Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
File: SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft (raw, json)
Hash identifier: xnewwzgXnPHSrYlEZM4vTQbIOx4zjAQgluXzDsejCjs=
Subject key identifier: 2A:90:62:50:CE:1E:ED:D9:63:2F:1F:6B:85:30:B1:B3:CF:C3:69:53
Authority key identifier: 48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
Certificate issuer: /CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Certificate serial: 019A70A4D39A1527CA930D1F20F9AB25C3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:00:41 +0000
Manifest this update: Tue 11 Nov 2025 02:00:41 +0000
Manifest next update: Wed 12 Nov 2025 02:00:41 +0000
Files and hashes: 1: 0wd8USbWCypDvxsrm2rdEEzeU_Q.roa (hash: 4BLoMU8VT88SvJWyIY1jDuGzUxaGaHRq5WqqLmwX80o=)
2: SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl (hash: 5XhMWVtZ7j3KNHPCw6wCMpdrGi1tYdtX8A+ujklDvNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:d3:9a:15:27:ca:93:0d:1f:20:f9:ab:25:c3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Validity
Not Before: Nov 11 02:00:41 2025 GMT
Not After : Nov 12 02:00:41 2025 GMT
Subject: CN=2a906250ce1eedd9632f1f6b8530b1b3cfc36953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:63:51:92:9a:37:82:a7:06:c0:7c:38:6b:0d:
7b:69:70:8a:b6:2d:80:6b:d8:59:d0:04:5c:59:2f:
25:21:a1:c7:dd:13:f0:95:23:db:5b:98:08:dd:2c:
c0:9b:c5:2f:69:1c:0b:a7:c3:51:7c:fd:97:e0:01:
8c:0f:5d:49:42:22:7c:fa:14:f1:20:ce:87:4d:eb:
57:73:1e:83:a1:48:24:87:b2:ba:e7:83:f7:f6:42:
fc:98:9f:04:8a:e7:05:a6:14:7d:60:06:a8:17:4b:
ab:fa:05:17:96:94:a9:15:0a:7f:af:34:fe:2a:7f:
3d:42:f9:30:fe:a7:7a:84:b7:13:c9:a3:6c:b3:45:
87:d1:b1:f4:64:8c:ff:b9:64:47:95:2c:5d:01:19:
7a:2e:13:94:0a:e6:26:a2:e0:74:49:2e:13:c3:df:
4e:57:c1:68:97:17:0c:fe:c5:b0:05:ee:ea:27:7d:
d0:26:ed:50:5f:88:9c:11:b6:f3:b5:c7:28:10:41:
e4:71:d1:51:b4:f0:59:38:26:fe:fc:75:42:c6:21:
b2:ef:66:87:49:25:10:4b:44:3a:dc:bd:23:bc:0a:
55:44:60:ed:1c:0d:0a:b9:03:54:93:41:4a:a8:35:
4e:dd:8a:26:9b:5e:69:9f:e5:e6:3f:16:35:7f:89:
88:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:90:62:50:CE:1E:ED:D9:63:2F:1F:6B:85:30:B1:B3:CF:C3:69:53
X509v3 Authority Key Identifier:
keyid:48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f8:ff:d6:e6:df:e9:e7:6a:6d:e0:17:09:9f:f5:16:1b:3f:
43:48:d4:78:4c:cd:b4:e3:b6:b5:e3:f8:28:cd:2e:23:b0:be:
87:12:5c:2b:b4:55:cd:b2:81:5a:d2:ff:3c:db:e5:91:e8:65:
07:1a:56:71:88:50:26:4d:84:9b:94:1f:a6:ae:64:2b:98:ed:
32:89:9a:f3:99:4c:57:71:fa:47:17:d8:96:9e:c4:38:08:f6:
3d:f3:26:0d:5d:5c:38:68:5f:31:a5:be:7f:71:51:f2:b0:4c:
90:c8:3a:fa:2d:51:fc:d4:8b:c6:4b:2e:81:ff:ee:40:08:a0:
9b:54:49:21:e4:f4:3a:8b:a3:46:d1:1a:94:da:13:1d:29:5c:
a5:5a:bf:1d:46:58:0a:d0:b4:af:75:d4:d3:f4:87:6a:43:76:
15:63:57:73:19:9c:c4:3b:89:ca:aa:a7:56:ba:c8:6b:73:5c:
1f:c4:18:e4:7e:ef:01:bc:44:21:fe:4c:05:9c:26:08:3c:1f:
22:6f:c5:fd:d0:50:72:2f:54:4d:e9:8b:06:91:e7:15:cd:c6:
25:e5:f3:9e:d7:2d:af:c9:a8:cb:d1:36:13:e9:83:89:63:a3:
46:20:e0:50:89:6a:bf:90:e3:6e:2a:82:5c:88:53:d6:74:79:
12:4a:a9:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpNOaFSfKkw0fIPmrJcPwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDUyNmRiZjNkNTc4ZWQ4YjYzMGMwZTcxZGJkMThjZDU0
N2E1Y2QwHhcNMjUxMTExMDIwMDQxWhcNMjUxMTEyMDIwMDQxWjAzMTEwLwYDVQQD
EygyYTkwNjI1MGNlMWVlZGQ5NjMyZjFmNmI4NTMwYjFiM2NmYzM2OTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGNRkpo3gqcGwHw4aw17aXCKti2A
a9hZ0ARcWS8lIaHH3RPwlSPbW5gI3SzAm8UvaRwLp8NRfP2X4AGMD11JQiJ8+hTx
IM6HTetXcx6DoUgkh7K654P39kL8mJ8EiucFphR9YAaoF0ur+gUXlpSpFQp/rzT+
Kn89Qvkw/qd6hLcTyaNss0WH0bH0ZIz/uWRHlSxdARl6LhOUCuYmouB0SS4Tw99O
V8FolxcM/sWwBe7qJ33QJu1QX4icEbbztccoEEHkcdFRtPBZOCb+/HVCxiGy72aH
SSUQS0Q63L0jvApVRGDtHA0KuQNUk0FKqDVO3Yomm15pn+XmPxY1f4mIjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqQYlDOHu3ZYy8fa4UwsbPPw2lTMB8GA1UdIwQY
MBaAFEgFJtvz1Xjti2MMDnHb0YzVR6XNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FVbTJfUFZlTzJMWXd3T2NkdlJqTlZIcGMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wODdjNzctOGZhMC00MWExLWIyOGUt
ODAxMGYxM2JhMTVhLzEvU0FVbTJfUFZlTzJMWXd3T2NkdlJqTlZIcGMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wODdjNzctOGZhMC00MWExLWIyOGUtODAxMGYxM2JhMTVh
LzEvU0FVbTJfUFZlTzJMWXd3T2NkdlJqTlZIcGMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPj/1ubf
6edqbeAXCZ/1Fhs/Q0jUeEzNtOO2teP4KM0uI7C+hxJcK7RVzbKBWtL/PNvlkehl
BxpWcYhQJk2Em5Qfpq5kK5jtMoma85lMV3H6RxfYlp7EOAj2PfMmDV1cOGhfMaW+
f3FR8rBMkMg6+i1R/NSLxksugf/uQAigm1RJIeT0OoujRtEalNoTHSlcpVq/HUZY
CtC0r3XU0/SHakN2FWNXcxmcxDuJyqqnVrrIa3NcH8QY5H7vAbxEIf5MBZwmCDwf
Im/F/dBQci9UTemLBpHnFc3GJeXzntctr8moy9E2E+mDiWOjRiDgUIlqv5DjbiqC
XIhT1nR5EkqpcQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:46 2025 by rpki-client