Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
File: saSmAco1xsg3a4mq9EO2PqQ5zbg.mft (raw, json)
Hash identifier: bhg4S+/L7mR2s3wgHydGQTILRgiQchami6T1J/PbWdM=
Subject key identifier: 89:01:64:AA:CF:AA:CC:9A:FD:88:51:FD:AC:77:E6:B3:A5:52:DE:FA
Authority key identifier: B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
Certificate issuer: /CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Certificate serial: 0199315AFEF3CD157C41E626F2907537C1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
Manifest number: 1686
Signing time: Wed 10 Sep 2025 02:01:10 +0000
Manifest this update: Wed 10 Sep 2025 02:01:10 +0000
Manifest next update: Thu 11 Sep 2025 02:01:10 +0000
Files and hashes: 1: 9PRjxeCqIjFBKjj9ZCsSUjWebm8.roa (hash: RUbumQikWEUJw86fkVBXkNxglUvMLn5BU1sBdU5SK10=)
2: Bjn95uhuPOZfmvC5Hlwb47V9emA.roa (hash: eI7zCms4yUIVsMumVhbxjLkGPCR2Oes6ouNTkj3JCYQ=)
3: fMf7eyqEUG6wDxNfLym83Kyd4aQ.roa (hash: 1Tc3rrxlFqoaEb/zNF3iOU0XDowc7uiSsGwcEKpC398=)
4: saSmAco1xsg3a4mq9EO2PqQ5zbg.crl (hash: 5fpU+ykDcsLA9ebuYfsSV3UOxLENlk8AzvHUVOasjC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:fe:f3:cd:15:7c:41:e6:26:f2:90:75:37:c1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a4a601ca35c6c8376b89aaf443b63ea439cdb8
Validity
Not Before: Sep 10 02:01:10 2025 GMT
Not After : Sep 11 02:01:10 2025 GMT
Subject: CN=890164aacfaacc9afd8851fdac77e6b3a552defa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ff:28:94:5e:41:e2:81:74:ba:bd:88:43:e7:
45:09:03:17:24:4e:e8:aa:4e:92:56:d9:b7:ec:c2:
d5:7e:63:59:71:43:b4:b0:b4:b9:05:d2:bd:d0:42:
65:2d:98:27:ce:0a:f0:7f:b4:14:c3:9e:c8:11:07:
06:f1:f9:e2:f8:fc:aa:6b:fa:92:10:f6:14:49:2f:
c0:92:4e:d6:6d:d4:61:07:0e:52:1c:b8:c4:2e:24:
f2:62:a2:dc:2d:29:0e:15:69:0b:1d:ea:49:1e:7a:
3f:0b:a7:f6:39:c1:19:a2:3e:17:fb:d6:0a:48:ef:
b2:e7:61:66:c0:44:03:0c:e3:b9:d5:a9:93:f1:fb:
f3:2c:6c:a1:db:c2:67:f1:95:78:8c:e9:4f:44:5b:
4b:ad:b5:0f:c8:e9:c4:0d:86:8a:9d:05:b5:ee:5a:
bd:34:ab:ba:9c:4f:c3:3b:a7:56:d1:ac:4f:0d:e7:
58:42:d2:0e:28:cf:a0:d6:87:0b:4d:46:8f:fc:dd:
ab:ef:1d:c5:73:c9:49:f7:b6:26:9f:a8:b1:cb:c7:
7b:e0:36:29:24:75:51:a1:e8:c4:ab:a8:ad:a4:ce:
6d:02:23:fb:3d:e7:1b:50:5c:0b:87:e3:5c:ff:22:
58:bc:39:79:f7:6b:c3:8c:e2:ad:de:b6:79:cc:4b:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:01:64:AA:CF:AA:CC:9A:FD:88:51:FD:AC:77:E6:B3:A5:52:DE:FA
X509v3 Authority Key Identifier:
keyid:B1:A4:A6:01:CA:35:C6:C8:37:6B:89:AA:F4:43:B6:3E:A4:39:CD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saSmAco1xsg3a4mq9EO2PqQ5zbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/dfec40-b86e-494c-ba10-3a5628cc81d9/1/saSmAco1xsg3a4mq9EO2PqQ5zbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:d7:71:bb:e0:8a:63:83:1f:f1:47:69:36:08:01:3b:82:23:
00:2c:5a:1d:e8:f5:eb:02:ec:59:c6:27:bb:e7:61:84:bf:83:
f2:24:6c:5e:28:26:f5:6a:49:f1:32:03:56:18:2a:ad:4c:8e:
fd:30:fc:9c:ca:83:43:3f:6e:6b:25:2b:df:2d:c5:31:7e:1e:
82:28:d3:65:59:4a:7e:e3:d1:e1:49:24:5c:20:14:7f:69:d3:
f9:93:52:81:7b:86:7b:86:6b:66:a5:c4:54:6d:e7:05:c1:76:
2f:dd:ae:12:32:b1:36:d3:fd:34:40:3e:cc:5d:7d:27:c1:89:
e3:95:56:12:f6:0d:42:f6:57:2c:a0:66:72:dc:00:fa:c6:b7:
c4:2e:6f:7f:60:c7:34:5c:a1:87:59:18:06:33:cb:9d:6b:85:
9b:71:49:9f:88:bb:42:97:a4:61:75:cf:37:43:f4:18:b6:5d:
6c:51:81:1b:af:c9:36:0a:e7:42:87:e7:d2:8a:c9:81:da:20:
74:5d:06:f2:92:9c:4d:89:c1:cf:bf:07:03:b8:b3:68:46:e6:
49:b1:90:ce:da:63:bf:ef:67:b7:0b:1f:8c:93:a7:ff:86:de:
16:f3:72:e4:7f:0e:82:ec:88:07:6e:4e:d5:ae:9d:e4:e1:b3:
91:ed:14:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkxWv7zzRV8QeYm8pB1N8GgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTRhNjAxY2EzNWM2YzgzNzZiODlhYWY0NDNiNjNlYTQz
OWNkYjgwHhcNMjUwOTEwMDIwMTEwWhcNMjUwOTExMDIwMTEwWjAzMTEwLwYDVQQD
Eyg4OTAxNjRhYWNmYWFjYzlhZmQ4ODUxZmRhYzc3ZTZiM2E1NTJkZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf8olF5B4oF0ur2IQ+dFCQMXJE7o
qk6SVtm37MLVfmNZcUO0sLS5BdK90EJlLZgnzgrwf7QUw57IEQcG8fni+Pyqa/qS
EPYUSS/Akk7WbdRhBw5SHLjELiTyYqLcLSkOFWkLHepJHno/C6f2OcEZoj4X+9YK
SO+y52FmwEQDDOO51amT8fvzLGyh28Jn8ZV4jOlPRFtLrbUPyOnEDYaKnQW17lq9
NKu6nE/DO6dW0axPDedYQtIOKM+g1ocLTUaP/N2r7x3Fc8lJ97Ymn6ixy8d74DYp
JHVRoejEq6itpM5tAiP7PecbUFwLh+Nc/yJYvDl592vDjOKt3rZ5zEtOhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkBZKrPqsya/YhR/ax35rOlUt76MB8GA1UdIwQY
MBaAFLGkpgHKNcbIN2uJqvRDtj6kOc24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAt
M2E1NjI4Y2M4MWQ5LzEvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kZmVjNDAtYjg2ZS00OTRjLWJhMTAtM2E1NjI4Y2M4MWQ5
LzEvc2FTbUFjbzF4c2czYTRtcTlFTzJQcVE1emJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9dxu+CK
Y4Mf8UdpNggBO4IjACxaHej16wLsWcYnu+dhhL+D8iRsXigm9WpJ8TIDVhgqrUyO
/TD8nMqDQz9uayUr3y3FMX4egijTZVlKfuPR4UkkXCAUf2nT+ZNSgXuGe4ZrZqXE
VG3nBcF2L92uEjKxNtP9NEA+zF19J8GJ45VWEvYNQvZXLKBmctwA+sa3xC5vf2DH
NFyhh1kYBjPLnWuFm3FJn4i7QpekYXXPN0P0GLZdbFGBG6/JNgrnQofn0orJgdog
dF0G8pKcTYnBz78HA7izaEbmSbGQztpjv+9ntwsfjJOn/4beFvNy5H8OguyIB25O
1a6d5OGzke0U1g==
-----END CERTIFICATE-----
Generated at Wed Sep 10 05:51:33 2025 by rpki-client