Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
File: SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft (raw, json)
Hash identifier: GkpQKqsGDzTsrmb5LJsax52Xlv9uAf5gG4bmgkfMSWc=
Subject key identifier: FE:7A:F8:56:11:08:12:EB:44:CD:7C:17:D8:A2:86:C8:A7:E0:B8:B0
Authority key identifier: 48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
Certificate issuer: /CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Certificate serial: 0199228C5999BBF8EC198CA4E9D5B1334FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:00:47 +0000
Manifest this update: Sun 07 Sep 2025 05:00:47 +0000
Manifest next update: Mon 08 Sep 2025 05:00:47 +0000
Files and hashes: 1: 0wd8USbWCypDvxsrm2rdEEzeU_Q.roa (hash: 4BLoMU8VT88SvJWyIY1jDuGzUxaGaHRq5WqqLmwX80o=)
2: SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl (hash: UqXX/1fopJhamnIDGTG00Q4gKXXgPOWTdMD8txmYTK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:59:99:bb:f8:ec:19:8c:a4:e9:d5:b1:33:4f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Validity
Not Before: Sep 7 05:00:47 2025 GMT
Not After : Sep 8 05:00:47 2025 GMT
Subject: CN=fe7af856110812eb44cd7c17d8a286c8a7e0b8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ca:9d:64:b9:56:a2:47:87:a2:cc:1c:01:e1:
d6:fb:2f:8b:48:88:03:f9:02:75:71:32:e7:04:00:
26:d3:7e:5e:c8:6f:93:2a:58:b4:1c:93:99:3d:ca:
8b:48:14:27:ad:16:6d:d2:0e:f1:ff:f5:37:c5:8b:
42:2d:95:a9:a1:a9:58:8f:99:c9:bd:04:48:7c:87:
7c:7b:2a:a9:69:de:52:3c:47:4a:1a:49:67:f4:1b:
43:11:35:05:95:8d:9f:f8:f9:f1:9e:8c:74:41:de:
cb:8a:90:e5:a3:e9:9a:bb:b8:c4:b2:59:55:44:57:
07:95:5b:2b:6d:61:90:54:86:53:23:3d:c8:30:2f:
1d:86:92:64:74:aa:1c:cf:31:0c:27:27:39:da:aa:
99:30:12:dd:b2:6f:33:db:24:72:99:29:90:0a:5a:
71:80:c0:f0:64:b1:60:01:74:16:83:7a:74:eb:fa:
53:73:c1:85:c3:c1:25:81:fe:b0:a8:5e:5e:8f:63:
85:ff:7b:b1:99:05:2b:37:6d:6d:44:af:b3:94:ea:
ce:af:8d:5b:a8:ca:9d:7c:c1:79:2e:75:e7:67:72:
b1:21:3e:5a:34:9c:a2:a3:3d:0f:6e:af:2e:5c:04:
dc:76:65:79:b5:94:8e:2d:0f:0e:4c:05:8e:78:7d:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7A:F8:56:11:08:12:EB:44:CD:7C:17:D8:A2:86:C8:A7:E0:B8:B0
X509v3 Authority Key Identifier:
keyid:48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:eb:28:4e:2d:0b:03:cc:96:55:23:7d:9a:87:e1:c7:aa:07:
54:62:00:1b:72:ff:85:02:50:bb:71:7c:be:c4:e8:a1:11:e4:
17:f8:78:be:2e:76:6b:3c:43:e3:8f:4f:1b:7d:2a:7e:b4:a9:
f4:6e:67:d6:a3:c3:ee:42:cf:0a:92:ed:28:e0:87:69:1e:1e:
cd:60:86:aa:78:b3:6d:cd:07:39:75:d7:f7:b4:1e:f6:e1:3d:
e8:38:7b:47:0a:6f:7b:c1:12:96:d1:05:ef:b9:11:57:10:ff:
30:75:64:0f:be:82:9d:a3:75:bb:a4:b3:fb:19:eb:d9:0f:3a:
dc:be:ca:61:89:cb:a0:bf:49:16:f3:0e:7b:21:0b:c4:6c:97:
5f:89:ed:2b:75:c0:28:d1:11:3c:17:16:1c:0e:10:c8:d2:ca:
ee:f0:f6:02:65:96:fd:51:24:61:8c:66:fb:89:6b:3f:e0:83:
52:b8:b1:0c:4e:06:59:be:6d:f0:cf:db:63:ae:68:ae:2c:df:
3f:a5:3b:74:26:80:b9:e5:9f:de:16:d0:d2:77:2f:16:8c:39:
1a:d2:cb:4a:13:64:72:02:17:70:eb:95:d1:c7:fc:14:b9:5b:
e4:10:62:01:52:55:f1:26:fc:57:19:d0:18:84:28:e1:a2:ad:
39:cd:0d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:16 2025 by rpki-client