Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
File: SAqutTeS1SAWm84oDD3Yb4N27GM.mft (raw, json)
Hash identifier: xoA8aa6DlchIvsODp5CYbYonPC/dGbESi7Cq5b/nmwY=
Subject key identifier: A2:01:DC:A4:B6:FA:2F:FF:7E:F1:06:9F:21:19:6A:76:E9:24:C8:31
Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
Certificate issuer: /CN=480aaeb53792d520169bce280c3dd86f8376ec63
Certificate serial: 019921E74F2CE7CEDFB24620C8DD92B96920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 02:00:30 +0000
Manifest this update: Sun 07 Sep 2025 02:00:30 +0000
Manifest next update: Mon 08 Sep 2025 02:00:30 +0000
Files and hashes: 1: Kc84xCLoopoVZjLsNJRLj2XaVE4.roa (hash: EYoVSxaior1IONB3NcpWKZcJ8AkylxdNSnDbeuoh7e8=)
2: SAqutTeS1SAWm84oDD3Yb4N27GM.crl (hash: CVVA2HAB0F7MytpPrDN0j38p5xtkoFZDR1XCh/AoaxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:4f:2c:e7:ce:df:b2:46:20:c8:dd:92:b9:69:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63
Validity
Not Before: Sep 7 02:00:30 2025 GMT
Not After : Sep 8 02:00:30 2025 GMT
Subject: CN=a201dca4b6fa2fff7ef1069f21196a76e924c831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c9:42:30:14:1e:f1:3f:a9:6a:b7:ef:92:71:
52:af:87:31:8a:0c:5c:5a:94:26:ec:f7:71:f9:a4:
70:30:f6:61:47:d6:cb:6b:1c:90:44:42:78:6b:dc:
76:0d:6c:e9:0d:ef:c4:54:ae:e3:4e:b9:46:a9:4f:
20:8f:08:52:45:4d:fa:8b:40:dd:cf:be:bf:38:81:
8c:24:ec:f1:e0:e1:6b:ef:bc:47:3a:98:59:74:81:
05:fb:1a:c0:50:1c:f3:55:f5:02:1b:75:31:4e:c2:
00:9d:0f:f4:e6:e7:f6:cd:22:70:bc:86:ea:d6:1f:
cc:3d:af:70:75:ea:c6:b4:87:4e:09:4d:4b:99:9e:
9e:b9:b2:b9:3e:c0:d0:f7:a6:c0:65:35:0b:c4:44:
b6:bb:da:90:6b:84:21:5c:2e:1e:d7:90:b1:e1:1d:
34:36:97:27:e5:ce:19:34:a9:f7:3b:7d:91:55:46:
61:d0:2c:7a:c0:ce:88:04:bd:3f:ad:2d:67:cb:09:
ee:e7:08:eb:30:f0:f5:9d:6e:21:9c:e6:8f:1b:00:
b7:2b:68:80:02:0c:25:ce:8a:74:8b:01:d0:f9:05:
d6:14:f9:ff:db:bf:a4:a0:ef:49:97:59:6d:50:f9:
f5:ac:bc:96:99:67:52:33:aa:f0:d8:a6:94:fb:60:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:01:DC:A4:B6:FA:2F:FF:7E:F1:06:9F:21:19:6A:76:E9:24:C8:31
X509v3 Authority Key Identifier:
keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:68:52:00:cb:74:de:04:99:fb:32:a3:0c:eb:2b:4f:5e:83:
30:02:d2:cb:ac:f7:88:fd:d5:05:06:8f:88:cd:40:0b:0a:ab:
14:ca:8e:63:e8:63:14:a3:ec:93:a9:3f:72:4c:3c:3a:33:47:
1d:a8:13:33:68:0b:9f:7b:b0:a9:ed:9c:89:f0:5c:2b:6a:ac:
63:fe:d6:6a:54:41:b8:e6:f6:69:85:d8:3f:9d:09:21:34:a6:
ea:5d:17:ec:10:3a:4c:33:9d:6e:2e:3f:1e:91:59:85:69:9a:
41:67:ed:eb:c0:95:a4:17:69:2d:87:2a:e8:94:b7:31:72:34:
66:34:b4:11:bd:11:66:34:11:5f:cd:db:f8:14:22:e3:41:a2:
c0:e0:4c:5d:55:30:fe:5e:d0:96:4c:78:4b:90:e6:12:d9:00:
ef:c8:c3:12:fb:64:fa:87:75:76:0a:03:b9:64:08:0d:0a:22:
a0:87:c8:87:c3:27:e0:a2:7a:cc:83:2f:40:58:2e:1b:22:d4:
c9:06:62:67:6c:aa:d1:a6:b0:99:fa:1e:ee:f2:f2:7f:54:e7:
aa:3b:89:94:92:dd:d5:cb:70:1a:23:e7:f5:b5:ef:85:56:ef:
78:03:91:76:43:7a:e8:a4:e6:bd:68:38:85:53:d5:25:e0:d5:
b2:3a:1b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:54:02 2025 by rpki-client