Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: G/RMvmQ4esMlyj4n/y5UH70semN8KTnGsBYR9akwfPM=
Subject key identifier: F6:8B:79:C2:57:25:25:AF:68:EF:E9:BB:F3:A2:2F:7A:F1:3D:48:96
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 019A4F2B7B7BF2C1EADC3CD534B53DDC1988
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 171A
Signing time: Tue 04 Nov 2025 14:00:40 +0000
Manifest this update: Tue 04 Nov 2025 14:00:40 +0000
Manifest next update: Wed 05 Nov 2025 14:00:40 +0000
Files and hashes: 1: 9PRjxeCqIjFBKjj9ZCsSUjWebm8.roa (hash: RUbumQikWEUJw86fkVBXkNxglUvMLn5BU1sBdU5SK10=)
2: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=)
3: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: V8KtASyAfD1y4b8+qNntnH8xFtPAJb1KUPoNVRgSNsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:7b:7b:f2:c1:ea:dc:3c:d5:34:b5:3d:dc:19:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Nov 4 14:00:40 2025 GMT
Not After : Nov 5 14:00:40 2025 GMT
Subject: CN=f68b79c2572525af68efe9bbf3a22f7af13d4896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8e:31:77:cd:99:64:df:b4:52:91:46:d9:7b:
a7:1f:b9:1c:e8:a9:b3:cc:21:81:8c:d1:58:f9:9b:
45:c7:70:8e:2b:e9:8b:d2:ca:6f:65:3d:74:81:10:
b4:39:3b:be:86:91:d2:37:df:82:07:ca:41:22:f0:
81:99:93:c0:b3:d3:50:f8:ee:92:1b:75:95:f0:2d:
bb:ce:12:98:cb:23:11:0f:b1:7b:27:0d:b1:17:e2:
0b:f7:af:38:90:dc:65:e1:59:61:b2:da:d5:e1:21:
c3:8d:de:4c:a9:29:6c:f7:ae:f5:23:84:de:b0:0b:
ca:1a:57:5e:fe:a8:25:7c:2d:c5:94:7f:aa:c1:8c:
69:c8:24:2e:21:e2:02:11:2d:95:07:ce:c9:af:20:
3d:7a:e6:67:13:d4:f8:e5:d5:9d:08:80:44:ab:88:
b0:54:c2:6e:3c:ac:48:2d:89:da:40:39:85:d8:07:
7f:c4:0b:03:f3:50:29:43:bc:5c:46:d2:1a:49:9c:
30:1f:50:1e:94:da:fa:19:a6:2c:74:56:d7:f2:d2:
51:ed:a1:f9:a0:41:ac:1a:c5:8e:d5:82:2f:74:85:
d7:20:a5:55:94:0c:d1:a5:e2:78:08:51:7b:43:79:
43:c9:2f:79:a8:7f:c8:9a:ef:8e:88:df:4e:39:b1:
19:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8B:79:C2:57:25:25:AF:68:EF:E9:BB:F3:A2:2F:7A:F1:3D:48:96
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5e:8b:36:f3:28:d4:dd:ba:36:65:ab:d9:5f:80:a9:dd:d7:
00:ff:9d:02:e8:9f:2c:ae:70:3e:9b:92:21:cc:00:6a:4b:f0:
b7:02:fb:10:e8:ea:57:5e:36:18:eb:21:86:8d:3c:db:d1:d3:
50:cc:f0:b0:e5:e6:34:b0:74:25:5e:69:57:3d:8f:3f:01:d2:
99:88:e8:1d:77:dc:5b:be:cf:58:18:4f:ff:33:70:c6:05:98:
3e:83:06:cf:be:5d:29:ec:9a:a4:c5:17:ea:08:33:e4:26:7e:
81:f9:36:66:11:85:ac:3b:24:c1:d3:28:a7:cb:d1:b2:9f:ad:
39:1f:43:f8:38:55:08:08:67:0a:0e:45:52:b6:78:da:fe:08:
25:bc:38:ac:b0:91:cd:aa:ee:88:3f:91:a7:21:ef:8c:01:a9:
5f:ed:cf:0b:bc:0e:ba:d8:6e:ef:42:b2:4e:d3:65:74:b1:68:
10:c0:d8:c0:13:59:92:21:3e:b2:2f:1d:49:c6:19:2b:1e:c3:
4a:86:9c:5d:d2:95:b8:1c:51:b5:c2:62:87:a0:dd:3a:3f:fc:
07:49:05:ea:95:18:41:a2:59:e1:b4:98:b0:0b:4c:b3:c2:10:
97:7a:b6:eb:54:50:4d:31:6d:2c:56:36:fb:4a:45:60:a6:5d:
77:7b:62:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:26:12 2025 by rpki-client