe:8e:24:6c:46:ba:3d:5c:
59:74:34:b2:b8:45:cb:aa:10:74:b2:fc:44:92:37:
b4:bf:81:3c:4c:30:ae:29:28:5d:68:5b:38:64:c5:
2d:be:87:75:35:57:63:99:0c:ad:d2:16:61:6c:92:
e0:19:70:2d:50:e0:f1:92:5d:cf:28:0e:50:07:d3:
75:60:1d:79:8c:58:d5:c0:9c:58:91:9d:cf:96:b2:
7f:f1:0b:bb:0c:54:0c:50:89:0c:21:bb:7c:1a:c8:
57:e2:db:1b:21:ec:4f:53:a8:c2:2d:c8:43:13:cf:
6d:ca:aa:6d:15:f9:bc:0f:8e:6b:78:80:72:f4:43:
b1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:67:D6:52:AA:E6:4F:F5:08:1C:2A:5F:25:38:B4:51:51:8D:9F:8B
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2f:5d:3e:45:02:00:54:dc:0b:3e:91:04:e7:8f:41:a3:bd:
e0:92:11:64:9c:7a:fc:54:0f:92:0e:15:8f:42:fa:00:6c:9f:
20:b1:ae:b4:c7:35:85:04:c6:69:df:fa:b9:a8:47:fd:93:da:
57:8e:f0:6b:e5:dd:c8:5e:d3:a4:d5:30:3c:32:de:b9:0d:25:
1c:34:71:2f:2e:87:10:89:ca:ee:38:b6:44:b0:05:e5:64:df:
5b:5f:19:2d:45:fc:26:17:34:80:c8:9e:8e:4d:97:06:ed:5c:
ab:c8:05:b6:10:e9:46:ab:13:a5:0c:de:77:ea:a7:3e:3e:fe:
0e:88:6b:75:3a:1d:b1:1a:66:36:f2:ed:1b:99:7b:0d:13:7c:
bc:5f:15:d4:c0:83:e3:2c:fe:6a:f9:78:91:ee:93:11:a3:85:
b5:9f:1d:d0:5d:df:d5:b4:8c:3c:fc:94:e5:eb:ae:3f:85:7d:
b2:8f:b7:25:fe:1d:c2:29:e0:1b:92:87:0d:1f:a9:c5:86:e6:
18:2a:53:74:d9:ca:74:cd:3c:d8:20:88:bc:3a:c9:a0:87:05:
50:74:7b:d3:10:08:41:cb:17:9d:b6:ba:44:ae:ef:ad:0a:6d:
a9:6e:e5:8e:fa:0e:3e:fa:09:19:76:03:40:5b:0c:20:44:cb:
bf:f6:6b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:21:59 2025 by rpki-client