Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: Mz+dExXjFp/88QgRuBAjkuQYaAXBaG3+pev/gPegDqM=
Subject key identifier: B2:90:E4:27:C4:2F:CF:6E:2E:67:E7:E4:35:BD:0B:BB:3A:A0:38:C8
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 01976F62E5CF15C698CB8BA03E15D6EF0A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 159D
Signing time: Sat 14 Jun 2025 17:00:41 +0000
Manifest this update: Sat 14 Jun 2025 17:00:41 +0000
Manifest next update: Sun 15 Jun 2025 17:00:41 +0000
Files and hashes: 1: 9PRjxeCqIjFBKjj9ZCsSUjWebm8.roa (hash: RUbumQikWEUJw86fkVBXkNxglUvMLn5BU1sBdU5SK10=)
2: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=)
3: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: rzmr6oBYXo+HZv9pCowTm6IWKRkhGFLZX3mtHo0Ne5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:e5:cf:15:c6:98:cb:8b:a0:3e:15:d6:ef:0a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Jun 14 17:00:41 2025 GMT
Not After : Jun 15 17:00:41 2025 GMT
Subject: CN=b290e427c42fcf6e2e67e7e435bd0bbb3aa038c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:e0:4e:46:19:2a:54:62:70:07:cb:09:07:
90:58:c7:dc:96:5e:62:b5:95:7a:ad:25:b7:e0:26:
5f:b2:24:be:c1:b0:63:2a:d6:bd:7f:80:f8:28:9a:
eb:2d:a8:44:d3:c7:f3:58:b7:63:c4:20:88:82:9d:
93:25:1e:d6:b9:30:9e:9d:3b:21:6e:da:23:42:4f:
8f:8c:b8:95:c2:66:62:28:d8:f6:80:8c:ba:09:6c:
24:09:ef:93:c4:19:b0:2c:ae:de:30:16:7a:29:b9:
8c:29:7c:79:33:78:ed:09:b5:0e:c6:b4:2b:eb:b5:
96:fd:77:9e:11:8c:31:b0:f6:28:cc:db:6b:38:28:
d2:f1:6f:d2:92:d9:50:96:04:29:ba:0a:81:b3:c2:
d4:ed:48:1e:08:31:ab:c3:29:ab:5d:b8:d3:e3:06:
d1:fe:8f:24:d0:fa:51:dc:e0:41:ab:13:7d:9f:9e:
65:72:65:a7:6c:dc:25:a6:27:bb:f3:91:4b:1d:9c:
8a:59:7f:f0:01:d5:2d:ba:ad:af:e5:05:d2:af:0d:
d2:b8:7b:bd:d1:6b:39:e8:67:7f:aa:fa:2c:2e:4b:
b1:90:4d:06:ec:b0:fb:d7:d8:e5:4e:6d:05:71:2e:
ca:fb:f8:ad:33:82:24:ce:2a:25:be:76:02:a5:9f:
32:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:90:E4:27:C4:2F:CF:6E:2E:67:E7:E4:35:BD:0B:BB:3A:A0:38:C8
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d5:79:37:48:fb:c2:28:3e:61:20:2a:26:8d:0f:77:6e:ff:
e7:5f:74:9c:58:57:2a:ba:eb:51:82:fd:fc:36:a8:2d:2d:9c:
3f:69:74:f6:f0:57:ad:fd:6f:80:de:4b:0b:7f:61:f2:0b:34:
23:29:3b:db:eb:4e:47:ca:0d:52:eb:d4:bb:21:34:8f:a5:23:
88:b1:95:ac:95:4f:fb:bd:65:36:23:4d:5a:96:06:4e:e3:53:
e3:13:38:28:13:45:5f:91:e4:37:64:15:e7:1a:29:6b:ea:83:
05:55:50:2e:09:48:b2:7d:7a:29:0f:19:51:93:85:e5:ce:07:
e0:9d:1c:2e:0a:d4:3f:93:2c:01:b2:40:5e:19:41:74:d3:7a:
52:d8:0a:df:af:c4:cb:7a:1c:29:0a:19:b6:1d:b9:6d:d8:1f:
62:fa:09:91:3e:80:70:1e:b6:a4:83:1e:45:c3:af:01:f7:55:
2e:b3:cd:45:10:3e:0e:d2:ed:ee:ff:0a:ea:13:14:d3:57:cf:
a4:da:10:73:4d:c3:ac:86:f1:14:a3:32:3c:39:51:fc:c0:24:
ba:96:6a:7e:91:7a:f2:69:4b:ec:52:5f:87:a5:4c:19:52:8c:
db:67:b9:6f:25:eb:03:02:ce:ba:6d:6d:ee:fc:e9:3d:3c:18:
d4:bd:c6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:18:51 2025 by rpki-client