Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: N4jnEqvezeaE2vOV1Azbzv1APsXnRQyycxgK+W9JFpY=
Subject key identifier: 3C:33:F5:06:E5:8A:4B:27:E4:0D:DB:4A:DF:2F:E4:4B:1E:78:65:C8
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 0198345DF226EFC2927A58EF8B6944FCDAE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 1603
Signing time: Tue 22 Jul 2025 23:00:28 +0000
Manifest this update: Tue 22 Jul 2025 23:00:28 +0000
Manifest next update: Wed 23 Jul 2025 23:00:28 +0000
Files and hashes: 1: 9PRjxeCqIjFBKjj9ZCsSUjWebm8.roa (hash: RUbumQikWEUJw86fkVBXkNxglUvMLn5BU1sBdU5SK10=)
2: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=)
3: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: qccEdiEC97MIKjw2CAFROZvKx5Q3e2SiqWGWUTS/Baw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:5d:f2:26:ef:c2:92:7a:58:ef:8b:69:44:fc:da:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Jul 22 23:00:28 2025 GMT
Not After : Jul 23 23:00:28 2025 GMT
Subject: CN=3c33f506e58a4b27e40ddb4adf2fe44b1e7865c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4f:82:0f:67:95:3c:ca:82:43:da:a5:f6:02:
6f:f3:a5:6d:dc:8a:3b:7a:0c:cc:c8:5b:4e:ad:b9:
cb:4c:db:dc:4f:26:43:8a:23:a5:5e:80:91:0a:5e:
1b:00:13:ac:61:43:a8:61:07:fe:de:48:34:93:eb:
db:ac:41:e1:ac:77:58:9f:8d:cc:25:ef:ab:44:1b:
85:c7:be:21:fe:b0:e8:1a:a7:13:c6:8a:40:7e:25:
34:80:61:a7:08:27:aa:62:1b:8b:bb:a5:78:92:b1:
47:8b:57:64:b9:54:48:77:45:42:b1:8e:47:40:6f:
79:2b:65:64:8d:e0:17:2b:86:86:4b:00:0c:10:52:
a2:85:da:dc:3e:d6:1f:f8:2f:5f:07:94:9d:0a:80:
e1:64:7d:43:d8:5d:4c:7d:46:03:79:da:7e:17:ca:
4c:5a:17:3b:8d:5a:ce:06:c5:a0:f9:4a:1e:b7:11:
eb:69:44:5a:e4:51:61:5a:05:8b:e3:a2:52:e6:c2:
e6:40:a9:dc:7d:94:f0:18:3a:73:e4:7f:08:00:10:
8f:12:79:dc:cb:bd:65:11:3f:d1:34:97:64:ca:02:
35:66:a8:53:99:f7:16:cf:77:66:04:49:11:84:bc:
61:4e:c9:dc:76:f5:23:bc:bb:14:86:b4:62:14:88:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:33:F5:06:E5:8A:4B:27:E4:0D:DB:4A:DF:2F:E4:4B:1E:78:65:C8
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:10:90:2a:2b:84:16:e9:68:0a:0c:e5:97:fa:ce:65:75:35:
8a:8b:08:ed:74:35:f4:f4:e0:3d:c0:56:6b:5e:1d:fc:8a:d9:
cb:08:b1:a7:7a:5b:5e:f9:cb:17:c1:86:e1:e1:64:19:c8:60:
a6:90:be:aa:b4:ba:65:b6:ba:32:bd:01:14:88:9f:0e:a2:aa:
fc:1b:ec:53:07:87:e1:f6:da:df:ad:aa:47:2c:85:bc:27:a1:
a8:15:b9:e5:53:86:27:ae:38:dc:f1:23:0f:ae:c8:f7:e7:bf:
df:d1:22:06:cf:6e:7b:61:97:22:0e:50:dc:b4:04:ea:54:ab:
5c:90:b1:1f:76:6b:7b:9a:9e:bd:c0:a5:97:b1:8c:0a:53:5d:
9e:0e:13:f8:a0:d1:2e:18:ad:c6:d1:b6:eb:1c:31:ef:07:22:
2f:dc:91:9d:8d:c1:2a:19:4f:dc:23:86:d5:2f:8c:ab:dd:80:
53:c8:18:c7:39:f3:05:77:7a:de:7c:e2:b5:9f:b2:de:27:cf:
f4:0f:d7:23:24:ca:1b:85:c9:bd:da:af:7a:f7:52:4a:f0:8e:
8a:26:3c:1c:c2:13:78:c4:10:ce:8e:5d:21:4f:6b:c1:f5:16:
a0:3b:14:9a:63:43:2f:55:fa:15:ce:f9:6b:23:4e:a5:6b:5e:
bb:10:eb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:12:01 2025 by rpki-client